
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
File: vkiLTmCsanOmVu_bxfpnoajegSo.mft (raw, json)
Hash identifier: Hj2I6uShVIJ0R9lakohgUT39aChIMhJckt+Cj3AsT3E=
Subject key identifier: 17:FD:BB:89:BC:50:44:27:3C:13:97:67:A3:07:A7:D5:DC:3F:06:F0
Authority key identifier: BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
Certificate issuer: /CN=A91ADE0A/serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Certificate serial: 2334
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
Manifest number: 22F0
Signing time: Sat 04 Apr 2026 15:47:01 +0000
Manifest this update: Sat 04 Apr 2026 15:47:01 +0000
Manifest next update: Sat 11 Apr 2026 15:47:01 +0000
Files and hashes: 1: vkiLTmCsanOmVu_bxfpnoajegSo.crl (hash: DySDjWA3ECA24Tzh8CSFO1gsI97vkEox+NrWNjdV1lo=)
2: 815465903EB511E9881B6529C4F9AE02.roa (hash: +ANu6JmCUfWc/fEshVMRk/CtwPkSloyzKlXpU5KCY3Y=)
3: 4AB8D38E178811EF95C8DF41C4F9AE02.roa (hash: 1Kz1vE1HOF5/kl+i8Rr4tSzcXBMpG4BgFwTZXnp4/e4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9012 (0x2334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADE0A, serialNumber=BE488B4E60AC6A73A656EFDBC5FA67A1A8DE812A
Validity
Not Before: Apr 4 15:47:01 2026 GMT
Not After : Apr 11 15:47:01 2026 GMT
Subject: CN=69d13275-c06a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:7b:b2:49:80:71:7d:7f:6f:07:42:53:d4:
3d:e9:7e:e7:89:10:dd:e9:72:c1:65:57:bf:f4:d9:
94:8e:14:d9:8c:19:f9:38:2d:c4:88:75:fe:79:35:
5a:e1:61:d1:1f:55:8b:89:0f:a8:cc:2c:0e:ae:6f:
81:9f:10:56:22:20:e4:1c:2d:66:7b:30:9d:4a:25:
47:1a:ce:1c:1b:48:01:a2:e7:77:99:78:f8:71:8a:
c2:8c:51:0c:cd:f2:9d:71:22:3d:9f:29:c8:09:49:
08:24:dd:48:fd:97:5f:12:09:c9:2a:22:2b:ee:23:
39:74:13:32:3d:ee:0e:2a:d9:5b:b1:08:fa:6a:1a:
17:e4:c3:09:20:2e:5f:9f:a0:73:4d:a2:37:ba:6a:
79:38:3a:ae:15:0f:85:ce:fd:a5:cf:9a:f2:04:43:
d8:3e:31:83:7e:1e:32:cd:c1:7d:ad:a8:df:92:db:
30:04:5e:d2:9f:25:4c:06:7c:33:62:cc:1b:ad:bb:
8b:1d:6b:7e:21:f7:60:32:8f:d3:eb:6d:18:11:ae:
df:89:b7:37:13:31:72:bf:c6:9f:99:79:56:4e:0d:
2d:00:60:4d:be:70:22:a6:1d:16:d9:83:c4:6e:b4:
5e:a0:0a:46:c1:74:3b:59:94:ad:4e:70:f0:f2:33:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FD:BB:89:BC:50:44:27:3C:13:97:67:A3:07:A7:D5:DC:3F:06:F0
X509v3 Authority Key Identifier:
keyid:BE:48:8B:4E:60:AC:6A:73:A6:56:EF:DB:C5:FA:67:A1:A8:DE:81:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkiLTmCsanOmVu_bxfpnoajegSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADE0A/30D80126C11311E5B01A7269C4F9AE02/vkiLTmCsanOmVu_bxfpnoajegSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3c:e0:57:a1:b3:ef:8b:2e:95:6d:18:1b:1d:87:57:e9:e0:
22:d0:91:91:3f:35:b7:d3:0c:53:07:3d:fa:ca:b1:be:d0:7d:
57:eb:ba:b9:0b:68:4e:d0:df:ad:ce:a9:30:24:42:f5:f4:fd:
fc:09:1f:35:c7:a7:14:4e:cc:7f:8a:3a:2d:91:e5:0c:ec:63:
e5:cc:8f:b9:cf:1c:5a:3d:60:ff:31:62:1a:21:ee:af:50:5a:
6c:5a:cd:65:87:37:53:1c:8f:a3:bc:e6:9a:50:fb:cd:e0:28:
64:ea:fd:a4:45:70:74:24:1b:71:db:e5:e9:fa:91:38:af:a9:
4c:b4:fd:16:e1:96:1a:8d:88:12:82:f1:85:c0:9b:0e:5e:e5:
1b:e2:f1:39:e1:66:0d:30:37:e8:32:37:4d:b3:9a:a7:18:4e:
e3:3e:a5:9d:05:bd:5c:db:45:79:7c:a3:41:2d:3f:59:c0:f5:
0a:07:cb:1e:20:90:b5:bd:79:f4:55:b0:9f:8c:6c:5a:9b:93:
7e:c7:8c:73:3d:48:2e:08:05:1d:4e:05:71:07:ac:43:4b:f5:
2e:49:bf:56:90:d4:b9:c3:cb:00:af:29:f9:7f:6a:46:c2:62:
79:17:35:8f:6f:53:eb:8d:fb:70:e8:bd:5b:45:e2:d7:f0:39:
17:3f:68:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURFMEExMTAvBgNVBAUTKEJFNDg4QjRFNjBBQzZBNzNBNjU2RUZEQkM1RkE2N0Ex
QThERTgxMkEwHhcNMjYwNDA0MTU0NzAxWhcNMjYwNDExMTU0NzAxWjAYMRYwFAYD
VQQDEw02OWQxMzI3NS1jMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshx7skmAcX1/bwdCU9Q96X7niRDd6XLBZVe/9NmUjhTZjBn5OC3EiHX+eTVa
4WHRH1WLiQ+ozCwOrm+BnxBWIiDkHC1mezCdSiVHGs4cG0gBoud3mXj4cYrCjFEM
zfKdcSI9nynICUkIJN1I/ZdfEgnJKiIr7iM5dBMyPe4OKtlbsQj6ahoX5MMJIC5f
n6BzTaI3ump5ODquFQ+Fzv2lz5ryBEPYPjGDfh4yzcF9rajfktswBF7SnyVMBnwz
YswbrbuLHWt+IfdgMo/T620YEa7fibc3EzFyv8afmXlWTg0tAGBNvnAiph0W2YPE
brReoApGwXQ7WZStTnDw8jNjnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBf9u4m8
UEQnPBOXZ6MHp9XcPwbwMB8GA1UdIwQYMBaAFL5Ii05grGpzplbv28X6Z6Go3oEq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREUwQS8zMEQ4MDEyNkMx
MTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2FuT21WdV9ieGZwbm9hamVn
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZraUxUbUNzYW5PbVZ1X2J4ZnBub2FqZWdTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REUwQS8zMEQ4MDEyNkMxMTMxMUU1QjAxQTcyNjlDNEY5QUUwMi92a2lMVG1Dc2Fu
T21WdV9ieGZwbm9hamVnU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALzzgV6Gz74sulW0YGx2HV+ngItCRkT81t9MMUwc9+sqxvtB9V+u6uQtoTtDf
rc6pMCRC9fT9/AkfNcenFE7Mf4o6LZHlDOxj5cyPuc8cWj1g/zFiGiHur1BabFrN
ZYc3UxyPo7zmmlD7zeAoZOr9pEVwdCQbcdvl6fqROK+pTLT9FuGWGo2IEoLxhcCb
Dl7lG+LxOeFmDTA36DI3TbOapxhO4z6lnQW9XNtFeXyjQS0/WcD1CgfLHiCQtb15
9FWwn4xsWpuTfseMcz1ILggFHU4FcQesQ0v1Lkm/VpDUucPLAK8p+X9qRsJieRc1
j29T6437cOi9W0Xi1/A5Fz9oFw==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client