
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
File: VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft (raw, json)
Hash identifier: 06t/+432PA0Hyhvk3kHTSfCvm38p7DLjssYySFZHkOs=
Subject key identifier: B0:0B:18:23:65:6F:25:8B:99:5D:52:6F:CD:31:90:8B:7C:32:44:B5
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0717
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
Manifest number: 0600
Signing time: Fri 06 Mar 2026 23:24:31 +0000
Manifest this update: Fri 06 Mar 2026 23:24:30 +0000
Manifest next update: Fri 13 Mar 2026 23:24:30 +0000
Files and hashes: 1: VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl (hash: OO0LdDQ0cbXPs4hE5M6SrPx3x0/8NX8YdNwwk1Yzgos=)
2: 6A05B7C8D34F11F0879CFC0EC4F9AE02.roa (hash: NSkewz1Nti6QKVykPaOpJXeaqBl6UeIoyg+Z+Emi77U=)
3: 0D0517EE716911EDA03D4A50C4F9AE02.roa (hash: 44VXldbBCfEVQNtNcncHBjm9zUl5518bfQtv5Cwsbsk=)
4: 038A3E10C47C11F092370F0AC4F9AE02.roa (hash: PE30fEqW14AO5z9GLUYe95jY8ke+Jr+zM4xGnRRJLDM=)
5: 8DEEDC96E6B511EF9FEF6436C4F9AE02.roa (hash: g3gth29agU07YswlgFO81/ThxXY3l/MzAhQfGvaSf0I=)
6: 041C4116C47C11F0A98A0F0AC4F9AE02.roa (hash: nbLqVcL0fTjqbIJwLUXiGBSckIhHY+gUWicA4Ejfd+c=)
7: D359E238716B11ED9F349A49C4F9AE02.roa (hash: go9QI7FpdmjkqqbhQxd+M3xHAwb/d4cfJkbfC6AyPpc=)
8: 0C5EDCDA716911EDA03D4A50C4F9AE02.roa (hash: 1UzncEKSR5GFkiri+HSHWqbKXpOZsxz5QJtUjNS60dU=)
9: D4FCF92C716B11ED9F349A49C4F9AE02.roa (hash: XMmSyDgKxtH6qPeamyVCMMC+VcBd+O1+Cvw9Hsg5W7w=)
10: 48CB7422E27911ED88B5A641C4F9AE02.roa (hash: JnZNG5CGc8oHU0w2EbnMQvCrxn0rcrBgZn15GdSGzO0=)
11: B7342ECA555B11F0B35B1E0DC4F9AE02.roa (hash: 5Bt5jOSeH1ZirCo6XLSESzVh2uk9S+hEE8FWtq9svC0=)
12: ECC41AD2748A11ED80EF3436C4F9AE02.roa (hash: LmBb3E6ZOpW9OlLSpl9Xe8OqcU/Rwlz9J6Udb54EdW8=)
13: 9A1D8B2E867D11ED856A8E54C4F9AE02.roa (hash: fdYZt6jklY3bJQYs/J5vrVMo+1h7F5ICSVyf7ebtNOQ=)
14: 0BD4BBC2716911EDA03D4A50C4F9AE02.roa (hash: H3UyhkzzibOUYss8LsCthA0jqoyZZmdZqwto2ZgduQo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 23:24:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815 (0x717)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Mar 6 23:24:30 2026 GMT
Not After : Mar 13 23:24:30 2026 GMT
Subject: CN=69ab622f-0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:18:b6:6a:81:bb:8f:4e:f1:c0:55:98:29:24:
9d:5e:9f:a6:0f:14:b9:4e:5f:25:a8:2c:e1:8e:34:
ee:c8:1e:de:07:b5:9c:16:ed:a3:d9:76:37:35:84:
d6:71:c8:5d:86:48:85:47:88:9e:c1:63:89:89:03:
f5:70:3e:37:db:e8:75:4b:2c:8c:33:83:e2:f0:39:
84:ad:df:ff:d7:c9:d0:e2:79:34:b1:1f:65:c3:c3:
9c:ba:74:70:a9:d9:c1:c7:9a:4b:21:7d:b9:ad:05:
96:8e:31:e8:1c:08:b4:0c:22:3e:f4:5a:78:2f:02:
0f:41:0b:32:37:b7:e1:49:68:db:49:12:ff:17:ef:
03:e8:67:66:78:7e:16:d0:cc:d2:54:01:00:c0:0a:
1c:f1:36:30:f9:ea:7d:e1:d8:7a:1c:21:e6:e4:c6:
b1:0e:f6:8f:bf:40:c9:70:e6:9d:8e:e7:67:73:03:
13:1d:7d:7e:40:e5:40:0b:1d:ea:20:b9:ef:e1:68:
3f:7c:c6:02:e8:49:93:a1:22:2c:70:21:eb:21:19:
38:e8:ac:52:b8:64:5e:00:8c:aa:35:33:d3:2b:d7:
ee:53:ca:ed:80:5f:df:6b:8a:93:35:13:1b:ea:be:
8c:de:29:87:df:e6:35:33:31:85:a6:db:a1:68:24:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:18:23:65:6F:25:8B:99:5D:52:6F:CD:31:90:8B:7C:32:44:B5
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:d8:68:ae:0b:72:f7:cb:c5:83:a3:d6:17:a9:50:ba:33:79:
b9:b7:0c:fa:bd:2f:0c:c1:c0:8f:5b:dd:b1:cd:84:e1:b9:b6:
3e:54:f1:74:b5:90:6e:be:dc:53:8b:1d:fb:8c:66:4d:ad:61:
f9:51:7d:50:d7:d5:2c:47:b2:b2:b6:c2:5d:bd:cb:86:aa:90:
33:ea:68:79:8d:89:c5:54:f2:d0:0f:21:a5:d0:a9:48:8f:13:
a2:48:4a:c7:5c:77:27:ec:2c:fe:ae:cc:d2:08:a0:98:16:fd:
7a:91:04:eb:ad:08:aa:55:48:9f:69:45:cf:99:eb:bb:95:80:
a2:e0:37:cd:24:9c:d8:62:c1:b0:88:c4:aa:a6:19:f8:53:a5:
3f:10:dd:38:dc:28:ec:2f:2c:3d:1b:06:d6:9f:7a:86:1d:58:
44:a3:01:10:9b:dd:f4:15:c4:b8:ee:12:07:de:92:b3:e8:fc:
34:b9:a3:91:cd:af:4a:8c:08:9e:05:9c:be:04:ab:bd:74:b8:
74:37:20:1e:21:49:f3:a0:4e:ac:68:0b:d7:ba:d0:a3:ac:1b:
e4:ad:f5:0e:0e:f4:a0:ae:34:d3:cf:00:32:8e:e8:87:33:6b:
03:0f:d1:c2:88:fb:a9:56:85:4c:8e:43:5e:e4:47:6f:54:34:
32:b1:1f:70
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjYwMzA2MjMyNDMwWhcNMjYwMzEzMjMyNDMwWjAYMRYwFAYD
VQQDEw02OWFiNjIyZi0wZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApRi2aoG7j07xwFWYKSSdXp+mDxS5Tl8lqCzhjjTuyB7eB7WcFu2j2XY3NYTW
cchdhkiFR4iewWOJiQP1cD432+h1SyyMM4Pi8DmErd//18nQ4nk0sR9lw8OcunRw
qdnBx5pLIX25rQWWjjHoHAi0DCI+9Fp4LwIPQQsyN7fhSWjbSRL/F+8D6GdmeH4W
0MzSVAEAwAoc8TYw+ep94dh6HCHm5MaxDvaPv0DJcOadjudncwMTHX1+QOVACx3q
ILnv4Wg/fMYC6EmToSIscCHrIRk46KxSuGReAIyqNTPTK9fuU8rtgF/fa4qTNRMb
6r6M3imH3+Y1MzGFptuhaCRU8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLALGCNl
byWLmV1Sb80xkIt8MkS1MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RDM5RC9ERTdEMkY5NDRFNzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9S
WF9JbVgtU1JrSng5ZEJSX00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAldhorgty98vFg6PWF6lQujN5ubcM+r0vDMHAj1vdsc2E4bm2PlTxdLWQbr7c
U4sd+4xmTa1h+VF9UNfVLEeysrbCXb3LhqqQM+poeY2JxVTy0A8hpdCpSI8TokhK
x1x3J+ws/q7M0gigmBb9epEE660IqlVIn2lFz5nru5WAouA3zSSc2GLBsIjEqqYZ
+FOlPxDdONwo7C8sPRsG1p96hh1YRKMBEJvd9BXEuO4SB96Ss+j8NLmjkc2vSowI
ngWcvgSrvXS4dDcgHiFJ86BOrGgL17rQo6wb5K31Dg70oK40088AMo7ohzNrAw/R
woj7qVaFTI5DXuRHb1Q0MrEfcA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:09 2026 by rpki-client