
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
File: _vLBxOoJZEd1FMGqlG5sQXeNBr8.mft (raw, json)
Hash identifier: Wt9eWuTfPJ0GF4TDZKXF2xncCidm2h+RsMX2Y71WVbc=
Subject key identifier: 2C:BB:44:0F:BD:95:E6:B6:2C:6C:ED:88:99:FE:E0:0A:AB:F6:F7:F9
Authority key identifier: FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
Certificate issuer: /CN=A91D298D/serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Certificate serial: 0991
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
Manifest number: 0942
Signing time: Sun 04 Oct 2026 20:29:31 +0000
Manifest this update: Sun 04 Oct 2026 20:29:31 +0000
Manifest next update: Sun 11 Oct 2026 20:29:31 +0000
Files and hashes: 1: _vLBxOoJZEd1FMGqlG5sQXeNBr8.crl (hash: 4ePzfL5NsZ56uAJpe5dkekri8nkCDl0Q8ZtuhtD5O3s=)
2: 01BB1B8E7C0411EFB0D29158C4F9AE02.roa (hash: Bo7KfSmgopE09z8Ii/6iDq4ZBQOfTMw5H36AojNCI5M=)
3: 65519ACC506C11EC99354984C4F9AE02.roa (hash: +giwTMwqmDi92nyh2W//WCrh8pfdmutnmr2rqJ6v09s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D298D, serialNumber=FEF2C1C4EA0964477514C1AA946E6C41778D06BF
Validity
Not Before: Oct 4 20:29:31 2026 GMT
Not After : Oct 11 20:29:31 2026 GMT
Subject: CN=6ac2b72b-c43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:da:2c:e0:4e:a8:da:93:52:3d:dc:e9:2f:
a4:a7:47:73:3c:04:5e:fa:6a:35:32:c7:b2:1d:af:
39:0f:7f:47:e1:69:d8:a8:73:73:77:53:eb:89:8d:
ab:b7:d3:e7:9c:f9:90:b2:b4:55:ba:89:64:57:b7:
bf:93:b9:cc:b4:90:fd:53:54:25:b4:05:2e:7c:61:
db:af:5b:1c:10:9d:26:d1:58:ff:58:9b:16:da:d7:
a6:b2:be:32:ec:f3:7b:bb:8c:55:b4:4d:79:ee:d2:
ba:2f:ad:47:b4:c1:13:27:1a:d1:90:dc:b1:3f:b5:
0d:bc:ff:bb:4c:fd:71:0c:a6:e7:c1:85:0c:08:31:
3f:73:61:9c:fd:9b:6b:73:fc:28:89:13:d7:e9:cd:
a9:30:79:26:ab:bf:b8:cf:54:88:a3:a4:06:61:e6:
b5:92:2d:31:e5:c5:bd:7b:5f:e3:20:48:ec:24:43:
ea:f4:e3:88:44:e6:0d:dc:22:44:38:42:b5:74:2f:
76:89:67:46:fd:08:ba:0f:28:f3:09:74:5e:1b:6a:
bf:4a:19:44:14:df:f5:37:19:4c:4b:2c:54:da:92:
f0:88:b1:43:77:ae:c9:b6:a5:26:10:c5:fc:73:16:
a1:02:07:61:b7:ff:34:7a:01:18:b6:e9:a9:63:96:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:44:0F:BD:95:E6:B6:2C:6C:ED:88:99:FE:E0:0A:AB:F6:F7:F9
X509v3 Authority Key Identifier:
keyid:FE:F2:C1:C4:EA:09:64:47:75:14:C1:AA:94:6E:6C:41:77:8D:06:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vLBxOoJZEd1FMGqlG5sQXeNBr8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/337A6432F1A611EAB95C0E2FC4F9AE02/_vLBxOoJZEd1FMGqlG5sQXeNBr8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:c1:85:f9:3b:2c:9b:ef:f5:57:ed:59:9c:78:ad:35:7f:ec:
81:b3:a1:4e:91:ea:ae:3d:0a:1d:68:d6:2a:66:a7:31:a4:51:
d4:36:1b:6d:85:69:32:c7:97:9b:54:83:d0:af:7f:f1:d5:a4:
85:e7:4a:1c:08:89:e4:d8:56:dc:45:a7:58:54:44:53:96:2e:
59:6a:c0:33:ae:12:14:52:5e:b2:43:7a:d6:36:a2:8a:a5:c0:
94:d5:11:6b:64:64:36:e7:32:47:ab:54:44:45:0d:27:28:90:
d3:1d:1a:13:51:ce:d5:5a:c6:36:9b:c3:69:9a:3e:7e:d1:8c:
5f:1a:d5:bd:9a:1e:02:91:97:b4:a4:dc:78:66:14:46:e3:3e:
14:6c:17:be:34:10:0c:18:5e:27:3c:be:9e:be:7f:76:d1:f8:
8a:20:22:fc:f9:e4:1d:e0:e5:7e:e5:aa:40:e6:13:94:93:96:
cc:c8:9d:e4:8a:32:29:3d:89:d1:7f:d3:55:f4:be:18:eb:0d:
41:98:ff:cc:60:3b:73:64:d2:24:59:a4:ed:d8:f6:ea:ce:e0:
5e:0b:e1:3e:cf:a5:c9:36:13:62:b6:4e:f8:db:1a:77:69:f5:
af:d3:16:ae:b6:a4:5b:ee:c6:d0:8a:c5:3f:cb:33:d5:48:cd:
95:36:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:20:13 2026 by rpki-client