
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
File: Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft (raw, json)
Hash identifier: pNOjNo3IGmbAh/6t2R98iikqTE9aGUPWhCgZo0rsPjg=
Subject key identifier: 53:98:3C:0A:FE:4A:D6:9B:60:4D:B7:E9:7C:F3:6F:B9:94:F1:AD:70
Authority key identifier: 56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
Certificate issuer: /CN=A91BB246/serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
Manifest number: BE
Signing time: Mon 01 Jun 2026 07:44:50 +0000
Manifest this update: Mon 01 Jun 2026 07:44:49 +0000
Manifest next update: Mon 08 Jun 2026 07:44:49 +0000
Files and hashes: 1: Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl (hash: QjA8RcsZNnwlnsi135hG4xtDKqhuTLJj97FRNlJuDHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 07:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB246, serialNumber=567E321DAF4AF7443B0D79E32AC030797527F1D9
Validity
Not Before: Jun 1 07:44:49 2026 GMT
Not After : Jun 8 07:44:49 2026 GMT
Subject: CN=6a1d3872-1422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:a3:54:fe:86:f6:c6:27:2d:03:49:be:07:
9f:d2:8b:ef:5a:ff:ab:d7:82:39:29:62:82:7c:db:
fb:8a:91:e1:30:3b:f2:80:0d:93:f1:7e:51:08:d7:
ad:66:b5:2b:28:a0:84:77:9f:3f:a7:d8:23:c0:52:
c8:dd:31:bd:2e:d2:85:08:98:7f:bf:7a:d7:2f:50:
72:55:a4:89:ba:30:89:2a:89:90:19:cf:a1:41:ab:
b1:c9:5d:85:05:4b:a4:fb:93:a8:2a:64:ff:d2:9f:
55:09:a5:68:e3:27:43:65:08:74:d4:c4:5a:be:49:
de:cf:e2:92:4c:e5:c1:1c:e2:87:91:bc:31:ac:15:
2a:df:93:32:64:e1:28:7c:14:5f:b4:66:50:62:0f:
28:b4:a0:8e:d7:a3:02:d2:c0:fe:84:75:de:3c:05:
4e:4f:75:a3:c8:d9:e2:f1:c5:8f:d7:42:12:ed:30:
e2:a7:e8:36:84:d3:a5:d7:53:ce:8b:a9:b9:5f:50:
fa:4d:16:16:f5:e7:f0:9b:2f:09:42:fa:b1:19:32:
9b:1e:f6:e4:61:75:a1:ad:80:22:ac:06:48:ee:92:
ed:51:89:ec:f9:72:4c:22:4b:6d:fd:6f:25:ea:1d:
ce:7d:81:d9:1d:e4:ab:80:b0:59:da:25:7b:a2:50:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:3C:0A:FE:4A:D6:9B:60:4D:B7:E9:7C:F3:6F:B9:94:F1:AD:70
X509v3 Authority Key Identifier:
keyid:56:7E:32:1D:AF:4A:F7:44:3B:0D:79:E3:2A:C0:30:79:75:27:F1:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vn4yHa9K90Q7DXnjKsAweXUn8dk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB246/F1C5C9523C0D11F096CCDB5FC4F9AE02/Vn4yHa9K90Q7DXnjKsAweXUn8dk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:b1:04:0a:0a:c2:1d:8b:8b:05:8e:43:3e:e3:44:6a:df:98:
62:b1:5b:33:67:0a:7a:56:e6:ff:37:31:d5:de:7b:56:46:6d:
55:c9:9c:c1:e2:28:70:ae:57:62:03:5e:25:55:f4:10:a3:50:
9e:94:57:d2:ab:c0:f9:78:79:ff:25:8d:c7:05:46:32:1b:3e:
a4:ca:39:68:a0:53:e2:2c:00:d8:56:6e:f1:0d:93:95:f1:cb:
a3:36:dc:99:23:14:e3:99:01:10:1f:bf:3c:9b:58:e9:00:55:
2c:3f:7f:60:4d:0b:f5:30:0b:c3:e3:fb:51:4c:e5:7b:08:57:
87:ae:0e:6a:e5:40:eb:62:54:cf:0f:9a:01:2b:d2:db:ec:38:
95:64:da:dd:6c:67:38:f9:2f:38:19:38:18:8a:be:33:5d:6d:
e1:c2:60:52:50:eb:42:ad:47:7b:f5:a0:99:5d:53:02:e6:81:
d3:60:64:ce:ea:26:e8:54:7e:b5:e4:c5:33:60:2b:9e:e0:40:
fc:50:49:03:dd:65:51:6f:9e:88:73:98:ea:d0:c1:9c:e0:d8:
da:2d:b5:c1:93:d2:30:5d:d4:34:90:90:9d:50:35:cf:3e:36:
09:e7:55:e1:67:81:59:cf:f1:b3:7d:82:29:50:ff:32:90:14:
46:23:8b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:19:36 2026 by rpki-client