
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: Fwzg2djep1mkUAC2ANlMMZcaf7SW87ZPIB83T8U35lg=
Subject key identifier: 0D:22:91:B8:07:E7:6C:60:3E:6D:D6:EF:DD:E5:15:A1:7E:D1:36:29
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: FF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: FF
Signing time: Fri 17 Jul 2026 07:20:02 +0000
Manifest this update: Fri 17 Jul 2026 07:20:01 +0000
Manifest next update: Fri 24 Jul 2026 07:20:01 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: 0sGnRVy8M9m77J5dttZkLe4JbRkAhlVJMMCVF+iiRTY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 07:20:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 255 (0xff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Jul 17 07:20:01 2026 GMT
Not After : Jul 24 07:20:01 2026 GMT
Subject: CN=6a59d7a2-6c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cf:66:f9:60:93:1b:d1:c7:20:0a:70:c1:06:
a2:b3:e1:0c:e0:41:d4:26:be:21:0b:c2:74:20:b9:
f5:6d:0e:d6:f4:8c:bd:5b:54:cc:cf:60:2e:71:7e:
7e:38:7a:1e:b8:b3:02:e7:ce:7b:14:83:27:56:a2:
4f:dd:53:5e:84:2c:64:a0:66:bc:f4:53:a5:57:ac:
24:82:0b:70:dc:45:26:f7:ad:63:48:3b:a5:02:df:
3a:6b:5c:de:83:63:01:c1:98:b9:e4:64:a1:78:b5:
65:09:82:87:cc:47:ff:f4:45:2f:00:dd:5c:93:75:
70:5b:5d:97:cc:74:2e:83:5e:fc:1e:02:98:96:fb:
6c:3a:f5:e2:36:40:71:d8:52:46:7e:04:ef:59:6f:
46:9b:56:e5:2a:29:4a:ac:da:c4:2e:62:71:d1:d1:
53:d9:ab:4b:bf:cd:17:c5:83:8b:02:72:3c:3d:2c:
7e:e4:87:20:bd:f4:3f:1c:17:61:03:96:c2:78:c2:
b3:98:61:d5:ce:48:ed:58:8f:cf:43:01:5d:5e:88:
03:dd:c5:af:f1:ec:ef:bf:8b:7d:8d:64:39:94:33:
01:38:81:dc:89:03:ef:e3:d2:2a:d7:bf:d1:c0:65:
85:00:eb:50:0c:00:42:d4:ab:26:28:5a:09:e1:41:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:91:B8:07:E7:6C:60:3E:6D:D6:EF:DD:E5:15:A1:7E:D1:36:29
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:c5:1e:13:3e:64:2c:13:c9:d1:6e:7b:4c:16:9f:4e:ac:
04:7a:0b:e7:c0:a8:32:1d:e8:7e:54:8d:17:04:5c:60:34:cb:
1c:89:9a:7c:b2:68:c6:e6:ef:55:2b:8f:7f:4c:3f:3a:53:cd:
9a:69:5f:70:9e:4b:f4:44:18:0e:33:41:54:d2:a9:e4:d3:57:
27:f2:4d:32:5d:32:fb:ea:62:29:60:40:3d:a8:f4:e6:82:89:
79:71:26:cb:c3:cb:2f:a1:51:6d:35:97:1d:62:9e:33:98:9f:
4f:cc:ed:67:39:cd:80:af:13:85:74:b7:26:c6:d5:1d:4c:87:
68:51:af:95:e9:5b:a3:d4:c0:e5:67:a2:6a:16:2a:4a:81:9b:
06:26:91:de:65:33:98:6a:ec:92:a6:ba:b2:1a:d6:08:1a:c8:
3a:a7:54:1e:5c:b7:8d:63:f9:5f:8f:2e:83:0e:5e:33:2a:f3:
7a:d7:94:c7:47:4a:27:7e:5a:f6:18:87:36:19:57:0d:e8:78:
7d:a9:62:b1:b2:52:92:fe:b9:cf:6b:b2:cc:e8:7b:9d:c9:53:
3c:32:48:80:70:f1:07:74:7d:37:49:5f:33:9d:f4:0f:25:ce:
73:4f:0f:fb:2a:7a:ba:6d:84:55:89:a0:0a:ff:b3:33:be:58:
fe:61:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:25 2026 by rpki-client