
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier: bpJ7KzkWWT8sfsXmwt4C939RciPzQTqDQBPlpSvGrVM=
Subject key identifier: 21:24:D2:B5:68:D6:FE:20:5D:15:4D:9E:F3:00:01:A0:10:F9:DE:1D
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 0FFF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number: 0FF1
Signing time: Sat 04 Apr 2026 17:21:20 +0000
Manifest this update: Sat 04 Apr 2026 17:21:20 +0000
Manifest next update: Sat 11 Apr 2026 17:21:20 +0000
Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: VqzmEsSJZ+FKAhzUwexMqEccaaWOiKU6852ECsGMlBM=)
2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 17:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4095 (0xfff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Apr 4 17:21:20 2026 GMT
Not After : Apr 11 17:21:20 2026 GMT
Subject: CN=69d14890-c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:a9:da:ab:58:3e:c9:1c:72:f6:ae:22:46:
e5:dd:51:97:61:82:dc:05:a2:1a:4b:73:6a:4e:58:
59:c9:75:a9:7b:f8:c3:b9:d3:3a:a7:80:32:22:56:
34:40:98:6f:13:f1:97:2d:e0:ca:18:c0:df:08:76:
9e:fa:73:4f:6d:3c:35:bb:c0:1d:17:ab:da:e4:7b:
8e:70:38:a0:af:cf:89:e9:2d:d6:3d:4b:43:8d:da:
a6:b1:1d:c3:0c:14:b1:a7:11:4e:55:f2:a0:2e:0f:
b8:a9:f1:6d:06:75:1a:e1:50:38:02:77:d6:95:0d:
a2:ca:4e:37:13:77:52:a0:a2:f2:f1:6e:7d:69:08:
d2:90:26:9f:cc:1d:53:86:3b:ba:7e:fd:04:e8:fd:
69:11:14:35:d8:c6:88:47:60:fe:95:c9:44:b3:29:
e8:33:fb:ac:3e:b5:36:8c:b6:41:70:3e:dd:67:42:
6e:c5:45:ce:86:27:81:51:5f:3a:c7:a2:d8:66:25:
7d:ad:64:47:3b:c8:bf:2c:49:5c:49:f9:a1:5a:06:
b4:ab:84:ef:d2:7a:37:5d:55:f3:93:47:90:bf:eb:
ff:07:4e:6e:ef:95:57:f2:7e:c5:69:4c:a6:fd:d6:
0d:3a:b6:9b:68:c8:1c:35:c5:d9:6e:e9:50:66:ba:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:D2:B5:68:D6:FE:20:5D:15:4D:9E:F3:00:01:A0:10:F9:DE:1D
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:00:78:42:04:0a:5d:e1:8d:06:4a:89:23:24:0c:44:c7:52:
cc:3e:6e:33:c4:6d:e5:03:9b:f5:03:2b:4f:7e:21:86:d0:f0:
fc:a4:f4:79:eb:f2:28:23:cd:36:51:79:d8:19:ec:8b:5b:07:
cf:52:bb:d5:7f:b1:99:92:15:eb:fa:37:e9:8b:fb:64:aa:2e:
c7:e6:dd:39:22:fb:99:a8:30:c1:98:61:f3:30:7c:2e:a4:14:
3a:34:ad:41:3d:86:cf:37:f3:b0:5d:79:2a:2f:db:43:32:d9:
ad:3d:12:d6:a3:99:a7:64:fd:b1:16:46:a9:77:0a:5a:b5:83:
13:d8:a0:47:d7:b8:19:b3:cb:bf:b9:6f:ec:96:93:84:7a:3b:
bc:97:32:ae:31:26:8e:f0:c3:f3:9b:91:da:4e:51:44:2b:09:
30:c7:cc:bb:7c:ce:7a:d6:44:fd:8d:b4:90:09:9e:5d:4c:77:
01:39:5f:3b:25:fe:d3:52:76:84:d7:aa:13:4b:ea:d7:98:12:
78:29:ed:4f:bc:61:e9:ef:16:37:47:81:09:db:28:fa:73:98:
07:3e:5a:33:de:ef:81:52:89:52:bf:af:82:1e:23:96:2c:45:
6a:4b:12:fe:b0:aa:30:69:a5:dd:37:1b:93:21:ea:0a:5c:52:
36:5c:65:fd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICD/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzOTIxMTAvBgNVBAUTKDU3MzVBQjZBQUMzMjc5NTQ0MjRGOUZFOENBODUzMzQy
OTlERDdCQzIwHhcNMjYwNDA0MTcyMTIwWhcNMjYwNDExMTcyMTIwWjAYMRYwFAYD
VQQDEw02OWQxNDg5MC1jNGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzPCp2qtYPskccvauIkbl3VGXYYLcBaIaS3NqTlhZyXWpe/jDudM6p4AyIlY0
QJhvE/GXLeDKGMDfCHae+nNPbTw1u8AdF6va5HuOcDigr8+J6S3WPUtDjdqmsR3D
DBSxpxFOVfKgLg+4qfFtBnUa4VA4AnfWlQ2iyk43E3dSoKLy8W59aQjSkCafzB1T
hju6fv0E6P1pERQ12MaIR2D+lclEsynoM/usPrU2jLZBcD7dZ0JuxUXOhieBUV86
x6LYZiV9rWRHO8i/LElcSfmhWga0q4Tv0no3XVXzk0eQv+v/B05u75VX8n7FaUym
/dYNOrabaMgcNcXZbulQZrqjVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCEk0rVo
1v4gXRVNnvMAAaAQ+d4dMB8GA1UdIwQYMBaAFFc1q2qsMnlUQk+f6MqFM0KZ3XvC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Mi82RDZBMkEyODZD
RDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVWUkNUNV9veW9VelFwbmRl
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Z6V3JhcXd5ZVZSQ1Q1X295b1V6UXBuZGU4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTM5Mi82RDZBMkEyODZDRDgxMUU5Qjk5RkUzMjlDNEY5QUUwMi9WeldyYXF3eWVW
UkNUNV9veW9VelFwbmRlOEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADwB4QgQKXeGNBkqJIyQMRMdSzD5uM8Rt5QOb9QMrT34hhtDw/KT0eevyKCPN
NlF52Bnsi1sHz1K71X+xmZIV6/o36Yv7ZKoux+bdOSL7magwwZhh8zB8LqQUOjSt
QT2GzzfzsF15Ki/bQzLZrT0S1qOZp2T9sRZGqXcKWrWDE9igR9e4GbPLv7lv7JaT
hHo7vJcyrjEmjvDD85uR2k5RRCsJMMfMu3zOetZE/Y20kAmeXUx3ATlfOyX+01J2
hNeqE0vq15gSeCntT7xh6e8WN0eBCdso+nOYBz5aM97vgVKJUr+vgh4jlixFaksS
/rCqMGml3TcbkyHqClxSNlxl/Q==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:01 2026 by rpki-client