
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
File: VIY3awW4olUjKeNhvXJcd-H40Mk.mft (raw, json)
Hash identifier: FSQ3KZKkDaeuGAGq+pTYbRznWS+xqWoIUy88R6xHTng=
Subject key identifier: 00:5A:46:D3:05:E2:AF:10:03:6B:5C:3B:8B:D2:B0:6E:F7:0D:4D:40
Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Certificate serial: 0E15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
Manifest number: 0DAA
Signing time: Wed 20 May 2026 18:05:38 +0000
Manifest this update: Wed 20 May 2026 18:05:38 +0000
Manifest next update: Wed 27 May 2026 18:05:38 +0000
Files and hashes: 1: VIY3awW4olUjKeNhvXJcd-H40Mk.crl (hash: uPzHql/F2/gp7fVWPs6qkqtAEMNEvMLjFzxh+k/G/SA=)
2: 8560F10A4D5611F1B0F28AF4CD833773.roa (hash: WV4Htfmu0puGLpvi9qz2+zaFt4QQUqaj7qB/i9J9dNQ=)
3: 3B85D8D644BC11F1ADDF5543B9833773.roa (hash: RklW5hrk4zusSUgdhb9Rw20W0+Br/qkJMjbhJKUJYC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 18:05:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3605 (0xe15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9
Validity
Not Before: May 20 18:05:38 2026 GMT
Not After : May 27 18:05:38 2026 GMT
Subject: CN=6a0df7f2-7543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:2d:66:dd:aa:46:97:dc:24:b6:de:be:29:
c6:8c:ef:c2:7f:73:cd:8b:98:9b:88:44:a2:01:55:
90:d3:1c:be:23:21:14:1e:97:48:27:eb:de:11:11:
48:c9:28:9c:d8:35:51:b0:9e:51:c3:4b:c6:5a:6d:
3e:04:04:02:77:2f:8e:86:98:df:eb:85:de:81:b7:
dc:75:0f:26:24:37:92:ee:52:f0:26:de:4e:0d:aa:
30:ff:a8:f8:f9:f0:8b:32:97:71:66:62:0e:3c:f4:
d1:a6:a6:7e:5c:4d:a5:05:35:70:5b:62:4f:75:55:
05:0a:21:52:1c:a5:a0:30:14:21:49:67:76:b8:52:
ef:4d:19:d7:33:4f:69:cb:ac:44:f7:2f:96:22:f4:
b6:f1:fa:44:e9:3b:8b:fc:38:a2:9e:a0:94:77:3a:
cf:40:cf:2f:a6:20:62:0b:fd:5c:62:39:c4:97:92:
d8:11:56:f5:a9:25:a0:87:57:35:28:2d:a8:2a:ec:
7f:1f:69:17:bc:a7:74:1c:29:94:2b:5d:e7:5e:06:
60:86:b7:c2:14:d6:ae:07:4b:13:08:c9:2e:9f:89:
d6:be:d1:f1:d0:d2:ac:a2:1f:65:23:47:49:b7:00:
c6:d5:19:ae:dc:1f:bf:3f:68:61:7a:34:dd:78:04:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:46:D3:05:E2:AF:10:03:6B:5C:3B:8B:D2:B0:6E:F7:0D:4D:40
X509v3 Authority Key Identifier:
keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:9c:5a:05:c0:a2:3e:c5:16:34:95:38:37:fa:7c:8c:19:5e:
71:75:bb:28:6d:74:48:ad:67:7f:34:84:6f:ca:8c:42:3c:2e:
f0:99:3b:1b:b6:e8:f4:a0:25:ed:1d:0b:5d:89:79:bb:67:4a:
ce:47:9b:4c:3a:ff:52:96:c0:42:75:f1:09:dd:42:3c:75:df:
01:42:5b:24:b7:64:d5:18:04:d2:b6:64:c3:8f:b1:d7:fa:2a:
0e:5e:89:57:55:03:d2:48:37:94:de:93:c8:f9:bf:86:7e:2b:
16:49:ff:21:b8:61:d1:c4:b4:c4:9a:1c:e3:0d:9c:9d:82:3a:
c9:59:7e:30:df:30:0f:31:a4:00:c9:8c:cd:72:f9:d2:0f:4d:
c1:c6:cf:70:6c:e0:8e:08:9a:58:d3:4c:c1:57:6d:5a:6e:26:
59:84:40:a9:2b:54:68:20:ef:a6:e2:2f:e1:85:6d:e5:f2:0d:
31:b8:4b:d2:85:f1:2c:ad:14:ea:8f:9c:7a:b4:42:85:06:51:
f6:e4:20:f5:af:4e:fd:74:df:78:3b:e8:7b:37:84:d2:4e:81:
5a:2c:79:92:e5:5a:4d:f2:69:d6:94:ab:6a:fe:9d:55:fa:08:
6b:2f:aa:c5:01:0f:12:27:f8:ff:d0:6d:34:79:4a:1f:d9:dd:
d4:be:cf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:28 2026 by rpki-client