
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier: Z8Xykq1hdVIeuzluaKZTn1gFtdxTeqtxREzA0Ai4YfQ=
Subject key identifier: DC:99:E5:14:3B:1F:92:33:D5:9C:A9:FE:01:04:97:5E:11:BA:EE:15
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0E3B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number: 0DCE
Signing time: Mon 20 Jul 2026 18:16:57 +0000
Manifest this update: Mon 20 Jul 2026 18:16:57 +0000
Manifest next update: Mon 27 Jul 2026 18:16:57 +0000
Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: QoykqJG3o1xvFDvUjmRjIDF0fBMAHNHBnIx9iLFObnQ=)
2: 3B85D8D644BC11F1ADDF5543B9833773.roa (hash: RklW5hrk4zusSUgdhb9Rw20W0+Br/qkJMjbhJKUJYC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 18:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3643 (0xe3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: Jul 20 18:16:57 2026 GMT
Not After : Jul 27 18:16:57 2026 GMT
Subject: CN=6a5e6619-cb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:3e:89:89:4c:ee:7d:55:ed:e6:ec:1b:be:
f2:1d:45:cb:ee:bd:df:f4:bb:8c:81:94:db:3b:81:
d1:bf:ef:ac:97:d3:ce:29:48:89:1e:63:b3:3d:e9:
0e:79:92:15:7d:12:16:98:29:bf:70:ca:70:c0:11:
ba:b5:91:fc:e8:e6:2a:b9:04:74:5f:a6:09:0e:47:
74:ad:e1:23:10:df:f3:76:61:6e:1a:31:f7:a8:7a:
1a:5e:9b:a3:db:69:6e:6a:1c:5e:d1:f0:5e:35:19:
7f:75:46:95:23:ee:7d:61:19:f2:75:62:0c:c5:72:
51:0f:88:d6:a6:00:a8:53:55:87:84:12:34:49:1c:
ea:d2:8e:9f:96:9d:b9:5a:3f:68:98:78:99:52:dc:
99:56:5c:8a:dc:54:df:9d:97:97:82:7f:9c:35:e6:
4a:62:48:a7:44:8e:92:ce:25:3c:a8:73:f9:ea:1a:
e4:9d:4e:f6:d4:d8:c7:2b:48:41:a8:99:7b:2c:54:
9d:dc:b5:3a:ad:70:1b:dc:f6:73:98:0f:70:0c:13:
6c:2e:2b:7f:69:c5:0d:97:64:1c:87:0d:17:62:40:
ea:04:bb:58:a6:10:eb:1e:f1:51:62:ee:72:40:9e:
a4:b3:81:d8:39:ea:8d:25:99:74:cc:1a:dc:38:b3:
3b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:99:E5:14:3B:1F:92:33:D5:9C:A9:FE:01:04:97:5E:11:BA:EE:15
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:1f:0b:48:2f:c3:9d:39:ba:53:77:65:d0:67:0f:09:16:d1:
9e:30:ee:4a:28:8b:24:8f:7e:0f:78:ba:25:1a:e8:f9:25:84:
18:4f:66:50:7e:08:e3:81:9b:fb:08:53:94:41:22:08:93:3a:
0f:1f:46:7c:d0:68:37:00:a2:78:ad:bf:24:f4:bf:c4:be:c3:
ef:59:5e:35:e0:15:1d:89:e1:ad:e6:c8:0a:c7:5f:0f:fa:e6:
3b:75:88:5c:e7:c5:76:38:52:de:c7:a1:5a:25:88:35:ec:02:
32:b0:06:1c:fc:3a:9e:46:2b:42:64:80:83:7c:a3:b5:8c:98:
db:61:73:fa:80:21:97:f7:e6:68:6e:89:38:8f:fd:e8:76:bf:
84:13:38:cf:a8:7f:2e:67:bb:cc:0a:90:52:3f:40:95:ca:7d:
d1:f5:f0:7d:18:1b:e2:0e:d3:1f:6b:33:0b:f0:93:d0:3b:8b:
e6:37:81:62:8e:1c:8d:75:2d:1a:09:32:32:84:ee:7c:7c:a9:
02:12:97:d6:68:05:b7:ac:69:b6:6e:33:db:4d:88:45:98:c5:
74:a8:29:da:9f:ab:88:0c:d0:31:31:05:79:72:58:89:cd:28:
1a:da:71:c2:f8:18:75:bf:29:96:6d:75:02:2f:72:1f:3e:97:
35:5c:9a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:06:37 2026 by rpki-client