
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json)
Hash identifier: hpfO46GDOne58A5QQmCBOoY1+LWyoyjRnmWTjzbtyGA=
Subject key identifier: 9B:99:85:AD:49:87:09:CF:B0:6C:47:3B:A2:51:81:B7:2C:42:88:CF
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
Manifest number: 0136
Signing time: Wed 07 Oct 2026 06:04:08 +0000
Manifest this update: Wed 07 Oct 2026 06:04:08 +0000
Manifest next update: Wed 14 Oct 2026 06:04:08 +0000
Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: CwdNYArVKwaXWa1X2B0rL0W3c/hWAQkY3AfeBS7C+Nc=)
2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: hBcnC5PFlnMmxlDxFJ5KaA+un9OP3sAitrTcxqtGxZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Validity
Not Before: Oct 7 06:04:08 2026 GMT
Not After : Oct 14 06:04:08 2026 GMT
Subject: CN=6ac5e0d8-a2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:ec:0c:b6:d4:52:51:25:d5:c2:2f:27:59:
ce:be:61:e6:cb:4b:bd:5e:3f:15:f6:a7:15:63:68:
7f:1e:ee:5e:8b:c7:9b:4a:c0:b8:8f:c7:3a:5d:3c:
fb:47:47:a9:35:68:40:74:02:6d:a9:0f:45:81:ee:
0c:00:c8:d0:8c:a7:71:8c:25:7f:17:e5:3d:9f:6d:
d0:78:07:f1:4e:5d:dc:6b:95:08:bc:f9:28:82:0d:
19:5a:25:41:d8:24:96:12:03:f3:cf:5f:3f:8a:e1:
31:4c:85:6a:c2:da:18:e0:c2:f9:07:22:86:51:7e:
7c:bf:32:94:94:b5:d3:47:3b:51:f5:48:b0:ef:43:
60:2a:6d:44:27:26:6f:25:77:8d:78:ca:04:06:a8:
dd:08:39:6e:3c:43:1c:f8:45:7d:82:73:06:fb:fd:
cb:8a:ca:88:80:4c:81:97:0f:5d:ab:e1:38:06:70:
4a:f3:6f:34:1a:7d:60:dd:15:53:2f:24:6c:cd:e6:
89:dc:11:fa:64:4d:eb:17:dd:91:dc:6c:34:7c:ae:
ad:1f:75:e9:a1:2e:9a:d9:be:99:ba:4b:6f:cf:98:
59:94:02:7a:b3:f0:92:c9:a2:b8:01:27:6e:86:1f:
6d:16:c7:8b:93:1b:54:3c:6b:21:83:ac:11:53:dd:
a5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:99:85:AD:49:87:09:CF:B0:6C:47:3B:A2:51:81:B7:2C:42:88:CF
X509v3 Authority Key Identifier:
keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:5a:25:a4:51:75:3f:c1:e9:31:40:a1:1a:9f:f2:2b:15:58:
63:d2:be:9a:3d:c2:2d:f0:94:80:dc:7d:7a:fc:31:2e:25:ba:
39:15:6c:84:0b:52:17:30:fc:16:8a:92:d2:7a:97:fb:5d:81:
d1:65:d0:9b:d9:2e:e8:d1:f4:68:df:e5:31:1f:6d:cd:8f:c7:
28:49:f1:89:d6:be:be:49:3e:f7:ae:c5:74:e9:e8:3f:57:ad:
a4:f2:d0:74:d0:2d:4c:55:2d:53:08:49:30:77:75:a4:52:2d:
f3:5d:61:b3:1a:d3:a9:dd:69:02:49:45:0a:69:92:b8:64:24:
88:0f:ab:36:0c:22:72:9d:42:3a:43:aa:e0:bb:4f:cf:7b:1e:
d3:1a:dc:f7:44:66:06:42:5b:41:12:35:b5:29:f9:7b:11:aa:
49:24:19:eb:6d:74:75:02:d8:f2:0a:a6:f1:27:11:d3:54:b7:
b8:42:56:a0:cd:b9:9f:7b:76:f8:33:78:10:a1:91:4a:60:95:
f2:0c:47:be:cc:0f:9d:8d:a9:05:e0:9f:3d:89:f0:88:99:51:
59:a8:0c:34:26:da:9d:ce:4c:a8:ab:56:9b:ea:4a:25:ff:2e:
d2:9c:55:49:43:74:33:c8:0e:55:e1:d0:6a:d3:ab:14:68:aa:
02:23:d9:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQ0IxMTAvBgNVBAUTKDU2NTIwRkExRDc2RTk1RjA4MTlCNkRERDQ5NjdCNDU1
MDQ2OTg2OUQwHhcNMjYxMDA3MDYwNDA4WhcNMjYxMDE0MDYwNDA4WjAYMRYwFAYD
VQQDEw02YWM1ZTBkOC1hMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzmHsDLbUUlEl1cIvJ1nOvmHmy0u9Xj8V9qcVY2h/Hu5ei8ebSsC4j8c6XTz7
R0epNWhAdAJtqQ9Fge4MAMjQjKdxjCV/F+U9n23QeAfxTl3ca5UIvPkogg0ZWiVB
2CSWEgPzz18/iuExTIVqwtoY4ML5ByKGUX58vzKUlLXTRztR9Uiw70NgKm1EJyZv
JXeNeMoEBqjdCDluPEMc+EV9gnMG+/3LisqIgEyBlw9dq+E4BnBK8280Gn1g3RVT
LyRszeaJ3BH6ZE3rF92R3Gw0fK6tH3XpoS6a2b6Zuktvz5hZlAJ6s/CSyaK4ASdu
hh9tFseLkxtUPGshg6wRU92lZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJuZha1J
hwnPsGxHO6JRgbcsQojPMB8GA1UdIwQYMBaAFFZSD6HXbpXwgZtt3UlntFUEaYad
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi81QjZGQTM2MEVB
NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxmQ0JtMjNkU1dlMFZRUnBo
cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTFDQi81QjZGQTM2MEVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxm
Q0JtMjNkU1dlMFZRUnBocDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAllolpFF1P8HpMUChGp/yKxVYY9K+mj3CLfCUgNx9evwxLiW6ORVshAtSFzD8
FoqS0nqX+12B0WXQm9ku6NH0aN/lMR9tzY/HKEnxida+vkk+967FdOnoP1etpPLQ
dNAtTFUtUwhJMHd1pFIt811hsxrTqd1pAklFCmmSuGQkiA+rNgwicp1COkOq4LtP
z3se0xrc90RmBkJbQRI1tSn5exGqSSQZ6210dQLY8gqm8ScR01S3uEJWoM25n3t2
+DN4EKGRSmCV8gxHvswPnY2pBeCfPYnwiJlRWagMNCbanc5MqKtWm+pKJf8u0pxV
SUN0M8gOVeHQatOrFGiqAiPZ1A==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:55:32 2026 by rpki-client