
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
File: vrCjIjTRl23j3iJaVReALbYTqLY.mft (raw, json)
Hash identifier: JMpKQxwU++lsRlRsYcbbm51BeV8jdFi8RRgVDb/S2pI=
Subject key identifier: C7:2F:E4:DE:10:94:5F:03:DD:FE:84:FE:6D:05:44:3D:81:37:28:A6
Authority key identifier: BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
Certificate issuer: /CN=A91AF17B/serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Certificate serial: 0671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
Manifest number: 066A
Signing time: Wed 20 May 2026 22:38:13 +0000
Manifest this update: Wed 20 May 2026 22:38:13 +0000
Manifest next update: Wed 27 May 2026 22:38:13 +0000
Files and hashes: 1: vrCjIjTRl23j3iJaVReALbYTqLY.crl (hash: 20cCHhgpHpp6QmlDpaMM9Mt7UtDXen/iAA6e8JjfqTM=)
2: 9C955450C77E11EB9DF68B6AC4F9AE02.roa (hash: jG9axOCXOacczWdrm/uOrVJGk+LwRmU7rUo/c9l2xb0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 22:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1649 (0x671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AF17B, serialNumber=BEB0A32234D1976DE3DE225A5517802DB613A8B6
Validity
Not Before: May 20 22:38:13 2026 GMT
Not After : May 27 22:38:13 2026 GMT
Subject: CN=6a0e37d5-ccce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:83:4e:67:f2:02:b3:fe:10:42:16:52:64:6b:
dc:89:ce:0c:3d:85:7f:e4:e2:f0:a6:41:d5:be:36:
1b:8c:20:fe:f0:e1:74:08:73:6d:a7:21:ce:c7:bc:
9a:63:f0:ad:2a:d2:05:19:ef:ce:87:13:5b:9c:5a:
c0:bd:39:6b:0f:ea:16:cd:d5:02:c0:e3:c8:62:53:
24:ec:40:7d:bc:db:49:4f:2b:ef:d2:6c:c4:de:ef:
3a:be:ca:50:c1:e0:8e:9c:e0:59:bf:f6:86:db:81:
e1:98:98:f6:a4:16:39:a4:e4:6e:56:d7:1a:79:12:
62:29:c5:6f:47:15:39:0f:bc:22:60:f4:ac:8d:a8:
9d:79:ee:a1:cc:3d:35:01:dc:f5:5b:03:64:28:8a:
84:8c:58:b8:ad:81:cb:6e:1e:46:4f:fe:b5:65:77:
48:40:9d:aa:22:f0:13:95:8c:70:50:e3:67:92:54:
31:0e:90:6f:c3:30:84:79:73:6e:1e:d3:d5:5e:53:
24:67:a0:0e:ca:fb:70:d2:7d:86:cf:7a:ca:b9:87:
8d:3c:54:5f:90:a6:2e:3b:a9:28:7c:51:17:c9:48:
90:aa:04:82:4d:b6:b3:8e:20:92:ce:0b:21:8f:3d:
d3:b8:80:15:76:9c:89:09:35:71:b7:6e:24:58:22:
42:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2F:E4:DE:10:94:5F:03:DD:FE:84:FE:6D:05:44:3D:81:37:28:A6
X509v3 Authority Key Identifier:
keyid:BE:B0:A3:22:34:D1:97:6D:E3:DE:22:5A:55:17:80:2D:B6:13:A8:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrCjIjTRl23j3iJaVReALbYTqLY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF17B/EB0277FCC77A11EBBB80B878C4F9AE02/vrCjIjTRl23j3iJaVReALbYTqLY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ff:7a:a0:b9:02:92:90:c7:db:04:a9:2c:7f:af:b8:50:09:
7e:63:78:f4:b2:cf:37:bb:26:dd:7c:73:20:9f:67:be:82:81:
b7:9d:02:d5:ca:55:29:b0:66:ee:e2:b8:e4:5e:7b:27:82:ee:
ae:85:e1:cb:69:7f:d0:ec:c3:33:a8:82:c9:c0:c5:89:79:fb:
a6:87:af:0d:27:90:c6:37:21:ff:01:0d:f0:15:e0:45:d8:41:
b5:0f:40:a7:c5:cf:83:63:67:6a:c5:28:e2:b3:43:38:4b:f8:
cd:05:09:5f:82:15:cf:a1:d2:c0:95:bc:a6:9e:22:9d:87:c3:
a1:36:9a:a9:48:27:65:67:c8:87:36:4c:55:64:3d:af:90:ba:
9d:80:03:b9:a9:f6:91:7b:98:27:26:91:e4:fc:2d:bf:02:e3:
fe:a8:5b:9c:64:fa:d0:1e:55:62:6b:eb:a1:8c:22:a9:bf:5f:
b2:31:40:92:74:c0:ae:ba:8f:de:a3:6c:d3:39:7f:e3:54:8b:
90:5d:a2:32:68:e4:28:b0:08:89:9b:7c:fd:e6:9d:86:3b:13:
53:6d:c0:7b:d2:93:e8:d7:e9:ba:56:e1:2e:ba:4d:58:c9:01:
f9:65:34:ce:ab:d0:1d:07:67:ea:be:4b:3f:3c:7e:63:6a:e9:
fa:9b:c2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:24 2026 by rpki-client