
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
File: vUxEHwLHrdQvpiQugzHZP1nlGDo.mft (raw, json)
Hash identifier: gko9mgMXPje+P9v6GdLl+TJvCa5dGXrTwqCgS9qDQdc=
Subject key identifier: EB:97:F7:ED:70:F4:2A:72:C3:62:4B:AA:36:40:33:76:36:1E:F7:6C
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Certificate issuer: /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
Manifest number: 02CA
Signing time: Sat 03 Oct 2026 01:56:59 +0000
Manifest this update: Sat 03 Oct 2026 01:56:58 +0000
Manifest next update: Sat 10 Oct 2026 01:56:58 +0000
Files and hashes: 1: vUxEHwLHrdQvpiQugzHZP1nlGDo.crl (hash: aYy8GydUrG2Fc5wl0PPduob263aN5TkOO2LVavMyjHY=)
2: 7A5433D6A37811F083057A2CC4F9AE02.roa (hash: FANmQvsw9bCwAwyqdXDJrppPXNeZUQEnf9l9y1Ou+Zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 01:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C67F9, serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Validity
Not Before: Oct 3 01:56:58 2026 GMT
Not After : Oct 10 01:56:58 2026 GMT
Subject: CN=6ac060eb-163e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:d7:30:ac:04:29:a4:ba:ff:fb:8c:84:78:
7d:56:ac:b9:29:bb:1e:dc:34:4b:d8:ed:6e:f9:79:
47:41:52:93:05:6f:8b:16:a8:9b:00:75:f1:35:5d:
23:bc:76:4c:ff:b1:77:bb:5d:54:25:e4:fd:cb:2a:
7a:2e:11:d5:06:4f:fd:ae:11:66:6b:2e:44:9b:a7:
61:18:a0:b7:d1:21:52:86:c9:d8:f7:b1:5f:aa:9d:
cc:c8:0c:d3:85:cc:52:1d:d4:72:5b:d4:ab:ec:f4:
0e:ef:5e:68:c0:d6:36:32:97:9e:d7:d1:4b:1a:dc:
eb:e5:35:cb:63:b0:22:39:f6:b3:11:57:65:11:40:
4b:a7:70:a8:19:4c:7b:51:b2:86:9f:6d:e9:3f:e4:
86:ea:cd:1d:1c:94:2b:b0:0b:e4:aa:97:e7:23:47:
72:a6:54:79:4a:06:43:a2:9a:c1:c5:b2:a5:fc:d7:
8f:95:c4:93:9e:07:05:ad:0c:41:86:9b:67:7b:1a:
d9:23:b9:c4:c4:de:82:bf:cc:15:29:c3:de:bf:52:
1e:7c:c6:1b:07:c0:2c:56:6a:2b:13:d2:96:c1:4f:
e7:ef:b2:f2:d5:ec:91:07:b6:53:b1:5c:8f:46:d6:
4e:32:66:0c:20:dd:1e:cb:c3:0a:cd:60:93:83:ca:
f6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:F7:ED:70:F4:2A:72:C3:62:4B:AA:36:40:33:76:36:1E:F7:6C
X509v3 Authority Key Identifier:
keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:de:13:32:94:12:9d:da:a8:d0:06:5e:dd:4e:d4:47:d2:05:
7b:ae:2d:e3:5b:eb:ec:77:a9:62:2b:83:0f:96:1a:80:36:f7:
85:ed:75:01:3b:5a:d0:af:50:dd:7b:46:a6:ec:25:2c:85:7a:
13:34:45:70:6d:fd:5a:2b:fb:0e:15:19:39:55:e5:d3:f0:fc:
79:bd:fa:70:da:cf:81:5b:7e:6f:58:df:7d:5b:a1:19:94:a7:
3d:c5:83:2d:bb:92:93:09:1d:14:c5:f6:ae:30:a2:6d:4b:b8:
5f:11:e4:dc:8f:33:cc:b3:e1:55:26:1b:43:96:b9:46:f6:ef:
36:97:4d:67:f9:71:2d:59:35:ec:9f:c3:0b:80:3d:51:bc:2b:
d7:11:e5:4c:b2:f7:03:ec:1c:b0:21:6a:48:9a:6c:27:fb:d7:
8d:f5:51:b6:16:99:9f:81:37:2d:e8:db:8b:b1:6d:ec:9d:2b:
8c:b1:a0:bd:9c:88:83:b0:c0:cc:5d:2c:95:34:45:40:b8:47:
92:18:e3:82:7d:a3:8c:17:72:d6:34:0a:f7:39:7b:b1:35:8f:
c9:71:77:ea:34:aa:0d:14:ed:a9:05:0a:f6:ec:d9:a3:0e:d0:
db:ea:9c:74:a8:0a:9b:a7:23:32:68:a3:ba:a1:65:fc:9b:d0:
38:05:80:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:35 2026 by rpki-client