
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File: vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier: 4PNxdD1rv8B/SbAFwjrK6g13ltoUGdlRNhFans6MByg=
Subject key identifier: F7:19:C6:B2:DE:A1:20:B1:B7:12:83:4E:C6:21:8F:0D:DE:48:37:9D
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer: /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number: 19
Signing time: Sat 07 Mar 2026 08:12:48 +0000
Manifest this update: Sat 07 Mar 2026 08:12:47 +0000
Manifest next update: Sat 14 Mar 2026 08:12:47 +0000
Files and hashes: 1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: YJwY1usWP3JEASHMYjf4VNzVL/M2xfFW8Z3IJlWWbrc=)
2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:50:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Validity
Not Before: Mar 7 08:12:47 2026 GMT
Not After : Mar 14 08:12:47 2026 GMT
Subject: CN=69abde00-a8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:4e:09:e3:96:dc:ab:3c:81:f3:ab:8c:ea:
3b:8e:4e:a2:ee:b8:9a:a3:68:4f:2b:29:a7:39:03:
fb:5a:22:bd:bd:9c:7f:6c:82:85:1d:e3:b5:3d:a0:
49:b1:bc:f9:7a:cf:68:5a:9f:bb:06:44:7c:ed:0e:
6d:0f:d6:fc:14:47:a7:a5:af:b3:57:6c:b9:46:c7:
91:c4:d6:85:15:af:7c:63:75:1b:64:82:4e:03:a1:
95:4d:28:97:c6:ac:2a:59:3b:ca:4e:7c:59:7a:db:
f7:c2:44:a9:8b:ff:48:f5:aa:cd:93:26:84:e4:48:
f6:7d:fe:77:e6:84:04:ae:e6:64:80:c3:12:b8:6d:
d2:d1:b5:33:aa:09:45:b3:b2:f4:76:13:6f:fa:4a:
ed:93:f6:97:80:21:30:77:51:ec:b6:19:9d:3b:88:
45:8b:ff:ae:33:80:38:c0:38:08:df:7e:6d:3e:b3:
d9:a5:41:2d:2e:f9:bc:80:c5:a9:d6:6f:62:9d:b6:
b5:a7:e0:72:79:33:44:75:d4:00:e7:de:c4:26:d3:
c9:b9:da:d4:59:5d:3e:5c:1e:12:42:d6:de:5c:cc:
f8:90:28:73:b6:77:15:9a:b3:34:2a:dd:54:94:f3:
9b:fc:23:a5:d8:41:ef:cd:72:16:83:8e:1f:d8:1c:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:19:C6:B2:DE:A1:20:B1:B7:12:83:4E:C6:21:8F:0D:DE:48:37:9D
X509v3 Authority Key Identifier:
keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:d8:c6:8b:52:e0:56:dd:df:20:1f:05:6b:f3:88:4a:53:
eb:25:cf:13:18:1d:ea:c6:ad:c0:b7:49:5a:1c:32:b3:21:17:
54:36:9a:e4:0c:3e:b1:38:fd:26:d0:06:5c:bd:36:91:cb:38:
2d:ba:ee:62:23:4a:d0:cc:26:f2:5f:00:f0:ab:d9:5b:54:37:
5c:7e:96:2c:6a:80:40:61:9f:5c:86:7d:df:c7:71:5d:75:d8:
85:05:b6:ab:9f:ae:54:63:11:e5:e3:14:22:29:91:dc:e1:23:
4a:7b:e5:23:71:83:c6:e2:1e:31:96:f3:eb:26:ff:73:41:18:
56:91:3f:7a:0f:9a:84:fe:13:3a:48:90:b9:26:fa:de:8a:68:
9e:db:d4:ee:27:03:32:25:8d:b7:0e:f7:48:2a:78:f7:3c:48:
a8:b6:5b:8c:dd:ea:b3:64:68:33:7d:ae:d1:7b:a9:28:da:d0:
34:b1:ba:fb:bd:00:d8:ce:1e:8d:e1:f0:9f:4b:c4:68:4f:dd:
06:4a:8c:ce:4a:83:6a:e7:a6:dc:05:34:f5:1b:37:ee:0d:47:
01:cd:64:95:a2:aa:8f:52:e4:70:a0:36:65:32:e8:bd:3a:44:
11:8b:0c:1b:1c:57:91:66:cd:56:e3:84:32:a2:f4:74:0a:07:
b6:52:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:33:17 2026 by rpki-client