
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier: 3DYFOfgsr5iM7tjM+Kf2T/R+WI8ulXvZ5sQcJ19YT0Q=
Subject key identifier: 3F:9D:1D:F0:E7:6A:49:DD:98:B7:1D:B5:2C:06:84:E0:1B:03:A7:81
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 1044
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number: 1036
Signing time: Tue 18 Aug 2026 17:37:35 +0000
Manifest this update: Tue 18 Aug 2026 17:37:34 +0000
Manifest next update: Tue 25 Aug 2026 17:37:34 +0000
Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 00xLlOPeK0Vx69yGAjvgsFrqteayYMaJCd8z8UjSmRM=)
2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:37:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4164 (0x1044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Aug 18 17:37:34 2026 GMT
Not After : Aug 25 17:37:34 2026 GMT
Subject: CN=6a84985f-c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:fc:be:c1:93:ed:15:b2:42:29:4c:7e:90:
1e:bc:d7:20:b5:13:ce:2c:50:71:4c:ab:d0:78:d3:
5c:0e:17:51:87:48:87:72:99:69:2e:98:06:f9:64:
45:fa:ea:e2:c9:aa:16:21:5f:5b:06:fe:8f:21:20:
13:1e:3b:90:6f:44:58:6c:ea:21:cd:c8:a4:48:33:
85:27:16:31:49:8f:db:42:02:c7:37:b1:d4:f9:ca:
44:9f:e9:f8:0a:3f:68:6b:36:9d:e6:16:14:7d:cc:
14:14:b8:9a:a3:c7:9a:c8:14:5b:fc:1a:5a:57:3b:
25:3d:78:16:e4:88:6e:6b:1a:9f:58:36:8d:58:2b:
7e:bf:35:4b:d5:b7:f2:d2:aa:bd:f7:38:7f:b4:07:
5f:1b:a6:e1:2c:a9:cc:d5:54:68:94:ee:c9:a0:93:
f0:0b:36:c3:41:9b:08:0f:8b:ba:b1:c8:8f:70:b2:
83:ce:c7:54:29:6f:1a:8c:c2:45:bb:7a:d5:85:c6:
9e:1f:35:2b:66:ba:63:5c:96:74:34:04:8d:ad:96:
96:95:2b:e0:ad:79:57:f4:79:59:77:73:ad:b7:16:
99:5b:d4:7c:ae:da:26:06:6e:fc:28:31:73:33:25:
59:b0:3f:4a:07:1b:96:4c:5e:56:86:2d:63:35:38:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9D:1D:F0:E7:6A:49:DD:98:B7:1D:B5:2C:06:84:E0:1B:03:A7:81
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:11:7a:7c:2d:07:3c:76:56:51:2a:3f:66:db:c8:e3:d4:ed:
a9:fb:ac:c3:1b:5c:e3:e1:41:be:d1:a2:90:b9:b9:48:ad:dc:
72:71:f7:8e:fa:0d:78:a2:f8:65:6a:b4:19:c8:7b:7a:de:35:
e2:74:0a:92:f8:f4:61:18:03:42:4f:ad:d4:1b:ba:ed:8e:db:
aa:e5:fa:92:24:77:12:02:a5:6b:2e:d9:87:14:2e:d6:cc:0a:
bf:0d:7b:19:d6:09:e2:6a:09:5d:0c:ba:8e:e2:e9:e1:e2:c2:
d0:62:f8:13:e1:41:a7:5d:32:cb:e4:ab:01:77:4d:5f:43:81:
52:3d:fc:ec:37:98:ce:1c:46:3a:25:11:30:b5:23:7b:cd:33:
73:4a:c5:8b:59:c5:a5:b5:43:22:52:0f:ad:72:8c:cd:c0:a3:
00:b8:57:02:ee:89:11:ed:d8:a6:e9:72:ea:7b:9e:5b:02:12:
d6:db:e8:92:9e:6c:fd:f5:ae:27:d2:cc:cd:b0:45:59:3a:61:
f2:44:6f:39:5d:b4:0e:87:a7:f4:33:d4:fa:4a:21:b4:47:24:
0b:6d:47:ee:cc:6b:ce:da:0c:64:c6:60:12:a1:36:69:4c:28:
00:db:50:12:82:58:ef:ca:7a:c7:9d:c8:58:61:a5:1f:71:f1:
2a:ba:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:35 2026 by rpki-client