
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
File: vXVo3ESTcv4iwuyet3K31ugtKoA.mft (raw, json)
Hash identifier: vRCxABDPkbFj7CluVr1xeMhY1TO8IfFJedgbayCCjdA=
Subject key identifier: A8:FE:A7:A1:CB:44:FB:D5:4B:09:DE:F7:B2:48:52:16:65:12:BE:90
Authority key identifier: BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
Certificate issuer: /CN=A91D6940/serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Certificate serial: 08FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
Manifest number: 08F1
Signing time: Thu 16 Jul 2026 20:36:30 +0000
Manifest this update: Thu 16 Jul 2026 20:36:30 +0000
Manifest next update: Thu 23 Jul 2026 20:36:30 +0000
Files and hashes: 1: vXVo3ESTcv4iwuyet3K31ugtKoA.crl (hash: aKItvx5N5vIhtIrWSuK4KxlN450g3JMNsGvY9DlcOC4=)
2: 153BEF1EE34A11EFA6960F0CC4F9AE02.roa (hash: Cl5Iksm78xy4pdyZHSdPHHDj46EQ0DV5IDZjQy+nR+s=)
3: 160ADCACE34A11EFA6960F0CC4F9AE02.roa (hash: JbCPb2/G06LWsiRDNl/iJAib0NI/NVkqoq8wvubR2Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 20:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2303 (0x8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6940, serialNumber=BD7568DC449372FE22C2EC9EB772B7D6E82D2A80
Validity
Not Before: Jul 16 20:36:30 2026 GMT
Not After : Jul 23 20:36:30 2026 GMT
Subject: CN=6a5940ce-95ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:58:fc:e5:c1:f4:2c:7f:7a:f7:3e:33:e1:
70:7f:97:6d:60:ff:11:fa:69:4a:42:9d:c7:69:3d:
ed:bf:59:ff:6b:a8:b0:c9:c7:a7:d2:5c:3b:58:dd:
b0:68:44:7b:35:79:d0:87:5e:ed:3c:de:d2:20:30:
59:34:c2:6f:b7:cc:de:25:6c:4d:7b:49:9b:2d:08:
b9:e4:59:9b:21:7d:43:f1:ed:e0:9e:e2:ca:20:b3:
b9:3b:b4:ab:4e:85:69:09:5a:38:cf:7c:07:ee:42:
3e:87:8f:5f:35:18:44:f1:71:43:6b:35:35:71:5c:
76:0f:92:6a:21:6f:d0:4f:56:8f:9e:76:68:84:69:
e9:9f:93:73:ad:6d:1d:d2:09:b2:d2:78:70:e8:da:
32:8f:66:d7:e8:01:87:23:8e:b3:c5:69:f6:cb:07:
97:6a:b1:65:3d:a2:d0:99:4f:67:a3:bd:b7:b5:a2:
cf:96:fb:9b:a9:ee:e6:e9:24:59:f6:84:34:0d:7c:
7a:03:2a:60:52:11:b0:a7:0a:71:69:cc:4f:8e:14:
e9:5f:b1:61:1b:48:0d:ff:00:d6:22:96:67:80:1c:
19:c5:08:4b:eb:f8:98:07:45:9b:dd:96:18:de:00:
c4:62:89:a4:b1:12:1c:4e:44:85:fe:82:5d:7d:cb:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FE:A7:A1:CB:44:FB:D5:4B:09:DE:F7:B2:48:52:16:65:12:BE:90
X509v3 Authority Key Identifier:
keyid:BD:75:68:DC:44:93:72:FE:22:C2:EC:9E:B7:72:B7:D6:E8:2D:2A:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXVo3ESTcv4iwuyet3K31ugtKoA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6940/E0D06B82D77E11EA8EE61B32C4F9AE02/vXVo3ESTcv4iwuyet3K31ugtKoA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:b8:7f:d2:f8:db:6e:0d:98:f4:52:d1:b3:7e:ae:fa:7a:7d:
c4:f8:59:83:2a:bf:52:60:69:19:c5:4d:62:ff:b0:2e:a7:1f:
e7:f9:2a:c3:38:a3:e6:74:fa:04:59:e1:34:79:0e:ad:e1:b4:
b8:4e:9e:5e:6a:b4:e3:79:34:64:a4:d5:1c:ad:30:a7:dd:e2:
e3:5d:5c:06:be:b8:e2:1d:4c:a0:86:cd:13:ed:9e:cb:28:9c:
e8:9f:5c:ad:2d:b6:79:91:f4:dd:d4:92:3a:7d:b6:fd:b3:22:
69:8e:96:da:dd:2c:19:b6:8a:13:d7:cb:11:fb:5b:f5:9e:85:
7e:ae:5c:27:54:29:ea:d1:d0:85:80:87:ec:56:f9:3c:66:89:
84:2c:f3:2d:3a:cd:fa:5b:27:70:63:23:4a:e9:ef:06:0f:5d:
0e:62:e0:c5:51:24:d8:9d:cc:12:ec:28:99:16:30:32:f0:67:
1e:8f:a8:e8:bc:1e:a4:b5:82:7d:25:c4:86:b1:24:40:39:a8:
08:7e:cd:31:20:71:c4:7a:84:a0:0a:50:93:d4:08:3b:fe:37:
b3:6f:65:b7:e0:3f:a3:23:48:0e:c1:3c:72:11:67:e8:a6:21:
63:cc:b2:37:fa:74:0b:87:4d:e9:47:c1:ae:8c:fa:4e:58:bd:
c8:16:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 12:17:08 2026 by rpki-client