
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json)
Hash identifier: eHyZ8cV+yM334X1AsxslaRgda4rFUiPUPiRaEyF3NHQ=
Subject key identifier: 7D:46:E8:7A:73:49:2C:52:8E:64:E9:B6:16:5A:AD:21:6E:F8:E8:92
Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
Certificate serial: 053A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
Manifest number: 0533
Signing time: Fri 02 Oct 2026 23:50:35 +0000
Manifest this update: Fri 02 Oct 2026 23:50:34 +0000
Manifest next update: Fri 09 Oct 2026 23:50:34 +0000
Files and hashes: 1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: sE9ce6Ti7mBQoleo8QUJoFWPSe9W9ceBGmmJ/S1YtiY=)
2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: l0NUWEUPjisvKhFGpflwXULabo5GNsblx0h91Os9bCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl
rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 23:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1338 (0x53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
Validity
Not Before: Oct 2 23:50:34 2026 GMT
Not After : Oct 9 23:50:34 2026 GMT
Subject: CN=6ac0434a-f767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a0:96:a7:0b:3f:7c:4a:15:d5:7c:5f:c8:1a:
83:c3:53:a6:a6:a3:52:b8:cc:8d:bc:94:27:24:c8:
ba:cb:51:6a:eb:de:bb:d5:56:d0:c2:25:d7:4b:87:
f8:e0:aa:4f:94:1e:b2:f5:f6:50:d5:7c:29:a4:84:
27:81:2a:95:1a:45:7a:25:29:a9:c5:dc:98:10:ec:
c4:c8:6f:6f:cb:42:b6:2b:bd:2b:12:b4:d2:e4:45:
b1:07:01:29:4e:4a:f7:08:c7:45:c5:9a:55:e2:75:
9c:6d:c3:65:30:10:42:9d:74:cd:d1:68:5a:ad:ea:
ea:8c:1b:9c:7f:e5:5d:a2:e0:ca:57:ab:b5:af:0b:
4f:17:51:14:c4:36:18:2f:3a:82:d2:28:70:9f:ce:
16:e7:48:7f:51:99:8f:1b:e9:16:31:cb:73:c8:ba:
b7:f0:05:b2:a8:f4:bf:71:30:cf:ef:45:37:da:f6:
41:98:7b:b3:70:16:47:4f:7b:c9:9b:ee:eb:a6:52:
8c:9b:3e:02:a8:4c:78:91:fb:a7:1c:08:b4:6f:a1:
dd:35:f7:68:33:8e:b9:4c:10:a4:86:3b:98:3a:b7:
48:4d:12:de:42:a5:20:cb:09:cb:f5:39:e4:2d:1f:
c0:44:c5:70:e4:d0:d8:20:5b:11:a7:0e:c9:0f:36:
89:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:E8:7A:73:49:2C:52:8E:64:E9:B6:16:5A:AD:21:6E:F8:E8:92
X509v3 Authority Key Identifier:
keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:20:86:c7:e6:77:e6:2c:34:1d:c0:c9:de:7b:bd:25:9a:b2:
fe:6c:a6:7a:f4:ab:d7:b7:33:84:7b:fd:73:e4:8d:d8:2b:fc:
84:2d:6c:2a:34:80:e7:af:b7:b2:20:a7:65:60:6d:61:ec:96:
c8:13:03:2e:af:0b:b7:87:39:1b:27:fa:b1:11:d4:c5:57:05:
b4:e3:4d:31:e8:45:f1:c9:57:38:d1:b3:fb:37:c5:98:54:98:
cd:9f:96:5f:5b:5f:66:b7:a5:94:a2:63:e6:86:99:46:8d:45:
04:d3:6b:99:2b:f5:f0:e3:25:6e:80:b0:29:f2:29:62:f9:37:
e4:f2:c9:9a:a8:cd:c3:04:02:6f:7d:83:31:a8:fe:c3:b2:be:
8b:31:28:73:bc:c2:2d:4f:83:ec:43:d7:87:e4:ce:f5:f8:30:
fe:d5:2b:27:52:e7:c4:4a:d4:a8:8e:36:52:10:28:d0:c1:f4:
6e:4c:46:61:30:73:22:60:62:ac:3d:13:04:91:a8:51:90:ce:
ef:68:fa:4d:f1:84:67:43:90:48:05:35:6c:80:e2:f0:e7:a7:
d2:4b:98:08:80:20:7b:82:79:0d:07:e5:96:f1:0f:54:9d:a1:
bb:ea:0d:c5:45:f0:12:38:f9:d8:1e:05:79:95:28:ca:13:e0:
c9:b2:e6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:58:05 2026 by rpki-client