
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
File: V8WBYb3sTcee9I4gXyuNEgKPCuo.mft (raw, json)
Hash identifier: 5XcNDg9EcUqYvsQhNdaLbIfvQC9c7ASrwmHpDKR6yb8=
Subject key identifier: D3:46:95:B4:79:FF:CD:01:51:B8:2B:33:65:E4:A5:97:48:07:60:BA
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Certificate issuer: /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
Manifest number: EE
Signing time: Tue 21 Apr 2026 06:17:22 +0000
Manifest this update: Tue 21 Apr 2026 06:17:21 +0000
Manifest next update: Tue 28 Apr 2026 06:17:21 +0000
Files and hashes: 1: V8WBYb3sTcee9I4gXyuNEgKPCuo.crl (hash: pbhaU4IK4gimhN/97xXvV8ZrznTqCFFkG9HZW3JpToo=)
2: F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (hash: u8Fyj1tWcsm/7xrez2wrKB0N+SmqsPV3ABuiDRjPFkw=)
3: 12316BAEE42C11EF9066AE3AC4F9AE02.roa (hash: xr9/YLZZZddR2k/EaGhggZjEJrXppAW3beM8PZT9L+Y=)
4: FFE0419EB92511F0BA672039C4F9AE02.roa (hash: VNERl1muN5PbZXadClI72yukZOY4i+Lm6o/me+GY2qQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:17:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Validity
Not Before: Apr 21 06:17:21 2026 GMT
Not After : Apr 28 06:17:21 2026 GMT
Subject: CN=69e71672-2005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:61:78:40:01:36:f0:24:3f:8b:07:80:91:b6:
ad:ce:e5:d5:ae:1e:d0:5f:f4:62:c3:d2:1c:fb:47:
3c:aa:85:bb:19:32:f3:52:b0:dd:98:db:dd:b5:84:
88:98:16:dc:96:e3:a4:3d:47:43:cf:17:4a:f8:6b:
ba:33:e8:52:ab:7e:19:28:56:c8:e4:2d:d5:78:f0:
8a:54:57:cf:e7:f2:6c:ed:e2:92:68:27:85:b8:b7:
08:c7:cc:9b:34:c3:3a:38:35:4e:18:e7:d1:f1:2d:
0d:23:08:4e:f4:bc:2d:9a:d1:1a:b6:2d:d4:e5:0a:
c5:18:14:5b:3f:55:50:6a:6a:13:6f:7d:cb:fd:08:
4c:58:80:e8:88:5b:93:47:86:92:56:af:3d:6d:fc:
48:d1:ea:e8:e9:9e:13:b0:21:83:c9:d0:cd:67:51:
dc:da:3c:f2:fe:67:a7:3b:af:18:8f:ee:e4:15:a9:
c5:7e:af:4e:2f:02:dd:95:b4:40:f3:6a:81:7f:62:
7c:4a:3f:7c:8d:d0:2c:33:05:5b:36:b5:c0:bb:71:
7e:45:e9:fd:d6:e8:90:ab:3b:2f:6b:bf:f4:c6:9a:
ea:41:c4:7f:a6:68:df:10:3a:74:00:c3:53:b3:a9:
57:35:15:be:5e:2d:3b:95:60:f2:8c:44:81:43:e6:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:95:B4:79:FF:CD:01:51:B8:2B:33:65:E4:A5:97:48:07:60:BA
X509v3 Authority Key Identifier:
keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:09:6a:d8:18:8d:e8:c6:10:93:cb:09:5f:ef:45:f4:be:45:
51:6c:10:7b:4d:a9:cf:9a:78:f0:77:22:85:91:3d:3a:e6:14:
c0:21:d6:37:a0:49:8f:f3:ad:9b:92:a1:d3:b3:ed:a8:42:d5:
3d:a1:81:ba:03:a2:f9:eb:02:90:70:83:9b:b6:b5:34:bd:9e:
45:8d:6b:e2:dd:5b:53:e6:f2:f5:38:26:fd:f9:12:31:b4:fa:
ac:96:13:f6:61:8a:68:7e:4f:03:0e:c3:47:d9:b6:99:a5:87:
88:94:fd:ce:06:75:4c:ba:65:2e:42:f3:56:2d:6e:4a:33:27:
bf:62:91:a5:10:3a:78:2b:f3:65:55:b6:88:6e:52:40:05:64:
c7:cb:3f:60:14:6f:8c:fe:77:88:12:fd:48:3e:5e:d1:6c:ff:
b7:7e:63:11:85:ec:08:5f:7c:50:ac:b0:72:d7:8d:90:51:70:
6f:89:64:3e:e9:e5:e3:54:1f:53:b4:ba:1f:5a:76:76:29:29:
7d:b3:be:64:e1:78:29:69:73:08:55:d7:be:d7:ad:59:e1:20:
4c:2f:e7:9e:7d:a6:5f:7f:ce:a9:6f:ed:5d:a9:a7:1e:0e:03:
4b:58:46:48:3b:d1:58:2c:6b:fd:61:2d:bb:cf:34:72:3c:21:
43:25:62:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:07:51 2026 by rpki-client