
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
File: vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft (raw, json)
Hash identifier: aPENzitPC/nYRD/GlmbVKKgQpvGqnoLkbsvinu8IJyE=
Subject key identifier: AB:2F:B8:00:E1:52:52:2C:C7:25:09:2C:2A:7A:2B:E3:DE:87:53:09
Authority key identifier: BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
Certificate issuer: /CN=A91CD277/serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
Manifest number: 07
Signing time: Wed 19 Aug 2026 09:57:12 +0000
Manifest this update: Wed 19 Aug 2026 09:57:12 +0000
Manifest next update: Wed 26 Aug 2026 09:57:12 +0000
Files and hashes: 1: vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl (hash: cuEY4qwyvLQjMTcZR9PvcUxvYmxr0o7UYCiDRG1lJOY=)
2: 6541C736955011F182DDD8986311F970.roa (hash: VmYiwJkdtivR6HXc5cYeknzo53XRP+VA+7pqAoe/M2U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl
rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD277, serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
Validity
Not Before: Aug 19 09:57:12 2026 GMT
Not After : Aug 26 09:57:12 2026 GMT
Subject: CN=6a857df8-0e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:cd:ea:87:d7:74:d5:5e:bb:73:b8:ae:cf:
e3:96:a2:c4:a5:88:94:d7:f3:9e:a8:e4:20:82:66:
ef:5c:44:ee:9f:9a:3d:7d:2f:60:5b:a0:44:f3:e9:
23:00:56:4b:42:9c:3c:fa:74:f1:cd:8a:d5:7a:92:
6e:0a:e0:60:93:0a:72:67:bd:50:09:58:b6:50:54:
55:b2:04:90:19:a7:4c:c5:bf:0f:41:f6:88:51:c3:
fc:8b:56:e2:af:01:e1:80:b3:a6:6c:e3:d7:69:92:
03:55:68:a6:c4:ed:c6:2e:33:70:59:be:26:fb:82:
98:b1:b3:ac:a3:46:0c:27:e3:d6:b0:a9:36:14:75:
d0:dd:32:9c:d6:75:0d:ca:fb:0c:a7:01:a4:bb:71:
22:8b:a5:be:c5:33:e9:7a:4e:c7:2c:ce:af:63:78:
35:a9:81:85:33:ac:35:87:23:a7:e6:9c:aa:9b:41:
d3:76:53:e1:56:5a:3a:ab:8c:4a:b6:a0:01:95:8e:
86:fb:50:06:2a:e1:d3:d8:28:a0:f2:83:70:0a:de:
53:89:a1:64:73:db:18:65:5c:2d:2a:22:cc:09:da:
3b:94:7d:8c:c3:2a:42:3b:a6:45:9c:33:22:fe:7f:
22:c7:15:38:cf:6e:1d:13:b9:e9:15:16:df:3e:01:
59:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:B8:00:E1:52:52:2C:C7:25:09:2C:2A:7A:2B:E3:DE:87:53:09
X509v3 Authority Key Identifier:
keyid:BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:fe:b7:62:76:ba:f0:68:d3:47:ce:f1:b3:36:2b:b3:6e:9a:
21:66:9f:40:27:8a:60:ec:ee:09:ab:70:94:00:f1:76:1b:c9:
1c:82:58:5d:5f:31:6c:9a:c8:f8:50:e4:01:0d:f0:e6:37:93:
7a:0b:32:f7:5e:e7:47:1c:5a:99:28:23:32:e4:e4:6e:d4:db:
0b:23:28:aa:77:b8:a5:3d:4c:e4:69:77:56:57:a1:9b:a0:fc:
7c:b0:dc:6b:0c:65:8f:3c:29:89:7f:0c:39:0c:4b:e3:81:61:
60:c5:bb:c8:69:0a:2f:3d:92:b4:a7:63:0c:79:16:2f:d1:0c:
d9:25:ac:a2:87:cc:d5:a6:cc:3e:21:f0:fc:e1:90:d2:a7:15:
24:41:f5:47:76:1b:04:76:bc:b6:7b:f3:e7:77:48:34:22:fe:
82:50:b5:cf:ef:23:fa:d3:04:2d:7a:54:e9:eb:73:4f:82:0d:
b1:fb:5c:f0:3a:ef:b0:f3:9a:9b:1a:3a:a0:28:58:45:f4:62:
aa:25:f4:4e:74:e5:23:72:81:65:18:30:45:2c:28:a2:19:b7:
91:f5:46:07:aa:56:d9:ff:9f:48:30:04:0f:db:ad:90:31:16:
31:64:96:01:a1:e8:72:0a:02:67:67:1b:ad:c4:96:4e:c8:17:
ef:ab:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:59:57 2026 by rpki-client