
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier: +jTHdMK8VNn4dVKZVV8zt4DrtBxrn66qBI0B5CVyQek=
Subject key identifier: A5:FA:D9:76:EA:76:E9:8E:A6:88:AD:97:A1:F3:E1:3D:5F:BD:F5:2A
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 01B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number: 0195
Signing time: Fri 15 May 2026 04:35:58 +0000
Manifest this update: Fri 15 May 2026 04:35:58 +0000
Manifest next update: Fri 22 May 2026 04:35:58 +0000
Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: vnJQfudvNARsb9oAIibkreSikU98yJGb7GQBM0HxaxY=)
2: E08658208D2D11F09327643FC4F9AE02.roa (hash: Zswp5eu2rF+6Fd4nXskCbsKQjQ2SU+1TTxWHA8wR0Rg=)
3: 222F2952038511EFAF036327C4F9AE02.roa (hash: HZRnbyUwQnET2jpBCqochXqkW7Om1vxMBHDxZVfLQkE=)
4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: 2HF8hzKomEoBRaeHEpMuKIt1BoUXvbnhjONs7ASQa/o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 04:35:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 439 (0x1b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: May 15 04:35:58 2026 GMT
Not After : May 22 04:35:58 2026 GMT
Subject: CN=6a06a2ae-902d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:39:ed:d0:16:d2:0d:68:59:b5:19:03:69:
9f:c4:dd:81:e9:06:c6:e3:19:9f:59:d6:5c:74:5c:
f1:0b:19:ef:24:43:48:ef:f7:cc:e8:39:ac:2f:b0:
9e:71:02:60:83:2a:ef:5b:a2:f4:5d:8e:2c:1e:d0:
bf:0c:a9:5e:b9:16:86:0f:6d:c6:82:bf:64:94:02:
1d:cc:0d:37:c6:c2:a0:6c:42:8a:87:92:ae:13:40:
0f:f1:96:86:b4:43:c6:d7:9c:9e:d7:35:fc:04:a3:
7c:00:51:5d:c7:90:bd:c7:27:1b:d0:19:10:b9:e1:
13:fa:b3:ec:c1:63:cb:19:cb:7e:5d:06:36:29:3f:
c7:b6:2e:92:b4:6f:46:c5:56:8a:39:a4:58:39:89:
0b:79:2f:e7:82:5f:96:1d:93:d9:5a:f6:d5:d9:ce:
92:7b:ab:08:48:33:9c:82:8a:eb:20:4f:70:f4:1d:
fd:e4:79:1c:6f:de:df:4b:44:43:18:f9:82:20:f2:
35:57:47:de:82:3b:ca:9d:26:98:c9:8d:de:02:e3:
cc:67:f1:d5:37:4f:a4:69:99:35:f7:47:c3:1f:90:
8c:3a:a1:d5:38:1c:12:1c:6e:90:35:1c:4d:ba:03:
7b:66:1d:cd:90:99:02:7e:5c:d6:e0:a4:b5:77:08:
e5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:D9:76:EA:76:E9:8E:A6:88:AD:97:A1:F3:E1:3D:5F:BD:F5:2A
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:13:b3:19:3a:6e:3e:44:ff:ab:d5:f8:9b:5a:a2:e9:e0:f1:
76:80:20:6f:25:6b:b0:6a:72:90:9b:a0:57:f0:65:41:d5:75:
d7:b9:57:2a:00:f0:a9:f2:6d:ce:2d:fc:85:ea:20:09:54:bc:
0f:d6:c1:af:b4:6a:5e:d0:f8:ab:b0:9d:d9:22:33:e3:40:de:
fa:56:d9:1e:f6:a9:71:39:3b:91:b9:9b:a6:9b:9d:72:fe:89:
01:9d:3c:d0:99:1c:98:b2:96:2d:3b:c4:ff:5c:ed:75:2e:bc:
dc:47:55:69:9b:1b:2c:5a:aa:d5:a3:a2:bf:da:22:b7:46:f1:
5c:0a:6a:9e:79:ec:3e:77:40:e0:32:25:32:1f:0f:26:6e:06:
7a:ae:83:9f:82:3a:d1:ee:58:44:6f:a1:e7:2a:77:c0:3e:bf:
71:d2:10:31:1f:62:d6:16:ac:d7:4c:c2:5b:4b:aa:1d:76:ef:
96:15:1c:ae:17:8f:05:2b:58:18:4f:34:3b:c0:aa:11:3d:ec:
b9:02:4b:12:36:b6:ff:ba:83:44:ae:05:87:bd:13:34:14:2a:
39:fa:5a:6b:9a:a6:19:5c:81:22:e2:66:38:5c:92:b9:f6:37:
43:11:8e:c1:e7:58:80:9e:d6:c3:dd:0b:34:4f:0b:5a:fe:9f:
65:35:79:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:04 2026 by rpki-client