
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
File: vCXNTkiu32CLScwphHLFwG6L9vs.mft (raw, json)
Hash identifier: G7RqBkhwMPsOszPWsw8NVePX6/zNfwuCS9rUR0Zx/Aw=
Subject key identifier: D2:4C:BD:40:1F:96:9A:49:15:90:19:6F:9D:23:00:10:F5:CD:EF:B3
Authority key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
Certificate issuer: /CN=A91E4700/serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Certificate serial: B6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
Manifest number: B2
Signing time: Wed 07 Oct 2026 07:31:54 +0000
Manifest this update: Wed 07 Oct 2026 07:31:54 +0000
Manifest next update: Wed 14 Oct 2026 07:31:54 +0000
Files and hashes: 1: vCXNTkiu32CLScwphHLFwG6L9vs.crl (hash: O0tBjvew8uUJxzr+6g3s6v3sr7a11QUPMiNhkcs2nvo=)
2: A9CD5C92BB8C11F08999FE2AC4F9AE02.roa (hash: c3y0t6IJx6Q11r5JDlgaeAC6nTxUNX96hYufhWBf0xM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:31:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182 (0xb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Validity
Not Before: Oct 7 07:31:54 2026 GMT
Not After : Oct 14 07:31:54 2026 GMT
Subject: CN=6ac5f56a-b3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:86:f4:36:01:91:4d:52:c9:d0:e8:83:fe:
9b:4d:c6:86:44:5e:ba:ae:2b:13:8e:de:ee:a0:1e:
bc:a9:43:74:8e:81:c6:01:0c:7e:09:62:89:9f:1b:
f5:99:15:07:ac:ec:b8:e1:dc:fa:d7:f7:39:df:b0:
e4:42:21:6c:3d:8f:20:1c:bb:4f:84:6f:5d:02:9b:
3b:a3:58:b0:e3:61:b0:89:ec:d5:f9:12:5a:a0:69:
88:d5:96:43:af:40:3f:f7:80:6a:63:0a:80:fe:da:
15:6d:65:08:c9:d7:98:aa:6f:d2:77:ed:ff:4d:e1:
cf:e6:5c:d4:51:3a:e8:9e:e1:cc:bf:b2:20:77:08:
13:37:ae:ba:4b:90:da:58:1f:2b:45:f8:ef:e0:27:
f0:75:a2:4d:78:18:a9:d6:05:c3:89:ff:a5:dc:37:
95:c7:a9:f7:5e:bd:ab:d6:d3:e0:01:23:f7:56:90:
46:5b:cf:4f:f0:a8:25:61:a0:de:f9:22:e9:ee:95:
20:ef:f1:33:ab:cb:6c:f3:93:bf:a4:0c:43:fb:32:
c6:6e:7d:4c:6d:5a:15:1c:02:ac:b8:22:a4:0a:8a:
45:bb:04:ed:9e:4a:ed:8b:1c:3a:a5:a8:f4:de:6d:
d1:17:6b:ba:17:3c:58:cc:5b:f6:10:ed:ac:dd:88:
91:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4C:BD:40:1F:96:9A:49:15:90:19:6F:9D:23:00:10:F5:CD:EF:B3
X509v3 Authority Key Identifier:
keyid:BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:8c:29:28:87:f8:0b:5a:4f:7d:b4:c1:16:15:8a:43:3e:
89:a2:df:5f:a2:17:c4:52:e5:29:8a:fa:57:fc:4f:6b:6b:e8:
d3:1f:aa:b9:b2:e9:75:be:6f:61:d0:59:3b:c5:86:50:d2:ff:
ad:02:7b:21:c3:ac:41:aa:11:63:e1:fd:c8:de:53:ec:4d:ab:
b0:6f:0e:7b:96:9b:ad:6d:b2:cf:45:d8:77:e6:56:c8:b4:f5:
0f:e5:15:2a:56:10:04:20:8d:70:61:f3:18:53:cd:f3:9c:46:
43:92:3c:1e:57:ba:50:32:d0:6d:6b:45:c4:42:05:6c:4e:da:
9c:a2:f3:dd:38:9a:29:fa:50:a9:0c:32:fc:c3:df:57:e4:be:
73:59:1b:c8:0c:22:b2:a4:ca:07:df:37:bf:b6:cd:ac:f2:67:
cb:4a:67:55:e8:db:16:8f:5b:4c:20:ef:8b:da:1f:67:8a:d2:
bf:d2:1e:15:77:14:b5:65:59:53:8c:37:a8:29:0f:e4:3c:53:
dd:a5:0d:93:e6:fb:d9:ff:81:d4:46:6b:c8:3f:8b:c8:73:f5:
17:d5:3c:3d:3f:16:a6:a9:ac:8b:bb:11:53:97:ce:d0:48:86:
66:80:2c:f3:f2:9f:50:fe:57:f9:29:4c:5a:ea:f3:f8:25:20:
17:7e:1b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:19:51 2026 by rpki-client