
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier: ORo3Xk39FgNN+bhiyjDeq7ra16fuEg5EqnLHPS4/EBI=
Subject key identifier: 02:A5:3D:4D:D2:F2:AA:36:7E:EC:3A:0F:D2:87:31:25:B6:5F:06:20
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number: 0153
Signing time: Mon 19 Oct 2026 05:52:04 +0000
Manifest this update: Mon 19 Oct 2026 05:52:03 +0000
Manifest next update: Mon 26 Oct 2026 05:52:03 +0000
Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: Gyhz4lWgj8V8IQ7dbdeCYeoSMi5SyF9jhSevBfWlJA0=)
2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:52:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Validity
Not Before: Oct 19 05:52:03 2026 GMT
Not After : Oct 26 05:52:03 2026 GMT
Subject: CN=6ad5b004-7e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:c4:8c:df:c1:2a:0d:09:98:d7:10:0b:77:
ab:2a:83:bc:a1:45:dc:c4:18:d4:19:9f:d6:24:52:
14:34:e4:d1:5d:0c:76:39:a8:ab:ca:4a:11:c7:40:
a4:a2:cd:51:f3:9b:08:1b:73:23:00:7c:4b:f2:bb:
b7:5e:e0:c3:c6:f5:2d:c0:67:e8:25:ca:60:14:9d:
e4:2f:2b:ff:76:dd:36:03:57:97:12:4b:12:30:df:
df:d3:d4:23:ba:6f:a3:d0:2d:1e:be:fc:6d:c1:a1:
cd:35:c3:0c:ef:15:80:18:b3:80:18:e7:92:58:e2:
ea:8a:5d:07:b8:3f:5c:50:a3:a0:2f:61:49:15:6a:
40:a7:a7:db:41:0b:78:8b:a3:15:1e:21:4c:57:65:
bc:b0:91:0d:95:fc:50:a4:5f:66:7d:6e:ce:19:7e:
e8:21:3d:46:07:b1:22:76:43:e2:47:39:5b:0c:a9:
da:b4:a4:e8:0d:5d:f2:23:5e:f5:2f:23:5f:03:5f:
7f:13:c1:af:0a:d9:e7:aa:e6:a4:de:44:6e:34:6e:
db:fb:be:9e:34:19:c8:46:73:34:24:3c:dd:c5:a9:
42:cf:79:6f:bb:33:af:8d:e1:b7:16:09:fb:38:0b:
9d:4b:88:16:ff:a9:84:71:2e:2b:ed:c7:bd:3b:ef:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:3D:4D:D2:F2:AA:36:7E:EC:3A:0F:D2:87:31:25:B6:5F:06:20
X509v3 Authority Key Identifier:
keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c3:02:61:9c:a9:b9:7f:34:47:fc:eb:b1:a6:ad:2d:64:0b:
62:ec:82:7e:6d:ac:1e:ce:5a:bf:0f:c7:63:8b:01:98:e7:b3:
85:4e:97:d6:4e:d2:c7:76:f8:f9:41:c5:ba:67:4a:82:ba:f2:
03:6d:d6:1d:c5:3c:5e:70:d6:a0:55:f0:eb:0a:e3:1a:a1:ba:
0c:19:81:82:5c:34:8a:59:02:27:d1:3f:cd:27:4c:32:ac:21:
c8:9b:45:32:2c:35:3e:34:3b:ff:9f:d7:e0:92:97:a3:2e:4b:
d4:d3:2e:1b:6c:fa:38:80:11:b2:17:69:ec:ec:3e:5f:49:66:
7e:6d:7d:a1:7e:4d:10:e9:fa:9f:cb:f1:d9:4d:a8:42:4e:91:
0c:ee:6d:a2:a2:fe:8f:84:00:ec:58:5c:d7:34:b6:f8:60:d3:
08:33:33:61:7e:bb:bc:97:e8:21:08:1e:66:cd:ca:63:20:af:
a8:d2:8b:ab:f5:42:d3:bc:be:f6:35:c9:89:64:28:6f:d1:bb:
30:6a:27:d6:8f:54:e4:fe:87:67:a9:b2:7f:50:5b:1a:a3:ae:
13:30:ea:93:3a:b7:e2:00:71:cc:b3:ab:1a:07:e0:90:b1:fd:
1d:75:fc:ed:fc:1d:f8:a3:63:d5:75:bd:eb:44:d7:6f:d2:32:
ba:e7:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 21:50:20 2026 by rpki-client