
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
File: VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft (raw, json)
Hash identifier: ipPsP6azxhqllbCyb6uIKBVx7yFqR9zWB12prpfeMj4=
Subject key identifier: 5A:DF:6B:22:26:D2:FD:4F:6B:6B:9D:03:C3:BA:EB:D9:EA:9D:EF:E4
Authority key identifier: 55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
Certificate issuer: /CN=A91C23DC/serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
Certificate serial: 0D34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
Manifest number: 0D1E
Signing time: Fri 04 Sep 2026 18:13:46 +0000
Manifest this update: Fri 04 Sep 2026 18:13:46 +0000
Manifest next update: Fri 11 Sep 2026 18:13:46 +0000
Files and hashes: 1: VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl (hash: V+8yQnxF+As37bOtpqP/TAIOW7Y8+5pS+prkhbCGZF8=)
2: 598BD2E268D111ED99477B87C4F9AE02.roa (hash: DCzIu7CILC93Y/AaTkM9+LUyGULYyH1ab9eTUGXE5NE=)
3: 5AA3FD0868D111ED99477B87C4F9AE02.roa (hash: CGowp4w2GBQ9qV/GHYQUjgIY+WC1P2t6NRtsfQxE+ag=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl
rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C23DC, serialNumber=55F2E48740058E8FCC4F901A4A33E1F4176200F8
Validity
Not Before: Sep 4 18:13:46 2026 GMT
Not After : Sep 11 18:13:46 2026 GMT
Subject: CN=6a9b0a5a-413d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:e9:c2:d9:e9:4c:5b:26:c7:b5:b6:18:de:
db:8c:3d:03:a8:95:f9:ba:94:15:84:a3:be:e4:52:
5d:2d:62:d8:ab:7a:1e:d7:02:27:27:3f:cf:f1:64:
26:e2:8e:82:55:3c:d6:97:eb:a3:f5:2a:16:1d:3a:
a2:4d:d5:ce:7e:83:b5:1a:0e:28:a8:6d:19:ef:df:
35:35:d9:d8:a2:72:38:23:7e:ea:cc:d2:7f:bb:00:
bb:0a:30:84:6d:50:ea:b0:5f:1f:2e:86:4f:4c:40:
19:e1:9e:e9:40:62:79:4b:5b:b2:41:22:f7:d1:e9:
22:d6:7e:a0:15:75:ea:48:a6:6c:69:10:be:b8:e1:
31:a0:f4:00:12:ae:19:be:ba:92:80:04:15:4a:50:
ce:18:56:99:e4:49:1e:1b:3d:dd:c0:bc:fa:ef:57:
d4:4e:ca:c6:2a:43:ef:89:d7:46:13:67:80:04:8b:
b7:07:f9:62:4b:6f:fd:b0:49:ea:c8:b8:8b:99:69:
a1:49:42:f7:ce:47:03:17:5c:58:76:44:e0:6d:3f:
91:48:ab:fb:6a:e3:62:20:37:3c:92:30:18:5e:32:
c0:b1:8e:ef:1f:55:d7:50:93:a9:56:d2:bf:d8:9d:
d7:d5:60:8e:5a:75:19:0f:8d:26:70:4b:b0:1d:04:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DF:6B:22:26:D2:FD:4F:6B:6B:9D:03:C3:BA:EB:D9:EA:9D:EF:E4
X509v3 Authority Key Identifier:
keyid:55:F2:E4:87:40:05:8E:8F:CC:4F:90:1A:4A:33:E1:F4:17:62:00:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VfLkh0AFjo_MT5AaSjPh9BdiAPg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C23DC/06639F860A9311EA85AD886AC4F9AE02/VfLkh0AFjo_MT5AaSjPh9BdiAPg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:b9:05:d0:2e:79:e0:0c:50:d5:12:c1:cb:28:79:3f:07:a9:
a3:79:ea:65:bb:ad:ec:03:a1:2f:32:f7:c4:66:3b:34:83:61:
ea:b8:b9:d7:18:cb:d1:53:4b:8f:f1:84:fa:7b:1f:ae:ed:58:
ed:5b:d9:3b:18:6e:01:93:31:0b:f1:28:41:2f:e5:12:dd:60:
01:4b:30:01:4a:d4:a7:04:f8:92:e2:13:34:ea:81:20:6e:6a:
cc:ee:a6:0a:50:b8:69:79:03:b3:d7:5b:80:32:9b:5b:b3:7a:
74:a3:80:09:64:8d:5a:eb:ec:40:39:70:22:ae:bd:fe:a7:2c:
17:2e:13:87:4d:92:4f:a9:09:a3:3e:6a:4b:9e:46:60:fb:39:
e3:1a:b2:36:e1:86:86:20:48:c0:4f:67:d9:a5:04:9a:c1:36:
8c:e1:5c:5b:5a:25:cc:30:98:f4:92:9c:32:42:64:1e:08:03:
0c:ac:fe:1e:21:fc:e2:5c:05:8a:f4:ce:98:2b:dd:56:1d:5b:
3c:b8:9c:20:41:44:93:8f:06:36:1a:55:af:b1:b2:05:c0:5d:
33:33:e9:c1:02:07:27:ce:cd:38:d4:53:ea:81:34:be:02:54:
7a:c7:bb:e7:19:00:a1:a7:e1:88:bb:3c:00:72:df:70:d9:6a:
5e:0f:5a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:36:27 2026 by rpki-client