
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier: yqsnVjDa0od7UMe3bNVvGLo6H1ahaNFgghh9beaXNK8=
Subject key identifier: BA:0E:D3:73:DB:F3:46:DD:A9:BA:7D:3E:5F:E0:A2:5A:B2:C6:18:FC
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 359E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number: 3567
Signing time: Mon 20 Apr 2026 14:37:58 +0000
Manifest this update: Mon 20 Apr 2026 14:37:57 +0000
Manifest next update: Mon 27 Apr 2026 14:37:57 +0000
Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: 2GBEta6nnWJiKCkuXPHpLwoopO4L0Z+YcpkJpwh0hRk=)
2: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=)
3: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=)
4: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 14:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13726 (0x359e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Apr 20 14:37:57 2026 GMT
Not After : Apr 27 14:37:57 2026 GMT
Subject: CN=69e63a46-4981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:96:ff:02:15:ec:39:ad:c4:1a:bc:1f:a4:c4:
ff:f5:86:44:13:31:17:ac:f8:33:a3:dc:ee:2d:4e:
44:1e:df:02:4b:39:54:e1:3a:50:cc:7e:94:0d:75:
d1:75:93:d5:2c:02:d5:8b:70:1a:10:37:7d:ec:0d:
c0:c1:fd:9d:96:7d:15:3e:1a:ba:ef:a2:35:bb:e3:
1f:10:92:68:da:76:b4:ad:38:a0:13:d5:9f:9d:d6:
0d:9c:dc:bf:67:21:9a:42:9c:74:d1:3e:83:f0:a4:
b5:ca:5b:ee:3b:71:c4:b4:4b:f3:5d:b2:b7:8b:18:
e5:2b:1a:28:28:2e:d8:3f:a3:b7:8a:bb:a2:38:9e:
7b:ea:03:c7:24:db:88:92:7d:d1:05:ec:dd:2a:84:
fe:44:55:d1:26:d7:24:4d:9e:ba:0d:96:3f:8c:db:
37:1e:82:9e:93:ab:63:36:26:b4:07:17:39:69:05:
2a:bb:52:a3:ef:63:9f:47:d3:71:e6:14:da:d8:49:
38:5f:3c:2f:2d:5f:6d:4b:90:6a:c8:ba:65:ef:5c:
b9:4e:fc:72:55:0f:f2:a2:a7:bc:5f:18:52:26:5e:
94:82:73:a7:bc:ee:ea:8d:4a:97:47:23:09:fc:03:
3a:c4:84:52:54:6c:fc:82:0f:80:76:79:e2:d0:3b:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0E:D3:73:DB:F3:46:DD:A9:BA:7D:3E:5F:E0:A2:5A:B2:C6:18:FC
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:94:87:22:26:7d:47:ab:46:a8:bf:56:36:44:50:c8:02:a1:
35:43:67:9e:9c:7f:95:00:08:14:58:49:8e:0b:f7:5e:5f:7b:
3e:a0:2f:2c:3f:d6:2a:33:8c:a5:07:9a:d0:ff:5d:ef:82:01:
d9:56:fc:50:e0:f1:9f:02:ee:4d:61:33:13:f0:07:a6:88:ba:
11:8e:c9:36:0a:7f:c6:c0:5c:60:6a:79:97:22:9c:7c:f0:17:
cb:1a:d0:34:13:85:10:9f:68:e2:6d:30:32:c7:55:4d:fc:4e:
90:b7:28:15:44:a5:f8:82:e6:0c:2e:70:fd:98:bc:ee:54:b2:
ae:13:0e:f9:f2:cf:fc:04:bf:0e:27:a2:44:1a:d5:41:d9:bd:
ec:e2:14:92:e8:f0:8a:53:fc:91:d0:9f:39:3c:57:18:d7:e5:
3c:02:b2:4c:9e:f8:17:c6:19:20:8e:df:b4:c4:1a:c8:44:9c:
78:27:61:9d:7d:1b:c4:76:91:1f:7f:1c:55:8d:68:31:39:d2:
c9:68:a9:67:1e:54:23:05:70:a2:4c:7c:c7:9f:7c:ae:ab:38:
6d:3e:82:d2:33:39:a0:69:25:52:d6:c1:d9:dc:90:47:d2:71:
ee:c8:3e:73:8a:5c:2b:c9:ba:b4:c3:87:d0:66:7d:d1:7c:19:
5b:f0:05:53
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUE0OEYxMTAvBgNVBAUTKEJFMEU3QTg5MEY3MjgxQzY1NDYzMkU4QkU4MEVCQkY5
RkZCNTY1MDMwHhcNMjYwNDIwMTQzNzU3WhcNMjYwNDI3MTQzNzU3WjAYMRYwFAYD
VQQDEw02OWU2M2E0Ni00OTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkpb/AhXsOa3EGrwfpMT/9YZEEzEXrPgzo9zuLU5EHt8CSzlU4TpQzH6UDXXR
dZPVLALVi3AaEDd97A3Awf2dln0VPhq676I1u+MfEJJo2na0rTigE9WfndYNnNy/
ZyGaQpx00T6D8KS1ylvuO3HEtEvzXbK3ixjlKxooKC7YP6O3iruiOJ576gPHJNuI
kn3RBezdKoT+RFXRJtckTZ66DZY/jNs3HoKek6tjNia0Bxc5aQUqu1Kj72OfR9Nx
5hTa2Ek4XzwvLV9tS5BqyLpl71y5TvxyVQ/yoqe8XxhSJl6UgnOnvO7qjUqXRyMJ
/AM6xIRSVGz8gg+Adnni0Dv7uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLoO03Pb
80bdqbp9Pl/golqyxhj8MB8GA1UdIwQYMBaAFL4OeokPcoHGVGMui+gOu/n/tWUD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTQ4Ri84QzgxQTg1NjFE
OEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdjWlVZeTZMNkE2Ny1mLTFa
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZnNTZpUTl5Z2NaVVl5Nkw2QTY3LWYtMVpRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QTQ4Ri84QzgxQTg1NjFEOEQxMUUyODY2QzUwRUIwOEIwMkNEMi92ZzU2aVE5eWdj
WlVZeTZMNkE2Ny1mLTFaUU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIJSHIiZ9R6tGqL9WNkRQyAKhNUNnnpx/lQAIFFhJjgv3Xl97PqAvLD/WKjOM
pQea0P9d74IB2Vb8UODxnwLuTWEzE/AHpoi6EY7JNgp/xsBcYGp5lyKcfPAXyxrQ
NBOFEJ9o4m0wMsdVTfxOkLcoFUSl+ILmDC5w/Zi87lSyrhMO+fLP/AS/DieiRBrV
Qdm97OIUkujwilP8kdCfOTxXGNflPAKyTJ74F8YZII7ftMQayESceCdhnX0bxHaR
H38cVY1oMTnSyWipZx5UIwVwokx8x598rqs4bT6C0jM5oGklUtbB2dyQR9Jx7sg+
c4pcK8m6tMOH0GZ90XwZW/AFUw==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:09:36 2026 by rpki-client