
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier: sWU1BoRsh4yu6x+lbOA0tF2qxlXjLh0A+KakoxuNnEc=
Subject key identifier: 54:CD:07:3F:00:9A:45:4E:C3:FB:30:F1:49:45:F9:3E:06:47:94:F8
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 45
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number: 43
Signing time: Thu 03 Sep 2026 08:41:35 +0000
Manifest this update: Thu 03 Sep 2026 08:41:34 +0000
Manifest next update: Thu 10 Sep 2026 08:41:34 +0000
Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: CiOllgqLp1mhuibiYOxWBFEfiSqWZZeweM8dji0yeeo=)
2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 08:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: Sep 3 08:41:34 2026 GMT
Not After : Sep 10 08:41:34 2026 GMT
Subject: CN=6a9932bf-c4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:30:c3:e6:ba:5e:8e:d2:e3:3b:99:d0:e5:
3a:9d:cc:2c:f7:08:43:c6:ba:f1:07:3e:6d:77:ea:
eb:b8:d4:bc:e3:ff:f2:8e:46:4e:e0:23:b4:f0:d4:
4a:9d:b9:bf:f9:f6:8c:ee:52:5b:81:9f:bc:08:a0:
66:39:27:ec:98:e3:e5:d3:09:4c:cc:30:42:0c:0b:
90:31:10:2b:22:fa:d3:4d:64:1c:a5:90:94:bd:a2:
e4:09:0b:ae:cc:10:29:88:81:f8:8c:b3:f7:bb:80:
68:b1:98:d9:f2:f4:de:09:0d:09:c3:48:b3:c0:15:
3f:f9:80:5c:b8:f4:2f:c3:75:4e:f8:25:28:c9:7c:
52:09:2b:24:18:cc:2b:3b:be:a2:bf:62:b8:83:cd:
6e:3d:5d:69:00:93:1b:e1:13:af:0b:12:fb:19:b1:
5a:82:bd:92:d4:36:18:46:69:38:1a:db:0a:5d:93:
d5:9a:fc:8e:d2:3e:c9:94:e8:99:5b:c9:9f:21:11:
be:1a:47:74:02:16:26:83:9e:80:56:b2:db:7f:f7:
c2:e8:ee:b2:af:13:e5:86:8a:6f:9f:0d:84:8f:f4:
10:18:ad:b6:33:d8:3f:4b:07:83:34:de:f1:b5:3b:
bc:8e:b4:76:2f:d1:9d:c9:99:53:bc:f2:e1:dc:93:
1e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:07:3F:00:9A:45:4E:C3:FB:30:F1:49:45:F9:3E:06:47:94:F8
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5e:fb:a3:4b:b0:cb:db:3e:5e:7f:02:47:2e:84:e5:7b:79:
5a:05:c0:55:7f:e6:ed:7d:7c:ab:4d:27:c2:96:d1:37:bb:2d:
8a:70:17:0c:66:f5:e5:21:d8:83:ca:16:18:ae:66:7a:bc:42:
5c:93:0e:fb:38:d0:33:6b:8d:22:9d:09:46:ca:41:4e:0e:2b:
cb:bc:c2:93:26:a6:88:6b:5f:0f:c6:47:b7:c9:99:a6:27:92:
cb:91:19:e2:9d:e3:0f:f9:5e:4b:1b:b2:8b:8c:03:cc:af:57:
bf:a1:9b:06:3c:17:4f:2e:24:84:5f:b7:b6:30:ab:c7:41:a6:
f2:57:64:c1:34:97:eb:24:2a:1f:8b:81:2d:cd:e1:44:bf:13:
2a:2c:e4:bc:ee:4f:0b:dc:56:ca:fd:1f:8a:14:37:48:ee:dd:
9f:6a:86:ed:a7:58:dd:b8:63:e2:a9:3a:01:42:72:19:63:00:
86:9a:c8:73:82:7f:ca:96:6b:d8:9c:de:ca:85:09:ae:66:2f:
75:ae:c4:43:78:24:83:a9:3a:6c:cc:25:ae:bd:84:9f:9d:3a:
36:1b:94:d3:bd:ef:a3:a1:9c:b4:76:c3:40:72:df:34:77:3c:
b3:6a:2c:e8:32:5e:a5:f6:12:96:df:64:39:a1:44:81:2a:f6:
8f:19:63:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:27:43 2026 by rpki-client