
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier: BCpnZDy9tUt2ZQez1gq6MNC2tzSUQTfArwy7XtCEry0=
Subject key identifier: F5:CC:05:8B:02:C4:F2:53:E6:E6:5E:E6:94:EF:B0:69:2A:20:CF:AC
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: 013A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number: 15E4
Signing time: Mon 12 Oct 2026 18:23:24 +0000
Manifest this update: Mon 12 Oct 2026 18:23:23 +0000
Manifest next update: Mon 19 Oct 2026 18:23:23 +0000
Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: M+11Qjxw7PB1vx5su7wO04XXkduIfZLP5vN5JcGgr8s=)
2: 3FF2864AA43D11F1B8FFEA023611F970.roa (hash: Kk0AuJ/Ryqtzie4lfhU9TW/rv+oP1/JoDGak//4Qkco=)
3: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: nHHzFrXJRcXIb2I9fczhxDS1jU+m1O4shauWLpm0dzk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 18:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Oct 12 18:23:23 2026 GMT
Not After : Oct 19 18:23:23 2026 GMT
Subject: CN=6acd259b-91ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:cc:39:01:2a:6b:0c:75:8e:fb:70:63:18:
85:f3:12:12:a9:8e:f4:b4:ab:3f:af:3e:d7:e7:d2:
50:b5:4a:76:9a:19:c7:9a:fb:56:75:d8:dd:7e:19:
62:1e:74:3d:a9:e1:4f:da:d3:1b:87:04:b6:ff:4c:
c8:c4:82:5e:43:75:f6:76:d0:94:4c:c5:ff:bd:29:
e9:1d:33:41:80:bb:34:af:73:43:3d:22:50:e2:a1:
29:05:c7:c0:58:9b:8a:d1:85:ac:c0:23:16:e1:0e:
2c:26:56:57:e9:21:06:b8:ec:72:5d:9d:58:76:7c:
ab:f6:86:76:13:20:9c:35:6d:8b:03:70:22:40:f7:
3d:b3:61:1b:5d:ac:bf:f7:62:38:1e:35:b0:54:1d:
90:24:84:ff:56:36:8f:f9:3a:3b:9f:91:9f:77:2b:
6f:59:38:9d:ff:1f:f4:83:3d:8a:53:98:a8:a3:a6:
1d:c6:d2:e3:24:de:95:a9:43:fd:f6:31:45:f5:3d:
ca:15:d6:42:01:33:12:c0:8f:e3:88:c0:70:ba:75:
8e:9b:87:ae:e2:39:b2:2b:52:45:68:7c:78:5a:82:
e1:7a:56:03:c0:ab:f1:dc:c7:31:31:3b:8c:07:75:
e9:aa:d3:cd:4f:94:e8:a6:37:f8:2f:6e:c9:a1:74:
29:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CC:05:8B:02:C4:F2:53:E6:E6:5E:E6:94:EF:B0:69:2A:20:CF:AC
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7e:41:3f:d1:f6:cf:0a:07:db:bc:29:c1:6c:e7:91:c8:ce:
20:31:9d:c8:b2:0c:1b:bf:e8:e4:db:32:b5:29:2d:06:49:1b:
84:60:fa:33:2f:f2:20:c4:ab:83:45:1c:39:65:90:91:9f:ae:
b9:89:0d:3f:de:79:ce:3d:6c:9a:63:fb:7b:df:3d:1f:51:dd:
c8:d3:0f:bc:f5:bd:ef:16:74:54:94:8c:fc:50:36:2f:d0:94:
4d:27:7d:77:0f:77:48:d0:f1:ab:b1:83:77:f1:f4:61:ec:b4:
82:8b:26:fa:5d:b0:d5:da:72:9e:ae:88:e5:46:31:e9:c7:e4:
23:64:ae:af:71:6d:73:05:2f:55:e7:4a:7a:d7:32:52:ad:b6:
81:72:2f:e4:df:c6:db:bb:25:c7:59:96:fd:72:a7:9b:6e:65:
cb:57:4a:f0:1b:cd:11:a3:c4:6d:84:2a:85:91:50:7c:92:de:
90:63:9f:39:94:ba:dc:a4:73:28:79:c4:6c:90:d2:10:3d:91:
7d:df:02:fe:d4:c1:5e:c7:84:7f:54:0f:73:84:00:c3:87:36:
cb:b2:95:69:f3:fb:17:71:2c:18:b1:c7:2b:9f:b5:a4:2b:ac:
ec:6b:c4:38:34:a3:b1:3b:b3:24:24:b3:fa:94:23:f4:1e:37:
0e:07:12:77
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYxMkUxMTAvBgNVBAUTKEJFQTdFOThDNUEzRkI1RkJEODMwQTQzNTk0NDFCNDIy
NDcyN0M3MkQwHhcNMjYxMDEyMTgyMzIzWhcNMjYxMDE5MTgyMzIzWjAYMRYwFAYD
VQQDEw02YWNkMjU5Yi05MWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn3TMOQEqawx1jvtwYxiF8xISqY70tKs/rz7X59JQtUp2mhnHmvtWddjdfhli
HnQ9qeFP2tMbhwS2/0zIxIJeQ3X2dtCUTMX/vSnpHTNBgLs0r3NDPSJQ4qEpBcfA
WJuK0YWswCMW4Q4sJlZX6SEGuOxyXZ1Ydnyr9oZ2EyCcNW2LA3AiQPc9s2EbXay/
92I4HjWwVB2QJIT/VjaP+To7n5GfdytvWTid/x/0gz2KU5ioo6YdxtLjJN6VqUP9
9jFF9T3KFdZCATMSwI/jiMBwunWOm4eu4jmyK1JFaHx4WoLhelYDwKvx3McxMTuM
B3XpqtPNT5Topjf4L27JoXQpzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXMBYsC
xPJT5uZe5pTvsGkqIM+sMB8GA1UdIwQYMBaAFL6n6YxaP7X72DCkNZRBtCJHJ8ct
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC
NjExMUVBQUYwNDJGNjhDNEY5QUUwMi92cWZwakZvX3RmdllNS1ExbEVHMElrY254
eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZxZnBqRm9fdGZ2WU1LUTFsRUcwSWtjbnh5MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi92cWZwakZvX3Rm
dllNS1ExbEVHMElrY254eTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAi35BP9H2zwoH27wpwWznkcjOIDGdyLIMG7/o5NsytSktBkkbhGD6My/yIMSr
g0UcOWWQkZ+uuYkNP955zj1smmP7e989H1HdyNMPvPW97xZ0VJSM/FA2L9CUTSd9
dw93SNDxq7GDd/H0Yey0gosm+l2w1dpynq6I5UYx6cfkI2Sur3FtcwUvVedKetcy
Uq22gXIv5N/G27slx1mW/XKnm25ly1dK8BvNEaPEbYQqhZFQfJLekGOfOZS63KRz
KHnEbJDSED2Rfd8C/tTBXseEf1QPc4QAw4c2y7KVafP7F3EsGLHHK5+1pCus7GvE
ODSjsTuzJCSz+pQj9B43DgcSdw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:42:05 2026 by rpki-client