
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: Bean6TqjygkJ8KFTJsyCyfi9LdDqx384dfPDHJn2Ru0=
Subject key identifier: 71:C4:DE:5E:8D:4D:A0:60:FB:A2:21:E6:36:86:9C:BC:BF:09:93:ED
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: 012D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: 012D
Signing time: Thu 15 Oct 2026 06:37:04 +0000
Manifest this update: Thu 15 Oct 2026 06:37:04 +0000
Manifest next update: Thu 22 Oct 2026 06:37:04 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: rTAtTTovATI/4K/BdV2QgYVKH5NM/Gb1DWUR2TnnJJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 06:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Oct 15 06:37:04 2026 GMT
Not After : Oct 22 06:37:04 2026 GMT
Subject: CN=6ad07490-d9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f3:ae:86:75:6c:4d:40:e7:a2:5a:6b:ab:90:
f2:94:78:9c:79:bc:f2:24:a5:e9:8c:0f:6b:d0:40:
1a:c4:77:44:78:4d:4e:2c:58:3f:32:f9:ba:b8:f4:
63:7f:c2:9c:e0:f3:c0:e3:92:29:b6:d8:4f:ca:4b:
e8:d1:e1:d5:51:b5:24:ea:0e:7d:21:f0:a3:b9:15:
1a:69:46:07:8f:b8:4f:c6:ac:8c:f5:29:ad:b4:f2:
10:8f:4c:1e:ce:64:dc:6f:e8:f3:e6:ad:95:a0:ec:
5e:c7:c2:4a:47:3a:92:62:f4:1c:a9:5e:21:ba:02:
8a:77:45:6b:cd:37:06:c8:60:91:30:75:6b:f2:d8:
8a:ea:d4:04:c6:85:16:ae:0a:44:24:3d:55:07:9e:
06:f1:d9:e4:99:49:69:47:6f:bc:fa:ed:3f:a0:dd:
94:7f:94:2b:d8:fc:ce:e4:31:a1:02:dd:04:02:d7:
b3:94:9c:23:85:bd:9f:a8:89:88:69:33:e1:35:dc:
db:ed:34:9b:e2:c9:73:81:34:f7:21:0f:22:f3:2d:
fa:9a:83:c5:75:b3:34:55:62:44:57:f1:b7:dd:9b:
cc:27:c4:77:2e:d0:f9:82:39:1a:03:29:72:b3:ce:
83:59:a9:19:06:a9:f6:77:35:58:8e:e1:3f:d2:43:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:DE:5E:8D:4D:A0:60:FB:A2:21:E6:36:86:9C:BC:BF:09:93:ED
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3b:db:0c:14:de:2b:e1:f1:02:9c:2d:ba:2c:56:61:e0:3d:
6b:1a:d4:67:d2:4a:bd:83:d5:19:00:63:8e:78:76:e5:12:c0:
a0:c6:2f:e3:12:fc:ac:32:a3:9e:01:a7:7e:ca:45:69:86:18:
51:e8:0b:5d:f4:ba:da:fb:1a:be:42:b8:d2:76:a0:4d:3d:3f:
6c:46:cc:31:e5:42:63:0f:ea:a9:22:12:64:cb:7f:c6:87:a8:
b6:af:ab:23:cd:e4:ef:71:9f:df:84:e6:6b:25:a4:b1:aa:52:
83:46:46:b6:30:be:49:bd:70:e2:46:57:b1:e7:66:40:b3:96:
8f:e4:9e:30:8b:5f:09:a8:ea:f1:bb:61:eb:ad:95:a5:64:97:
1d:e2:79:38:c0:a0:58:9b:f1:7e:94:4a:8c:74:2c:29:da:b8:
c6:5e:f1:48:aa:94:4a:cb:67:46:82:d6:0b:a5:f8:bd:71:c0:
17:11:c3:96:79:c0:b0:53:ee:fc:27:bc:d3:f6:7b:d7:8c:2a:
70:c3:8f:e7:23:39:1d:5f:49:04:07:96:9f:e5:7a:45:5c:62:
e9:bc:87:b1:7e:d9:5e:dd:6e:06:0d:b6:6d:30:ec:ac:a3:8d:
5a:c9:bb:cd:84:87:52:9f:54:4e:0c:38:9b:79:d3:f8:82:d6:
4b:29:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:50:25 2026 by rpki-client