
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
File: VSG7pLlnmYQnwoK61rZvfm22twc.mft (raw, json)
Hash identifier: 5rMbok9njWSglrO/wDXjuLNyhKxuIF4gdI76kmrgQd8=
Subject key identifier: 23:5E:B9:34:A4:2E:A9:D4:D7:B1:4C:96:5E:C8:7A:48:D9:01:26:9B
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Certificate issuer: /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
Manifest number: 1D
Signing time: Thu 03 Sep 2026 09:09:41 +0000
Manifest this update: Thu 03 Sep 2026 09:09:40 +0000
Manifest next update: Thu 10 Sep 2026 09:09:40 +0000
Files and hashes: 1: VSG7pLlnmYQnwoK61rZvfm22twc.crl (hash: QV31ltygbMa3hZwLlPuxIh37G/bNGQQH3abpvHwYi84=)
2: 33A082DA948D11F1A5BE36406611F970.roa (hash: Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Validity
Not Before: Sep 3 09:09:40 2026 GMT
Not After : Sep 10 09:09:40 2026 GMT
Subject: CN=6a993955-f668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:50:54:c8:1b:71:bd:d4:dc:49:ab:76:44:
5c:09:d7:7d:53:79:13:a9:0c:fd:0f:99:a9:13:85:
6b:8e:84:33:60:11:6a:92:e9:bf:9c:dd:c5:7a:68:
a4:a3:9c:7b:fb:5e:1d:65:78:42:5c:5e:de:77:a1:
fe:ce:9b:6a:6c:1b:c4:cd:a5:ea:28:e9:34:4d:50:
05:18:05:e7:ea:a9:b0:f6:3b:ca:52:34:cf:1b:c1:
9b:e2:f6:61:35:42:5c:67:77:74:69:c2:93:0b:5f:
da:16:47:0d:34:ba:70:ba:ae:9a:80:ee:13:fb:de:
c6:40:af:68:e6:a6:9c:34:5f:d1:3a:13:f5:75:d4:
71:68:b8:87:d6:08:6f:c3:cd:f8:1f:1a:77:d3:26:
b5:4f:ee:98:08:89:a3:eb:ed:e4:cd:98:34:c2:89:
c3:6d:aa:0e:68:d6:b1:53:44:07:df:34:20:08:ca:
16:4f:c0:5a:96:b9:6d:e9:90:e8:00:43:ac:11:c7:
97:fb:3d:20:06:da:7a:1c:75:e5:be:8b:ee:75:df:
0d:0f:99:eb:32:f1:23:5f:9b:33:0f:13:73:0a:f1:
b9:93:e0:c7:20:44:88:1c:45:6b:1a:4a:41:07:78:
15:cb:2d:1c:8c:c6:a1:53:4c:93:45:59:9d:c7:fd:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5E:B9:34:A4:2E:A9:D4:D7:B1:4C:96:5E:C8:7A:48:D9:01:26:9B
X509v3 Authority Key Identifier:
keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:9c:64:0e:2f:fa:9e:08:bb:16:be:36:5c:59:af:25:48:cb:
b5:df:1f:b3:c9:0c:15:7b:c3:75:4e:96:8e:63:5b:c0:53:de:
60:d1:54:2f:45:8d:08:14:bf:42:3c:5a:b1:88:b4:75:f1:21:
88:b2:15:eb:a4:7c:18:d4:d8:e9:22:85:c1:f3:dd:0b:b4:8f:
45:29:73:4a:eb:ac:4c:00:e3:6d:b9:94:a4:34:2c:ac:8b:35:
71:66:b9:2d:70:67:11:83:c0:50:63:2d:88:b4:e6:3d:45:36:
77:8c:4f:89:cc:fc:3f:46:f8:68:c8:3a:cd:01:e1:2d:f3:ec:
0b:68:d4:e9:19:6d:d2:3e:7d:bc:e9:f8:36:a6:d6:8f:c4:6e:
b1:0f:5c:f0:02:fa:7a:bb:98:c8:90:a9:18:bf:09:82:c1:46:
eb:c5:95:ff:cf:3d:79:fc:c7:fc:9e:e2:8e:32:56:fe:8b:0e:
59:50:f4:90:75:d8:ee:b4:71:cb:a8:2c:b4:a5:a2:b9:ab:d8:
f2:3c:8b:fe:b3:a3:f6:34:6c:1e:fa:f5:5d:ce:9a:c7:2f:16:
72:52:0a:ee:26:dd:06:b0:d5:d3:4e:c7:66:c3:b0:ac:a9:a3:
ff:97:8f:64:d5:30:27:7a:37:6d:af:d0:1c:f4:01:00:aa:1d:
11:6f:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:34 2026 by rpki-client