
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: DBKqf99xuagXLfjOYtU9mImV6c7W+FDm+MrWzn5y0/c=
Subject key identifier: 18:A3:4C:00:B7:B3:B1:95:EF:9C:B2:56:A2:77:81:39:52:33:70:D4
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 267E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 2663
Signing time: Fri 06 Mar 2026 16:19:58 +0000
Manifest this update: Fri 06 Mar 2026 16:19:57 +0000
Manifest next update: Fri 13 Mar 2026 16:19:57 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: NF1s8puU374gZLDMPnvvwlAJtK3IUfVDV51aIb3riVo=)
2: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=)
3: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=)
4: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 16:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9854 (0x267e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Mar 6 16:19:57 2026 GMT
Not After : Mar 13 16:19:57 2026 GMT
Subject: CN=69aafead-4e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:a5:d6:77:80:56:33:c1:fc:b2:65:a6:26:
85:94:e2:32:9e:5e:25:4c:9e:fe:9d:0c:55:a8:88:
eb:c9:1b:99:79:12:e5:4d:ec:5e:a9:73:c6:0c:ef:
6b:85:c2:0b:8c:50:23:c7:9f:b9:b9:ac:41:32:28:
af:cb:7d:69:34:f7:25:f8:80:c0:62:0d:d1:79:14:
cc:06:6e:a4:1e:5f:d8:e1:9d:c3:37:95:34:c8:fe:
6a:21:5b:68:eb:e4:ac:7f:53:e4:d3:63:fc:2a:92:
7d:85:09:ba:9e:22:83:54:a2:16:12:e3:51:cc:6c:
b7:78:04:da:4a:3b:f7:fa:ba:45:14:ca:b5:1c:4a:
7b:e0:d9:64:e6:0a:d8:63:d4:87:20:f2:c7:b1:6f:
fb:7b:6a:01:03:e7:eb:41:3f:23:25:a2:a0:16:ee:
64:d4:09:bc:f9:1e:f3:d5:07:f9:94:5e:11:85:2d:
5c:1a:72:63:73:c7:5f:22:23:cd:be:57:ec:90:7b:
5f:22:c7:cd:f6:5a:da:15:80:de:dd:bb:ef:66:16:
50:7d:88:c4:3b:69:2b:79:77:f3:bd:c4:f0:3c:39:
37:e5:7b:fa:93:b7:14:45:a6:1b:06:b8:2e:b7:e3:
eb:9c:3d:64:97:63:63:e2:9b:ac:ab:dd:96:47:ce:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:4C:00:B7:B3:B1:95:EF:9C:B2:56:A2:77:81:39:52:33:70:D4
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
39:4b:80:07:a3:7b:f0:8a:73:2a:90:16:78:ca:d0:8a:73:f2:
d4:93:07:bf:6e:b8:ce:10:15:67:b4:04:c8:e2:dd:7a:9f:fb:
b4:09:a1:f3:15:86:96:f0:b8:0f:00:f2:42:ac:04:84:11:e7:
1d:15:12:65:fd:6a:a9:50:de:97:a8:1f:e0:99:5f:b3:1b:9e:
26:85:92:b3:ca:07:1b:96:77:2d:06:1c:9a:80:00:f5:50:04:
13:2b:54:e5:5b:71:bc:58:f4:7e:00:04:08:51:02:fc:d8:07:
2b:e8:2e:09:4f:20:c5:04:53:84:7e:a3:9d:58:f7:d5:04:ba:
c8:ed:08:63:bb:8a:a0:cc:cb:42:8e:4a:86:38:e1:38:d4:fd:
7a:fa:06:40:33:da:52:4d:4c:64:27:81:4a:dc:bd:e7:c0:1e:
ff:c4:bc:3f:25:be:01:57:05:ee:d8:93:73:33:29:c7:a2:dd:
ea:5e:19:82:b5:8f:43:7b:58:f4:57:32:28:0e:cc:f7:27:25:
d8:2a:ee:b7:ff:fb:09:f1:28:58:30:6a:05:ec:69:ab:80:6e:
98:13:ac:09:f8:e8:1d:86:e8:47:da:4d:b7:5d:ad:c0:e8:2e:
67:1d:d0:8c:84:a6:f4:92:09:ff:74:19:46:a7:e8:3b:ee:a9:
e5:72:f4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:03:51 2026 by rpki-client