
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier: vMC+HcTioE6XCDbRUyTW+WgUMIs+nuQuZ7dI7EalDO4=
Subject key identifier: BF:84:79:77:1C:C3:63:F1:F8:94:A6:EC:F2:F8:D9:CD:78:05:63:03
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 17
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number: 15
Signing time: Mon 01 Jun 2026 09:50:48 +0000
Manifest this update: Mon 01 Jun 2026 09:50:47 +0000
Manifest next update: Mon 08 Jun 2026 09:50:47 +0000
Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: XLiL3AZCGk1InrMepJ/Y4/URiPnuiIbNfzWkCuj/0Ks=)
2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:50:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23 (0x17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: Jun 1 09:50:47 2026 GMT
Not After : Jun 8 09:50:47 2026 GMT
Subject: CN=6a1d55f7-3878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:c0:a9:c5:fc:f9:e8:01:00:6c:a7:23:38:
00:f3:c2:df:4b:50:10:91:9f:84:83:fc:b3:b4:49:
97:9f:85:c0:92:10:23:44:05:08:dd:9e:cd:2e:6b:
0b:01:c7:51:46:26:1c:52:34:3b:cc:6f:ce:74:79:
0f:5f:f2:4b:ed:49:a2:c0:84:94:37:bd:53:54:57:
00:2d:0c:f4:9d:da:d9:0d:c0:ba:1f:82:08:52:ae:
c2:4c:33:2d:7f:7a:37:44:a1:6b:ec:c1:bd:4d:83:
bf:a9:c5:e1:09:2b:ea:a4:bd:d8:19:d8:e9:3e:e9:
2d:ea:c6:a0:85:bf:0b:1f:4c:f1:b8:c9:63:7c:25:
c1:fc:81:3d:23:51:0e:9b:63:61:98:79:2d:03:d6:
5f:15:cb:49:db:e0:0d:f7:61:7c:32:14:13:91:52:
50:61:84:0f:77:77:34:10:d5:bc:9e:c2:5b:ab:b2:
2e:59:ac:e2:36:53:05:bd:94:40:2e:b1:7b:9e:0b:
72:5e:79:33:56:5e:bd:91:18:78:d3:6d:d3:fc:bd:
d5:1c:ae:df:64:f0:0b:94:79:b3:f5:4f:38:b6:42:
01:38:be:c5:16:25:a4:3b:10:4f:33:48:a0:0d:6e:
4c:72:ea:60:06:cb:db:92:a4:82:59:3e:bf:e4:33:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:79:77:1C:C3:63:F1:F8:94:A6:EC:F2:F8:D9:CD:78:05:63:03
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:36:4a:d4:a3:a1:3c:18:26:ca:fb:a1:42:8d:72:b1:c1:
f2:31:11:7f:ed:56:fa:97:5a:44:30:b7:27:52:be:1c:1b:95:
e3:e8:2e:7a:7a:ad:fa:78:eb:34:21:72:01:5a:3a:aa:36:e7:
ed:f3:b8:e9:cb:dc:4a:fb:7e:32:7a:ff:fa:2b:1f:45:54:b3:
bf:36:9f:96:92:6e:48:76:54:19:bb:4f:8d:7a:45:21:b8:b5:
9d:3c:6c:5f:0e:95:97:6b:7b:97:a1:7f:9d:7c:1a:aa:5d:60:
81:92:9f:2a:c1:b8:2c:25:7e:6a:ca:49:39:59:a7:8a:cb:4e:
6e:ca:ff:73:3a:f1:de:40:52:df:75:66:0d:28:20:80:cb:30:
5c:1d:a7:d9:51:13:4e:9d:86:da:77:83:89:6a:2f:97:54:98:
70:88:cb:9a:d4:a4:f2:dd:96:4b:6b:44:c8:74:9b:1e:73:4d:
ee:db:03:8e:13:03:ce:21:d0:9d:72:84:ee:85:f0:1c:04:30:
9b:f3:b9:a4:78:4b:51:b4:9a:7d:3e:34:59:db:9e:b5:0b:d5:
0e:3d:0f:0b:d7:3f:23:5f:f0:e9:9a:51:90:57:03:23:5c:dd:
9a:99:ca:1c:15:46:34:21:63:86:06:1f:00:f3:78:83:79:cd:
e5:a9:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 17:16:37 2026 by rpki-client