
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: Vgx0Y2csLJkhxsbH8rmHU2SnzgTVT4M+AJwFk8RV3so=
Subject key identifier: C5:DB:81:3C:C0:28:D2:F7:09:44:86:9C:73:21:32:D3:58:DC:AD:EF
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 26C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 26A8
Signing time: Mon 20 Jul 2026 15:46:19 +0000
Manifest this update: Mon 20 Jul 2026 15:46:18 +0000
Manifest next update: Mon 27 Jul 2026 15:46:18 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: DVFohrEYPc5DWf/U/xiLljlNWsxUi7dcQRcn12h9ypg=)
2: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=)
3: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=)
4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 15:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9923 (0x26c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Jul 20 15:46:18 2026 GMT
Not After : Jul 27 15:46:18 2026 GMT
Subject: CN=6a5e42cb-f835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4f:bd:3a:2c:8b:1a:5c:00:04:cf:8a:2b:12:
55:dc:a7:6c:ee:02:27:de:78:9d:24:3c:97:6b:ac:
78:ee:f6:8d:a0:5f:c2:2d:98:e4:22:8b:54:5d:7d:
56:b0:28:b1:cc:7a:5f:e6:2e:03:d2:73:1a:f0:9b:
e9:ba:37:aa:f0:45:c7:02:b1:0e:a1:10:43:c6:23:
31:4e:a6:5a:a8:da:aa:39:c7:32:5a:8b:0b:39:5b:
20:75:8a:75:3d:50:3a:ba:38:b8:92:ad:f2:04:7e:
83:c1:d0:85:42:18:66:f9:a3:19:3d:8c:50:e2:75:
8c:fa:95:f5:8c:1a:fa:cd:2c:a9:d5:66:a0:d5:f7:
e6:1b:b3:39:21:0d:89:6f:38:e0:28:bc:10:8b:51:
f2:9c:14:24:44:5f:91:43:97:2d:3a:27:79:b8:83:
39:24:a1:cd:98:06:33:db:78:86:1d:02:d7:74:7c:
b7:e9:9e:85:cc:6a:9b:1f:8c:a6:ae:e5:a7:9d:68:
df:1f:67:05:56:c6:ab:01:a4:0c:d3:3c:5d:06:40:
b1:4b:df:e9:7b:50:17:cb:f7:3f:bd:00:94:f9:10:
34:fb:34:92:22:46:a1:1c:7c:00:9b:e2:1c:02:e3:
d1:5b:81:20:3b:45:6d:c6:d4:5a:84:d1:e4:19:74:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:81:3C:C0:28:D2:F7:09:44:86:9C:73:21:32:D3:58:DC:AD:EF
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f7:d2:8a:2b:69:18:72:ae:28:b4:0b:39:cc:9d:47:b9:6e:
2e:4a:13:54:c7:3f:a5:ca:4e:f4:16:fd:80:39:51:82:73:f8:
01:fe:53:6e:dd:d2:73:45:f0:53:c7:6d:5c:cf:43:cb:a0:c8:
2a:d3:9b:d6:1d:cd:1e:e7:68:19:23:05:9e:4c:15:ea:d7:06:
b3:84:09:a3:16:f5:57:d4:7d:29:3c:a7:ce:30:10:b2:b5:a0:
b2:01:5b:09:25:17:15:f0:27:26:c4:fe:1f:54:2b:8f:69:ec:
34:bb:b2:d0:2f:20:a8:eb:2d:b7:15:4f:3f:b3:2b:92:f3:5b:
ba:5d:f1:40:a1:d4:3b:82:ef:3a:73:1e:71:4e:13:fd:40:08:
27:40:4e:c6:b2:6f:fc:30:1b:bb:1e:c2:0d:63:1e:d8:3f:95:
8d:fe:36:bd:0d:8d:1e:f3:ec:36:c6:3f:44:cc:dd:f7:db:67:
a3:cf:3a:e2:37:df:75:7f:1e:f8:4b:99:cf:1b:6b:ed:a6:b2:
50:09:41:46:42:c5:90:dc:86:5b:e6:06:a8:55:f0:f6:f3:90:
f5:79:ce:0c:89:8e:75:0a:64:00:ff:ce:9a:5c:37:a0:d1:9c:
8c:34:76:4d:29:90:0f:cf:86:c7:7d:43:ba:b2:af:18:76:80:
4a:15:74:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:19 2026 by rpki-client