
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
File: Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft (raw, json)
Hash identifier: XfJHXEZv9q/BzpSQrMYiAtsok3CT8kcFTtpNPPIGOKs=
Subject key identifier: 3E:16:68:7E:7E:61:F8:22:8B:AA:33:0C:1B:39:F5:E9:12:A2:07:CD
Authority key identifier: 56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59
Certificate issuer: /CN=A91E0D8B/serialNumber=568D179152473C809A62E585E5ADC942866BE659
Certificate serial: 0781
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
Manifest number: 0777
Signing time: Mon 22 Jun 2026 21:40:27 +0000
Manifest this update: Mon 22 Jun 2026 21:40:27 +0000
Manifest next update: Mon 29 Jun 2026 21:40:27 +0000
Files and hashes: 1: Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl (hash: x+eTjHWVgOi9VQh/651Azv6IpydQFP4O30Ou/oUtBbw=)
2: 146FD366653611EB99BE491DC4F9AE02.roa (hash: cplABQjxlJ11YdC+WxCvMkXI5GKd9TK39yV5NN7/ezw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl
rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 21:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1921 (0x781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E0D8B, serialNumber=568D179152473C809A62E585E5ADC942866BE659
Validity
Not Before: Jun 22 21:40:27 2026 GMT
Not After : Jun 29 21:40:27 2026 GMT
Subject: CN=6a39abcb-eb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:79:9b:83:e1:c5:5a:f8:1b:db:e0:bd:a3:f7:
36:29:7c:d6:19:80:08:9b:f8:09:51:56:f5:50:9b:
ec:ef:41:a7:94:6f:ae:a4:f7:d7:ea:fd:4f:b0:24:
3c:40:a4:08:38:77:f6:87:82:bb:ad:8c:a3:8f:76:
0c:fc:9f:d3:1e:dd:6d:e3:61:5b:f4:1b:1e:a7:b7:
d1:90:69:0e:36:43:14:e5:3d:b9:20:b4:03:b0:a6:
66:b4:a0:a6:9e:dc:41:d0:05:2f:08:8e:b6:5c:3e:
27:a5:29:79:11:e3:a7:be:88:3f:7b:ca:62:ee:25:
7d:a3:4e:a6:a7:1e:06:2c:96:0d:0e:c5:c8:fd:9e:
f2:7c:22:8a:b5:c7:60:0e:3a:a3:31:de:3d:35:8f:
df:46:1f:b1:06:e2:1a:ab:d4:9a:e1:a6:f0:ad:26:
e2:9d:2f:c7:26:46:08:3a:93:97:2b:01:70:e1:b6:
f2:72:70:63:0a:8d:fd:07:8c:9b:bb:de:b2:a7:a4:
2b:26:73:f3:3b:a9:1a:c5:04:ea:25:15:ae:74:72:
7f:81:3c:59:e7:5e:da:64:2a:5f:04:aa:a0:dd:dd:
6e:26:a1:98:75:f3:05:5f:b9:99:18:f3:91:8d:80:
d5:3a:f9:ea:27:03:e5:2e:63:ea:1f:e1:8c:2d:92:
25:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:16:68:7E:7E:61:F8:22:8B:AA:33:0C:1B:39:F5:E9:12:A2:07:CD
X509v3 Authority Key Identifier:
keyid:56:8D:17:91:52:47:3C:80:9A:62:E5:85:E5:AD:C9:42:86:6B:E6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vo0XkVJHPICaYuWF5a3JQoZr5lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D8B/4A6D6C0A653411EBB6B8F019C4F9AE02/Vo0XkVJHPICaYuWF5a3JQoZr5lk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:66:f0:18:42:56:64:ad:9b:78:92:16:cf:24:e5:48:7a:df:
83:ac:32:3c:24:9f:1b:46:9a:15:a9:73:f9:73:9e:e1:24:30:
43:e1:61:e6:bd:09:58:15:b6:75:70:ec:fc:38:3b:7e:58:df:
c5:28:0a:20:b4:7a:c3:2f:df:a9:44:1f:68:94:c9:9f:06:75:
45:86:c7:df:ae:93:5b:32:f6:e7:85:ac:69:b5:96:1e:1d:3a:
c9:69:f3:22:f4:23:de:dd:f9:2e:3b:b6:4b:77:79:48:f8:9e:
10:38:2a:3a:4a:56:53:c3:ef:15:03:03:6e:fe:c6:82:e1:ba:
84:aa:3f:cf:a5:04:5b:d9:39:71:3a:5b:b6:1d:18:19:0b:7a:
3e:2c:38:43:8a:1c:80:ea:e7:17:6c:95:6f:0d:a0:cd:7e:ec:
53:5f:8c:6b:59:8a:74:37:cb:32:3c:c9:20:62:fe:3f:39:c4:
99:c9:a6:7e:d5:7c:c5:fa:4d:8c:db:8f:e2:46:fd:33:e1:1e:
08:ce:e7:54:da:29:fe:e5:e6:27:0c:2a:18:5d:82:86:db:04:
1a:f0:39:a1:39:84:1e:d6:23:c1:75:1d:34:04:16:7c:fd:42:
ff:57:fa:75:ee:ab:42:9e:5e:d0:c6:d3:17:39:f1:14:95:63:
aa:be:a2:8b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTBEOEIxMTAvBgNVBAUTKDU2OEQxNzkxNTI0NzNDODA5QTYyRTU4NUU1QURDOTQy
ODY2QkU2NTkwHhcNMjYwNjIyMjE0MDI3WhcNMjYwNjI5MjE0MDI3WjAYMRYwFAYD
VQQDEw02YTM5YWJjYi1lYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXmbg+HFWvgb2+C9o/c2KXzWGYAIm/gJUVb1UJvs70GnlG+upPfX6v1PsCQ8
QKQIOHf2h4K7rYyjj3YM/J/THt1t42Fb9Bsep7fRkGkONkMU5T25ILQDsKZmtKCm
ntxB0AUvCI62XD4npSl5EeOnvog/e8pi7iV9o06mpx4GLJYNDsXI/Z7yfCKKtcdg
DjqjMd49NY/fRh+xBuIaq9Sa4abwrSbinS/HJkYIOpOXKwFw4bbycnBjCo39B4yb
u96yp6QrJnPzO6kaxQTqJRWudHJ/gTxZ517aZCpfBKqg3d1uJqGYdfMFX7mZGPOR
jYDVOvnqJwPlLmPqH+GMLZIlJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD4WaH5+
Yfgii6ozDBs59ekSogfNMB8GA1UdIwQYMBaAFFaNF5FSRzyAmmLlheWtyUKGa+ZZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Qi80QTZENkMwQTY1
MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJQ2FZdVdGNWEzSlFvWnI1
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZvMFhrVkpIUElDYVl1V0Y1YTNKUW9acjVsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MEQ4Qi80QTZENkMwQTY1MzQxMUVCQjZCOEYwMTlDNEY5QUUwMi9WbzBYa1ZKSFBJ
Q2FZdVdGNWEzSlFvWnI1bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFmbwGEJWZK2beJIWzyTlSHrfg6wyPCSfG0aaFalz+XOe4SQwQ+Fh5r0JWBW2
dXDs/Dg7fljfxSgKILR6wy/fqUQfaJTJnwZ1RYbH366TWzL254WsabWWHh06yWnz
IvQj3t35Lju2S3d5SPieEDgqOkpWU8PvFQMDbv7GguG6hKo/z6UEW9k5cTpbth0Y
GQt6Piw4Q4ocgOrnF2yVbw2gzX7sU1+Ma1mKdDfLMjzJIGL+PznEmcmmftV8xfpN
jNuP4kb9M+EeCM7nVNop/uXmJwwqGF2ChtsEGvA5oTmEHtYjwXUdNAQWfP1C/1f6
de6rQp5e0MbTFznxFJVjqr6iiw==
-----END CERTIFICATE-----
Generated at Wed Jun 24 11:29:40 2026 by rpki-client