
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier: GywRUdKYF9hCwnMmBDlIunZsvWxH70+Fku5fhXmVaho=
Subject key identifier: 4C:FE:F6:74:F3:65:A9:0A:99:9C:14:14:65:88:4E:90:6D:92:86:5A
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial: 02B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number: 02A1
Signing time: Sun 05 Apr 2026 01:17:33 +0000
Manifest this update: Sun 05 Apr 2026 01:17:33 +0000
Manifest next update: Sun 12 Apr 2026 01:17:33 +0000
Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: TFxpKOqprXR46ZVhUO2XNgoCpc9wOn2wvnHcaB/4I8E=)
2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: s6hQH/XUcOEn8mr++TJ3GkI04opViNwePvL4KgonitQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 691 (0x2b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Validity
Not Before: Apr 5 01:17:33 2026 GMT
Not After : Apr 12 01:17:33 2026 GMT
Subject: CN=69d1b82d-fcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:5d:b1:0e:83:19:c4:8f:b2:8b:8c:2e:c5:
43:4f:bc:09:7d:82:6b:5b:f1:ef:b4:f6:c9:7b:0d:
39:53:e4:69:c9:2a:5e:c1:d3:3d:e9:fb:f0:d6:57:
5a:b2:e6:f1:15:d9:42:b7:d1:33:1b:6a:20:34:03:
b5:92:56:47:e6:28:19:e5:e2:c0:4e:a8:14:2e:22:
f7:da:9d:78:3a:62:43:35:3e:24:ac:d6:e1:6a:92:
72:b1:d6:57:fe:96:fe:db:c3:7b:12:e1:7e:10:6d:
ef:db:61:86:a5:d4:05:ed:31:20:69:2d:b0:09:5b:
c9:c5:2b:b7:91:e7:90:76:f4:86:62:f8:b6:50:1b:
bd:32:73:c0:2b:83:2d:b5:70:48:58:d2:45:a6:43:
99:0f:64:4c:b8:40:a1:19:d2:9f:c3:00:e2:d2:f0:
15:92:b0:c2:cb:fc:0f:1c:4d:19:db:a5:25:c0:71:
c0:d1:bf:6b:2d:cd:ed:32:06:31:b9:b1:dd:aa:b6:
99:0d:92:5d:1f:56:fb:7e:39:c5:9d:00:86:81:f4:
80:54:3a:cc:f5:bd:7e:21:d5:63:59:2e:e4:e6:07:
97:12:b3:6e:97:1b:2a:44:d6:95:88:1f:73:49:45:
dc:f2:c7:8c:14:9b:fa:c4:7b:10:39:2a:84:3b:c1:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FE:F6:74:F3:65:A9:0A:99:9C:14:14:65:88:4E:90:6D:92:86:5A
X509v3 Authority Key Identifier:
keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d1:0f:b8:d0:69:07:b3:fb:3d:6a:42:8f:14:b5:6f:2c:a4:
a1:63:14:84:5b:d5:45:56:07:52:fa:9e:d8:29:ed:1c:65:bf:
84:92:0d:53:fb:e0:11:18:0c:e9:f9:b7:92:00:d5:fa:f6:8e:
c2:57:8d:3c:f8:85:5b:ea:ac:c5:77:c5:fb:33:43:83:2b:9f:
8f:20:3c:a2:3c:18:30:bb:48:61:eb:df:1a:af:c5:88:35:d0:
58:da:21:7d:84:b1:24:33:08:72:b4:52:37:7e:c0:89:5b:94:
1c:10:18:13:d8:33:aa:d5:53:30:96:52:35:b4:7b:15:d3:23:
96:b3:29:1b:92:f6:6b:2b:7c:e8:40:50:1c:8e:91:a4:17:c7:
f4:5f:25:5f:c5:d0:f3:5b:45:37:dc:2a:8a:96:33:d3:a4:52:
c2:18:d7:a6:71:cd:c5:ff:74:77:3b:70:2b:b5:99:69:98:61:
5f:dc:0b:ac:51:7d:6b:bf:21:ae:b6:0a:24:c6:0c:a8:35:f0:
1d:a3:fa:fe:63:62:92:fc:72:a2:eb:29:4c:23:77:06:c3:5f:
ea:9a:f5:28:1c:16:6a:4b:8d:bb:07:72:c4:c0:7a:eb:be:7a:
ae:3d:e9:cb:70:e2:d9:f3:a2:8e:18:44:af:39:98:5f:f9:08:
a8:fc:b1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:31 2026 by rpki-client