
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
File: vmV8x_anGoEMa1JeGkxyucvU1u0.mft (raw, json)
Hash identifier: ar7NEh6i5ZdHuM1HZOuDKvkXBeugnUMBhMweL0san+g=
Subject key identifier: 4D:3D:D8:4D:52:DC:0F:58:1F:67:E0:9E:07:9F:03:D6:5E:47:07:DC
Authority key identifier: BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
Certificate issuer: /CN=A91CFBCB/serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
Manifest number: 8F
Signing time: Sun 25 Oct 2026 07:57:07 +0000
Manifest this update: Sun 25 Oct 2026 07:57:06 +0000
Manifest next update: Sun 01 Nov 2026 07:57:06 +0000
Files and hashes: 1: vmV8x_anGoEMa1JeGkxyucvU1u0.crl (hash: dmIQWHevcDBysMIyXY5WiVgoE0EXdU5loKc7qSbbnZ4=)
2: 2FA448EAFDBD11F083E9CE8F676F56BC.roa (hash: RcZ+8Tgkr/98lt0nqg0mgsZ2FAFTLU/F6UQiIHa5elE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 07:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CFBCB, serialNumber=BE657CC7F6A71A810C6B525E1A4C72B9CBD4D6ED
Validity
Not Before: Oct 25 07:57:06 2026 GMT
Not After : Nov 1 07:57:06 2026 GMT
Subject: CN=6addb652-7492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:98:53:77:04:12:a2:e1:2a:37:1b:1a:c8:
79:0a:d4:07:70:90:8d:40:0a:35:50:8b:7a:2c:23:
ff:80:e8:58:ae:0d:90:dc:16:5f:32:1d:ad:fd:e6:
af:03:be:97:36:03:62:c5:3f:76:7d:a8:75:1a:1f:
3c:f2:a6:44:87:bf:cb:21:1c:65:7a:dc:e1:3a:5e:
3b:14:a7:7d:24:52:af:0f:1c:6d:9d:72:f7:65:3e:
b9:21:44:8f:63:8c:14:16:82:39:24:12:50:ed:d2:
6e:68:d1:48:e3:a8:ea:f1:1e:b4:9e:9d:5a:01:ac:
a7:ea:bc:b5:61:fa:67:5c:76:35:b8:d3:aa:82:45:
3e:6f:05:9b:26:1d:7e:05:08:c4:4b:62:9d:a2:9f:
10:93:83:82:e5:fa:5e:bd:6f:26:60:d0:ea:8e:28:
5d:ad:11:d9:18:e5:69:b3:21:d9:0b:35:ad:db:6b:
ec:aa:60:98:7a:48:3e:d9:7e:31:e3:9d:96:d0:0b:
ac:49:63:fa:81:d7:d6:b7:ce:6b:81:9a:80:39:23:
d0:c8:82:ae:cd:17:ba:f0:22:06:82:8c:4d:b5:e7:
06:72:7b:82:f0:9d:e0:12:97:07:31:38:7f:53:26:
bc:79:35:d4:c3:a5:d6:59:f6:84:b2:62:66:88:27:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3D:D8:4D:52:DC:0F:58:1F:67:E0:9E:07:9F:03:D6:5E:47:07:DC
X509v3 Authority Key Identifier:
keyid:BE:65:7C:C7:F6:A7:1A:81:0C:6B:52:5E:1A:4C:72:B9:CB:D4:D6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vmV8x_anGoEMa1JeGkxyucvU1u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFBCB/CBC363D8FDBC11F0B93A5F71676F56BC/vmV8x_anGoEMa1JeGkxyucvU1u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:41:1d:6f:8a:df:17:89:0a:36:63:52:0c:ea:c9:ca:f6:de:
b2:44:fa:a4:70:84:c7:eb:c2:0c:7e:00:10:a2:2b:8b:02:8f:
8a:f6:98:59:ef:97:fe:fe:31:d1:bc:8f:51:34:7d:2a:c3:49:
fd:59:29:49:c5:13:09:56:f6:55:e0:e6:0a:e2:09:b4:8d:86:
a7:71:04:d9:40:a5:59:f1:5f:64:71:45:11:0c:68:bc:21:05:
6c:d2:c2:a5:69:bf:10:10:31:f9:ba:0e:b1:7f:a3:97:be:93:
2b:08:e7:9f:e0:7d:1b:7a:b9:77:fd:aa:4a:c2:8f:1f:7c:6b:
c5:66:c8:4c:a5:98:fc:c1:32:32:52:9c:41:10:b9:51:89:65:
fd:b1:1f:df:f1:d6:11:77:c2:14:50:4b:96:44:cc:69:71:16:
d5:4f:51:ab:aa:f0:52:22:22:8e:bc:e2:dd:46:ee:df:d6:a5:
80:17:14:d2:a2:49:dd:fc:7e:d4:b3:ff:0c:33:ca:17:da:b7:
02:7b:11:1b:7c:9c:e9:ec:88:5d:54:3a:82:dc:93:ef:d3:70:
4e:19:a9:fb:07:ca:6c:03:c3:20:53:d9:61:16:f6:80:38:54:
bd:cc:6d:14:7f:86:99:f9:fd:fb:9f:e5:9c:16:a7:55:1c:56:
46:8b:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:16 2026 by rpki-client