
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
File: vBRJ7peREatw2N-Y2rpOJrprxls.mft (raw, json)
Hash identifier: knWwuplg9fivT64dNY4GjfgEoABjss8fVceFleUTaAQ=
Subject key identifier: 09:57:72:88:8C:44:B0:0C:DE:79:43:C1:3A:42:4B:26:6C:F9:71:D2
Authority key identifier: BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
Certificate issuer: /CN=A91CCA34/serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Certificate serial: 081A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
Manifest number: 0810
Signing time: Tue 18 Aug 2026 21:33:08 +0000
Manifest this update: Tue 18 Aug 2026 21:33:07 +0000
Manifest next update: Tue 25 Aug 2026 21:33:07 +0000
Files and hashes: 1: vBRJ7peREatw2N-Y2rpOJrprxls.crl (hash: 8w39IFsdcRSl71r3RTZrwMCf81MA2yvXeKHIfNIx1gU=)
2: 7633392033B411EB98035F74C4F9AE02.roa (hash: p6hXF7E6xlvbRKYmPzeG7CcENSLwetloa0sJ8/RE+N0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 21:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2074 (0x81a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CCA34, serialNumber=BC1449EE979111AB70D8DF98DABA4E26BA6BC65B
Validity
Not Before: Aug 18 21:33:07 2026 GMT
Not After : Aug 25 21:33:07 2026 GMT
Subject: CN=6a84cf94-b3e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3b:c3:c4:4b:e2:11:d2:af:89:7e:1a:13:9b:
4b:37:9d:fa:99:2c:bb:55:0e:a8:c2:55:38:78:2e:
33:77:23:2d:fb:d6:87:5e:c8:a7:cf:db:46:c0:53:
d6:02:7a:75:4a:49:86:66:a7:60:04:29:04:2f:6e:
e2:21:14:5b:f3:8c:1d:46:7b:0b:64:6e:be:7c:04:
2b:61:a0:96:67:4a:00:d7:b0:40:94:83:a0:4f:c1:
25:06:e3:ea:6b:5a:9f:b2:5c:3a:fc:4c:70:0c:8d:
7d:c3:d2:5e:0f:b7:ad:80:dd:5b:40:44:f7:8b:2a:
53:13:a7:73:e0:87:a0:52:56:df:63:a8:db:6c:9f:
f8:e7:d2:d3:27:33:43:c9:53:1a:b3:b6:8c:3e:75:
c1:b9:7b:21:81:e6:c1:e6:c9:5e:6c:4b:41:5c:25:
ee:37:3c:53:8b:37:d8:18:f3:f7:10:63:85:64:1f:
57:71:d3:13:a8:a6:97:40:b5:3f:89:8b:21:8d:68:
bb:15:15:59:53:a3:99:bb:3d:77:4a:36:6f:dc:28:
96:b8:37:8b:ee:4c:9a:76:83:a2:d2:c8:ae:db:a4:
8e:ba:cc:6b:96:50:1b:3b:05:f0:33:5e:62:60:5c:
ef:1c:1e:4d:a0:35:1c:20:28:d3:6c:35:e1:77:c9:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:57:72:88:8C:44:B0:0C:DE:79:43:C1:3A:42:4B:26:6C:F9:71:D2
X509v3 Authority Key Identifier:
keyid:BC:14:49:EE:97:91:11:AB:70:D8:DF:98:DA:BA:4E:26:BA:6B:C6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBRJ7peREatw2N-Y2rpOJrprxls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCA34/6FAA367833B211EBA88A0A6FC4F9AE02/vBRJ7peREatw2N-Y2rpOJrprxls.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e1:f0:49:ff:09:01:3f:02:3b:da:1b:a2:1c:9b:ac:07:cc:
39:ff:c6:b3:de:7e:ed:d5:e9:49:fb:2d:5e:4b:ee:c5:b3:63:
16:ca:58:42:f7:61:11:2e:1b:9c:5f:df:37:f4:22:d1:d1:47:
7f:c0:2d:a7:ee:17:e0:41:0c:7a:36:d5:11:e3:d7:57:21:91:
4c:28:6b:90:98:cc:01:ef:7e:0a:91:a2:14:58:08:b1:2c:3b:
7e:8b:69:97:e1:c4:6f:d2:40:85:11:19:a9:a0:ca:d8:d2:62:
5f:62:ec:2f:23:18:b4:ff:a3:d1:27:8a:7b:67:97:70:df:05:
fd:5f:b2:bb:e6:32:50:4e:d1:f3:75:41:c8:01:4e:ad:6c:ee:
c5:14:0a:c4:6b:18:f8:16:92:3f:7a:10:14:10:e9:cc:58:37:
09:eb:0d:73:0a:54:dc:c6:2a:9f:9c:17:6a:50:75:1f:a7:5b:
3d:f2:ef:e1:f7:b7:76:87:ae:04:1c:ad:c3:9a:2e:49:4a:b9:
d0:0e:92:31:5f:e4:c9:2e:4a:32:19:29:39:38:e0:29:5a:95:
19:f5:e7:e0:0e:f1:e7:72:5b:00:b2:44:5f:bd:7e:00:ff:da:
dc:f7:22:d7:c3:8f:aa:d9:f1:3a:b8:78:6d:d2:0f:74:60:9f:
79:bd:47:4a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0NBMzQxMTAvBgNVBAUTKEJDMTQ0OUVFOTc5MTExQUI3MEQ4REY5OERBQkE0RTI2
QkE2QkM2NUIwHhcNMjYwODE4MjEzMzA3WhcNMjYwODI1MjEzMzA3WjAYMRYwFAYD
VQQDEw02YTg0Y2Y5NC1iM2U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zvDxEviEdKviX4aE5tLN536mSy7VQ6owlU4eC4zdyMt+9aHXsinz9tGwFPW
Anp1SkmGZqdgBCkEL27iIRRb84wdRnsLZG6+fAQrYaCWZ0oA17BAlIOgT8ElBuPq
a1qfslw6/ExwDI19w9JeD7etgN1bQET3iypTE6dz4IegUlbfY6jbbJ/459LTJzND
yVMas7aMPnXBuXshgebB5slebEtBXCXuNzxTizfYGPP3EGOFZB9XcdMTqKaXQLU/
iYshjWi7FRVZU6OZuz13SjZv3CiWuDeL7kyadoOi0siu26SOusxrllAbOwXwM15i
YFzvHB5NoDUcICjTbDXhd8lDpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAlXcoiM
RLAM3nlDwTpCSyZs+XHSMB8GA1UdIwQYMBaAFLwUSe6XkRGrcNjfmNq6Tia6a8Zb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0EzNC82RkFBMzY3ODMz
QjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVhdHcyTi1ZMnJwT0pycHJ4
bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZCUko3cGVSRWF0dzJOLVkycnBPSnJwcnhscy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
Q0EzNC82RkFBMzY3ODMzQjIxMUVCQTg4QTBBNkZDNEY5QUUwMi92QlJKN3BlUkVh
dHcyTi1ZMnJwT0pycHJ4bHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWuHwSf8JAT8CO9obohybrAfMOf/Gs95+7dXpSfstXkvuxbNjFspYQvdhES4b
nF/fN/Qi0dFHf8Atp+4X4EEMejbVEePXVyGRTChrkJjMAe9+CpGiFFgIsSw7fotp
l+HEb9JAhREZqaDK2NJiX2LsLyMYtP+j0SeKe2eXcN8F/V+yu+YyUE7R83VByAFO
rWzuxRQKxGsY+BaSP3oQFBDpzFg3CesNcwpU3MYqn5wXalB1H6dbPfLv4fe3doeu
BBytw5ouSUq50A6SMV/kyS5KMhkpOTjgKVqVGfXn4A7x53JbALJEX71+AP/a3Pci
18OPqtnxOrh4bdIPdGCfeb1HSg==
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:53:52 2026 by rpki-client