
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
File: VktpF48mnvuWt2kW94FwdU6PDIc.mft (raw, json)
Hash identifier: R9KHRWZ+jkBdKIhS5/Dc7h53yCD5Hi8Ji57HrOvFDcw=
Subject key identifier: E4:C0:A1:35:F4:70:8F:A6:FD:6D:4C:A3:34:7D:DA:05:78:31:10:16
Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Certificate serial: 9E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
Manifest number: 95
Signing time: Fri 17 Apr 2026 07:11:17 +0000
Manifest this update: Fri 17 Apr 2026 07:11:16 +0000
Manifest next update: Fri 24 Apr 2026 07:11:16 +0000
Files and hashes: 1: VktpF48mnvuWt2kW94FwdU6PDIc.crl (hash: LcqlyKsKa6cFVh3TGTL/sFU2cSn3HZH11XNsq5Dpxns=)
2: AE31872C5DBD11F083DD7F61C4F9AE02.roa (hash: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87
Validity
Not Before: Apr 17 07:11:16 2026 GMT
Not After : Apr 24 07:11:16 2026 GMT
Subject: CN=69e1dd15-8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fe:3b:7c:6f:cc:d2:dd:93:ce:22:03:3f:fa:
b7:e3:dc:6e:21:7b:44:6b:2f:3b:c8:d5:bc:79:09:
df:0f:90:69:79:22:12:b7:9e:27:fa:60:57:69:60:
cb:cf:e9:1b:ce:67:53:d5:cb:a4:78:ef:53:c5:5c:
02:c9:01:3e:22:bc:5f:a8:f4:25:af:b4:0c:b5:2b:
d4:42:fd:be:a4:81:1e:ea:08:48:21:c2:39:35:59:
74:38:b1:7f:71:e9:11:9b:2a:e7:30:a8:ba:5e:d2:
22:63:18:84:c8:1d:74:bd:f2:a4:e1:a5:bd:c9:f9:
fd:dc:bc:2d:6e:ab:4a:a3:02:28:c5:0e:2e:41:d3:
c8:c4:3e:7f:b1:31:3b:8a:8c:0a:ca:47:f1:4a:df:
8f:96:67:92:6a:eb:6c:1d:0b:9d:f2:33:ee:d4:59:
a0:7a:2b:25:8f:f4:60:ff:4f:e8:90:6b:af:ca:fd:
aa:dc:dc:06:27:5c:4e:10:19:70:7f:13:40:85:0f:
a0:c2:0e:f2:1d:7a:91:39:fd:8b:dc:d9:6e:d6:ee:
e6:ab:14:9e:19:b2:b7:7c:cf:8f:f5:43:25:45:5b:
96:ef:18:22:05:ef:e6:40:41:d9:8c:cb:94:3d:40:
2a:9b:00:78:a1:04:b2:1d:4a:dd:33:e7:70:23:2a:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:A1:35:F4:70:8F:A6:FD:6D:4C:A3:34:7D:DA:05:78:31:10:16
X509v3 Authority Key Identifier:
keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:1a:40:f9:dc:91:a8:6b:66:c8:e2:91:76:4f:e0:ce:fd:
ff:9a:4d:37:79:17:4a:08:c9:6b:17:ec:da:17:4f:7b:8a:44:
07:76:99:a5:40:92:94:46:b3:46:3b:07:04:9f:0b:dd:8c:a5:
dc:04:f6:b9:14:b3:bb:9e:29:4a:e6:f2:49:da:e7:95:2a:fd:
65:ef:6b:11:24:1f:57:67:26:20:ba:a5:a9:f9:04:47:f9:96:
76:0a:44:ba:5f:8f:48:08:c8:ef:e5:29:b1:8c:4f:3b:5e:ac:
a4:6d:3f:93:e9:85:89:5f:b2:89:7e:58:ef:06:a6:0e:e8:a7:
55:19:c1:7b:67:3b:ae:e8:d4:4a:68:63:6b:d2:43:07:5f:74:
b5:bb:a3:e6:d8:01:c7:b0:bb:97:7b:f4:f8:39:bb:81:f9:6b:
17:68:95:ca:70:7f:b9:fb:58:8b:da:b3:c8:97:af:b0:49:05:
5e:c5:42:17:41:49:bb:14:80:d2:8f:a5:5b:70:52:cf:71:c8:
a7:21:61:a3:b3:96:08:3a:a4:23:21:44:31:66:12:4a:cb:65:
f6:f2:96:b7:1f:1d:be:b5:44:09:7d:fe:28:53:59:e6:8f:40:
25:a7:73:8f:57:4a:d5:30:95:2d:41:33:b6:86:3d:a4:7a:b7:
25:f2:dd:7a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1
NEU4RjBDODcwHhcNMjYwNDE3MDcxMTE2WhcNMjYwNDI0MDcxMTE2WjAYMRYwFAYD
VQQDEw02OWUxZGQxNS04NjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/47fG/M0t2TziIDP/q349xuIXtEay87yNW8eQnfD5BpeSISt54n+mBXaWDL
z+kbzmdT1cukeO9TxVwCyQE+IrxfqPQlr7QMtSvUQv2+pIEe6ghIIcI5NVl0OLF/
cekRmyrnMKi6XtIiYxiEyB10vfKk4aW9yfn93LwtbqtKowIoxQ4uQdPIxD5/sTE7
iowKykfxSt+PlmeSautsHQud8jPu1Fmgeislj/Rg/0/okGuvyv2q3NwGJ1xOEBlw
fxNAhQ+gwg7yHXqROf2L3Nlu1u7mqxSeGbK3fM+P9UMlRVuW7xgiBe/mQEHZjMuU
PUAqmwB4oQSyHUrdM+dwIyonKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOTAoTX0
cI+m/W1MozR92gV4MRAWMB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE
QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE
SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTlDNS9GQzAxRTg3QzVEQkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52
dVd0MmtXOTRGd2RVNlBESWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ5IaQPnckahrZsjikXZP4M79/5pNN3kXSgjJaxfs2hdPe4pEB3aZpUCSlEaz
RjsHBJ8L3Yyl3AT2uRSzu54pSubySdrnlSr9Ze9rESQfV2cmILqlqfkER/mWdgpE
ul+PSAjI7+UpsYxPO16spG0/k+mFiV+yiX5Y7wamDuinVRnBe2c7rujUSmhja9JD
B190tbuj5tgBx7C7l3v0+Dm7gflrF2iVynB/uftYi9qzyJevsEkFXsVCF0FJuxSA
0o+lW3BSz3HIpyFho7OWCDqkIyFEMWYSSstl9vKWtx8dvrVECX3+KFNZ5o9AJadz
j1dK1TCVLUEztoY9pHq3JfLdeg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 21:04:43 2026 by rpki-client