
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
File: vELDvIdcBnayn9eryfgbSpH9iok.mft (raw, json)
Hash identifier: ZdwopbNv6+alc9iAPS+IP/C6fsPbtxrNrDqn0O0IREM=
Subject key identifier: BB:BF:94:0F:02:59:31:9F:33:38:20:74:95:B0:22:66:A5:8D:0D:02
Authority key identifier: BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89
Certificate issuer: /CN=A91B7D14/serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
Manifest number: 014C
Signing time: Tue 23 Jun 2026 05:25:36 +0000
Manifest this update: Tue 23 Jun 2026 05:25:35 +0000
Manifest next update: Tue 30 Jun 2026 05:25:35 +0000
Files and hashes: 1: vELDvIdcBnayn9eryfgbSpH9iok.crl (hash: gnm5maupKs3sfocAlbABDqCqU/klfkJDgAMKkiXaMuE=)
2: AAA33A7A74B011EF85E1C348C4F9AE02.roa (hash: FW4g/QhH4gL1hdaSiCtFk1K0xDP8/LV5Fbh+qpfxD0o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl
rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 05:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7D14, serialNumber=BC42C3BC875C0676B29FD7ABC9F81B4A91FD8A89
Validity
Not Before: Jun 23 05:25:35 2026 GMT
Not After : Jun 30 05:25:35 2026 GMT
Subject: CN=6a3a18d0-84d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:6d:b9:73:98:f7:10:87:e2:58:47:4e:51:
39:f8:b3:cc:c2:54:c0:bd:90:19:e4:20:84:32:20:
4c:70:03:08:4a:6f:59:8e:62:f3:20:dc:8d:99:8e:
f0:35:a2:3e:8d:01:34:d1:a6:0a:38:66:04:43:d1:
2f:0c:84:9f:ca:e1:50:b3:10:92:02:de:4f:5f:d6:
b0:82:a1:96:bd:f2:6a:39:e0:7d:8e:f0:e9:dd:43:
f0:46:26:8b:e9:69:a7:69:6b:fd:0f:f4:c1:43:18:
12:1b:fc:64:63:54:51:8b:72:84:6f:5c:c3:59:5e:
1b:5b:77:a6:10:f9:b8:84:d2:0b:0e:60:61:90:59:
33:58:2f:e2:89:d8:88:72:c1:84:9d:5f:e7:25:cd:
b4:06:b0:bf:4b:30:81:49:b3:ac:37:82:4b:91:cd:
3b:ab:a0:10:a8:dd:d3:2d:bb:bf:92:31:e4:71:f5:
ef:e3:38:11:a7:77:eb:22:bc:f0:7e:a4:4b:ec:c2:
dd:44:b7:b7:cf:b0:b6:42:c9:1b:76:31:8f:fc:96:
ae:7e:91:2e:69:7f:79:d7:14:bf:95:36:80:58:a3:
5d:24:94:f4:77:91:63:e4:d2:90:3b:e1:bc:6d:ec:
f2:a5:43:fa:7b:93:8c:9a:86:a8:5d:23:77:21:3e:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:94:0F:02:59:31:9F:33:38:20:74:95:B0:22:66:A5:8D:0D:02
X509v3 Authority Key Identifier:
keyid:BC:42:C3:BC:87:5C:06:76:B2:9F:D7:AB:C9:F8:1B:4A:91:FD:8A:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vELDvIdcBnayn9eryfgbSpH9iok.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7D14/CDB3B9AA74AF11EF91A66146C4F9AE02/vELDvIdcBnayn9eryfgbSpH9iok.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fb:ce:fa:4f:62:7d:ea:65:f7:69:89:87:08:69:82:88:fc:
31:f6:a3:6a:28:59:0b:89:9b:dc:73:f7:00:fd:fa:b1:b0:7e:
c0:36:19:ef:68:70:00:29:6e:62:f4:19:ee:e8:5f:82:54:a1:
e5:04:12:58:3a:77:c8:f3:93:52:d2:29:14:0c:e2:d4:61:90:
ef:58:81:c3:2f:3c:87:9d:d6:3c:d6:4c:95:47:ad:7c:11:e0:
64:d1:6a:30:0c:62:aa:02:b4:7f:6e:51:37:d1:6d:72:f1:3c:
36:ad:32:3a:d1:5e:b3:3e:66:35:68:45:d0:be:39:51:81:e7:
47:7b:c8:ba:00:54:78:fa:b6:a8:0c:b8:4f:b2:18:78:d7:17:
7f:ac:ab:7b:23:41:14:f9:7b:e0:ee:48:01:21:a3:87:a8:1e:
18:1f:c3:1f:55:fa:96:28:41:e6:2a:86:23:cb:fd:6e:f9:dc:
1f:f8:22:c4:30:9f:6d:cd:6b:09:ef:3d:03:8d:39:dc:1c:b7:
9c:e0:6b:98:39:28:9a:7b:4c:07:e7:fa:c2:d5:fd:26:0c:58:
ec:e4:f8:62:02:c1:da:73:a5:05:f5:b7:f0:8b:df:41:70:34:
68:63:04:c4:5f:73:67:95:f0:94:f2:f7:6d:98:d9:5d:31:f5:
6e:1c:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:26:18 2026 by rpki-client