
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier: RiX/RWcPLr7ELit/qEXKjEaGh3ldcBrLNvDDG0tmRQ8=
Subject key identifier: EE:E0:2C:76:F2:63:53:EC:CF:68:A6:6E:A9:55:BE:F9:84:50:D6:32
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer: /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number: 38
Signing time: Fri 15 May 2026 08:44:18 +0000
Manifest this update: Fri 15 May 2026 08:44:17 +0000
Manifest next update: Fri 22 May 2026 08:44:17 +0000
Files and hashes: 1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: cKVLrcmtNHhFWEhCKzC6pKUnlpN0sFQ90SiE2XL61Rk=)
2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: DthUWy6Hm+llw2ps4qbubO2gT5P5TYvR85rrtYYcYEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 08:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Validity
Not Before: May 15 08:44:17 2026 GMT
Not After : May 22 08:44:17 2026 GMT
Subject: CN=6a06dce1-c17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:02:15:60:00:5c:e4:c5:52:17:20:cf:e7:
01:84:51:1d:99:89:1a:b3:f5:54:a8:86:0b:3d:c9:
44:53:63:e4:ae:14:cd:26:4b:1a:7a:a0:26:8c:07:
1a:f5:63:de:8d:d2:ab:bb:89:77:74:0a:c8:ea:f4:
69:0f:1b:bf:7e:35:61:1a:3b:f9:12:79:0a:53:4f:
9a:97:8d:10:5e:d8:9b:5d:f1:0a:ae:af:3c:0d:91:
0a:5d:6b:b3:b6:b5:69:fa:ca:61:3c:2a:d2:50:ae:
07:90:30:77:bb:59:c1:fa:a5:a5:39:8b:9e:91:64:
0f:76:49:82:4e:b4:db:01:da:f3:9a:17:69:80:c2:
ae:f5:a4:29:b9:6e:8d:84:fc:58:c3:a8:ec:d7:f8:
af:91:7e:d3:90:3a:28:5e:fd:09:28:45:dd:ee:24:
70:be:18:72:7b:74:c2:0e:1b:61:af:f7:dd:c5:6b:
76:4b:b1:2a:0a:dc:e4:a7:54:9e:ea:78:b2:19:bb:
04:12:bd:a9:c4:9c:2d:cb:25:7c:82:20:2d:f8:38:
61:58:3e:71:4f:7a:7f:84:2a:70:8a:fe:b1:47:0a:
a0:24:87:b9:fb:64:79:6d:99:11:89:c6:9e:cf:4d:
59:f0:99:50:b4:87:da:12:bf:3c:b6:41:1c:d9:6e:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E0:2C:76:F2:63:53:EC:CF:68:A6:6E:A9:55:BE:F9:84:50:D6:32
X509v3 Authority Key Identifier:
keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:d4:0e:91:6a:e1:7c:ba:50:36:e0:99:ea:cb:68:17:f9:20:
75:4a:1f:16:47:e8:27:f5:8d:62:c8:12:2d:70:2c:d7:85:99:
27:0b:6b:f4:9e:eb:c6:42:19:e7:19:00:fc:1b:a2:b1:d9:2e:
71:5e:89:9d:9e:35:f6:0d:6d:6e:e5:5f:07:5f:ec:e2:5e:e9:
33:ce:a3:2f:89:c9:1c:25:ec:be:6e:5f:f0:cf:c9:09:cc:3d:
09:85:e6:48:ce:bb:39:03:00:25:4d:ff:8c:96:6f:dc:81:a1:
9c:fc:ca:29:ae:50:2b:f6:70:bf:d9:90:4a:ce:95:89:75:2a:
8b:28:da:99:21:47:69:20:3f:14:0a:b6:fb:a8:a2:62:96:03:
53:16:b6:a2:64:de:5f:73:77:e5:49:8c:68:91:fc:a1:ac:77:
bb:3c:d9:e8:e6:ac:8c:67:fd:80:8e:bc:b3:c2:f3:a0:af:9d:
c7:78:01:3c:1e:71:44:8b:4a:94:6d:e4:62:aa:ec:3f:16:0c:
b1:c1:c0:0c:b3:15:99:62:e0:86:f5:ca:ed:a4:d1:d4:92:72:
ee:e3:d9:07:ae:e3:94:89:5e:eb:8f:dc:53:c4:bf:1c:ef:f3:
89:02:d8:0b:30:71:15:85:07:d7:58:7d:72:c0:ab:ac:ba:ac:
e3:56:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:34:10 2026 by rpki-client