
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier: ZJ+y7xKJgPeqqojgwHeGbAnj2c7Ycjr3jwwa3hNpOoM=
Subject key identifier: 4B:2D:6B:5F:89:DF:B5:0C:58:24:D5:3F:83:A4:77:3A:8F:F8:89:C9
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number: F4
Signing time: Mon 19 Oct 2026 07:02:22 +0000
Manifest this update: Mon 19 Oct 2026 07:02:22 +0000
Manifest next update: Mon 26 Oct 2026 07:02:22 +0000
Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: wcoBcvz+w1Tz4c8u25niiBxN9/XTA/TIvlXIDa0OqYI=)
2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: CwQwKB1HiO4WU+K4KyNPGS3F5C0FjCcAF6X+FcGgBgk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Validity
Not Before: Oct 19 07:02:22 2026 GMT
Not After : Oct 26 07:02:22 2026 GMT
Subject: CN=6ad5c07e-5563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3a:26:5a:b7:8a:dc:0e:f3:4d:8e:6c:d7:9c:
fa:4f:7c:87:2b:3d:b9:6d:47:fd:ab:38:32:cd:80:
3d:c9:29:ed:03:e1:e4:be:d2:3d:e4:1c:60:40:4a:
9a:7a:9b:b6:00:75:76:c7:1b:ee:c5:fb:d9:90:32:
fd:7a:fc:f5:81:95:86:06:dc:96:ea:d9:c8:c9:39:
70:4b:8a:76:4a:3b:a0:f7:ab:f5:ca:89:9f:6f:fe:
90:89:b2:89:f8:66:c9:29:58:21:45:c4:27:55:e1:
2f:f3:95:88:88:fd:fc:78:dc:97:6c:d2:a1:0c:d1:
10:76:3f:7d:3a:23:03:54:6b:95:58:fc:f6:8f:6e:
4f:9a:1c:d8:92:14:d6:3d:b6:8e:50:f0:05:ea:d6:
2f:7b:e8:35:71:42:93:40:33:a0:7a:36:68:2c:5f:
ae:67:0a:c2:6b:d9:3e:fa:3e:e0:60:d2:a9:1b:df:
d6:71:46:64:99:d5:fb:4e:18:dc:29:73:85:5a:44:
d7:f1:cd:50:6f:87:b6:a5:9f:f3:7b:31:c8:09:99:
ed:11:97:ff:c9:85:f1:63:8b:e3:90:a5:2e:2d:3f:
a6:0c:d5:20:21:39:0d:cc:f3:23:cd:1e:95:08:99:
d7:37:75:76:bf:8d:c4:93:3d:2a:f9:2d:dd:98:0f:
07:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:6B:5F:89:DF:B5:0C:58:24:D5:3F:83:A4:77:3A:8F:F8:89:C9
X509v3 Authority Key Identifier:
keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:3c:98:f6:26:8b:af:94:01:9e:58:d2:0c:48:53:f4:ab:f2:
1c:82:35:3b:ab:35:c1:7f:9a:98:d3:7f:54:85:f5:10:63:ed:
b1:19:b1:d0:a0:1b:7a:6c:76:a0:cb:2c:9e:7b:b1:bc:e5:21:
cf:d2:eb:d6:2f:90:8f:5c:41:27:08:c5:f2:31:c8:fd:e3:de:
d3:84:b0:5a:e9:01:4a:25:64:86:ad:f6:9c:6e:51:0e:ff:14:
a3:0a:1d:4f:40:94:51:4b:61:78:2b:5a:dd:8b:fb:e4:f4:21:
06:f6:4d:19:ea:c5:b4:c7:91:30:16:5d:f0:f7:0d:fc:e5:d0:
45:22:98:29:76:17:4a:c0:a7:1b:02:9e:94:8e:32:77:51:3e:
77:56:55:d4:80:ce:9a:b2:0f:9f:ea:f7:14:fc:db:0a:b0:44:
2f:53:10:46:b2:11:8e:a5:59:79:0e:d0:fc:e4:0a:f3:9c:ac:
7c:5f:2e:89:cc:81:e9:d9:72:cb:4c:da:f0:ae:e3:99:fe:9e:
c2:14:40:51:65:71:c9:da:58:82:4d:3d:c8:f0:32:0f:0a:b0:
19:c4:0e:d5:19:cf:03:a5:16:c1:91:70:9d:0c:c5:0c:67:d0:
b3:29:6c:e4:64:f4:f3:d6:60:5c:b8:cb:98:be:09:0f:78:67:
54:8e:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:44:20 2026 by rpki-client