
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.mft
File: Vqr94cBlHo7P2kqDVVuyyyzJR24.mft (raw, json)
Hash identifier: wdzcNy7YxKuF12mCdgh6Xi6dOOPhLJkvQfaqJOqEpFA=
Subject key identifier: 15:37:5D:8F:8D:E9:E2:13:82:DE:D4:2B:08:F7:B4:D7:81:85:80:A8
Authority key identifier: 56:AA:FD:E1:C0:65:1E:8E:CF:DA:4A:83:55:5B:B2:CB:2C:C9:47:6E
Certificate issuer: /CN=A91DCF4D/serialNumber=56AAFDE1C0651E8ECFDA4A83555BB2CB2CC9476E
Certificate serial: 21
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vqr94cBlHo7P2kqDVVuyyyzJR24.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.mft
Manifest number: 20
Signing time: Tue 15 Sep 2026 08:42:01 +0000
Manifest this update: Tue 15 Sep 2026 08:42:01 +0000
Manifest next update: Tue 22 Sep 2026 08:42:01 +0000
Files and hashes: 1: Vqr94cBlHo7P2kqDVVuyyyzJR24.crl (hash: ReV+WhVm1GTjMoxgpqIOfxPAWgBrtFk4gX2/OLYz9a8=)
2: 965EF658866011F1A288964D96A30FBC.roa (hash: dGbs85X+CwcKYWR9WyVqFz1vq8/SXGbxIkFjZSzf6L4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.crl
rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vqr94cBlHo7P2kqDVVuyyyzJR24.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 08:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33 (0x21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCF4D, serialNumber=56AAFDE1C0651E8ECFDA4A83555BB2CB2CC9476E
Validity
Not Before: Sep 15 08:42:01 2026 GMT
Not After : Sep 22 08:42:01 2026 GMT
Subject: CN=6aa904d9-631b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:30:f1:95:1e:80:50:b6:5f:59:41:90:88:
53:0b:b7:20:98:89:b0:10:0c:b1:8a:e5:76:03:9c:
c3:eb:59:6d:6e:dd:e6:c7:74:7a:16:23:37:8b:68:
32:a8:8a:81:e7:11:10:b5:e6:ab:74:2d:1d:45:dd:
a2:60:aa:d6:5f:f8:b4:41:a0:bb:6a:88:bb:96:55:
fe:09:1f:fc:e9:8c:2e:e1:18:e8:98:8f:6e:03:e8:
ce:30:4e:52:3a:ee:7f:81:38:6e:6b:f2:a8:a1:26:
16:e4:80:53:19:6e:a8:26:d2:1b:ff:11:1f:a5:1f:
a8:d9:1e:56:25:58:dc:84:91:f2:df:24:3c:29:87:
7c:70:f6:82:fc:33:c1:e4:a6:5d:f7:98:fd:8d:6a:
fd:d6:c0:23:18:f6:a2:44:8b:2d:89:51:cf:a4:77:
4d:b0:2a:19:f4:71:eb:86:e5:08:a4:d2:ed:8e:89:
79:ac:86:93:22:54:30:83:6b:81:16:19:2f:f7:c9:
22:94:ef:94:78:f7:28:50:57:59:6e:5f:49:e6:c0:
95:04:8a:0c:05:05:cc:bf:66:a5:54:f2:ed:96:f9:
1c:d5:6d:ba:6d:97:25:a0:94:bd:c1:04:a3:78:e7:
c1:25:27:e8:3d:ec:a6:f3:31:f2:a5:53:94:f8:28:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:37:5D:8F:8D:E9:E2:13:82:DE:D4:2B:08:F7:B4:D7:81:85:80:A8
X509v3 Authority Key Identifier:
keyid:56:AA:FD:E1:C0:65:1E:8E:CF:DA:4A:83:55:5B:B2:CB:2C:C9:47:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vqr94cBlHo7P2kqDVVuyyyzJR24.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/D1DFC65E849D11F19203B0BB88A30FBC/Vqr94cBlHo7P2kqDVVuyyyzJR24.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:d2:10:08:7d:47:a2:ef:22:f9:8f:9a:6b:1e:71:99:1c:4b:
52:60:e6:98:a2:40:4b:44:6a:b4:ff:e7:ae:8a:e0:37:09:cb:
d5:a6:21:82:04:e5:e9:3f:98:21:87:39:4f:8f:3b:a5:d7:5b:
0b:0d:2d:cb:3c:d3:a1:d3:72:59:7c:8f:36:6e:e2:d1:49:cf:
6a:a9:6b:7e:4c:e0:b3:02:8e:29:52:09:71:0d:49:88:3f:d4:
b2:9d:b1:0b:f6:0d:47:93:82:19:9f:4b:0c:db:64:c9:93:13:
20:3f:f7:4c:9f:e8:3d:80:db:f6:f8:34:df:e0:66:f0:7b:e8:
c7:5e:7b:46:e7:46:93:9a:e6:d7:be:8f:d6:25:b7:31:48:2e:
ac:2c:0b:87:73:9e:f9:e2:9f:5e:57:d0:f1:d0:93:91:7a:62:
6d:76:07:06:d3:09:fb:16:66:59:51:a8:64:96:8a:25:e7:ec:
e4:82:57:5a:ff:4e:ab:83:ae:63:76:bf:47:e1:54:b4:96:0a:
c3:96:38:14:8a:f9:f7:ed:63:c4:38:a6:ee:c0:7c:77:40:e3:
e3:7e:a8:fe:49:2d:5c:24:44:c3:60:8a:7b:4d:a9:7f:4a:b4:
72:e7:74:6a:59:68:f8:86:93:0f:61:41:c4:e5:cb:7a:1b:49:
5e:fd:45:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 14:58:44 2026 by rpki-client