
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
File: vCXNTkiu32CLScwphHLFwG6L9vs.mft (raw, json)
Hash identifier: KOQYyzSl290CVjwXde9MvZpehFsmCmGEhDMqYrC/aeA=
Subject key identifier: BE:D0:08:33:C1:23:F9:76:98:9A:6F:84:F5:E3:1E:72:07:FE:AB:CD
Authority key identifier: BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
Certificate issuer: /CN=A91E4700/serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Certificate serial: 48
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
Manifest number: 44
Signing time: Tue 03 Mar 2026 08:00:57 +0000
Manifest this update: Tue 03 Mar 2026 08:00:56 +0000
Manifest next update: Tue 10 Mar 2026 08:00:56 +0000
Files and hashes: 1: vCXNTkiu32CLScwphHLFwG6L9vs.crl (hash: ODd2Ul+l/HWbFGRQeifRkCqxD8JVzsZYazOnBKXDhVs=)
2: A9CD5C92BB8C11F08999FE2AC4F9AE02.roa (hash: c3y0t6IJx6Q11r5JDlgaeAC6nTxUNX96hYufhWBf0xM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72 (0x48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4700, serialNumber=BC25CD4E48AEDF608B49CC298472C5C06E8BF6FB
Validity
Not Before: Mar 3 08:00:56 2026 GMT
Not After : Mar 10 08:00:56 2026 GMT
Subject: CN=69a69538-8c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:0e:13:25:02:73:ad:85:af:8d:6d:4e:52:
81:53:f1:a3:b8:12:ab:53:5b:d7:8a:2a:f6:0b:68:
11:39:b4:4a:e7:15:f5:01:d9:01:ce:fb:f5:65:eb:
06:4c:82:c7:cc:2b:da:a9:78:d3:8e:28:e5:f7:b1:
9b:f8:7f:cc:62:eb:7e:4a:06:1e:72:81:ae:41:db:
3e:8d:d0:ff:34:e2:99:49:ef:a5:58:b1:b6:c4:d3:
28:2d:db:0f:8a:10:77:c9:b6:e3:59:02:f6:6c:ef:
c2:03:84:a7:aa:19:0a:6f:a1:e6:d8:7d:35:0b:5e:
8e:5d:aa:81:0c:6f:96:ce:66:87:f3:0c:f6:84:5a:
8a:49:bc:44:4c:5a:f2:6d:08:c3:e9:d3:a5:6b:af:
48:68:6e:91:ba:5b:82:25:18:2a:53:46:ce:5a:ae:
2a:0e:12:04:31:79:77:50:7e:d1:af:bd:8b:69:f3:
eb:f4:b3:b5:d8:10:d2:83:d2:17:77:5c:9e:2f:b8:
25:04:db:20:e6:6e:ae:49:46:61:8d:ac:00:64:92:
0a:c0:38:fd:a7:62:f4:f6:0f:5e:a8:23:c7:53:fb:
26:c6:60:5b:5b:a9:2b:88:55:45:1e:30:db:b3:81:
b5:ac:96:f1:3a:22:26:7d:a7:2b:25:20:c9:d7:cb:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:08:33:C1:23:F9:76:98:9A:6F:84:F5:E3:1E:72:07:FE:AB:CD
X509v3 Authority Key Identifier:
keyid:BC:25:CD:4E:48:AE:DF:60:8B:49:CC:29:84:72:C5:C0:6E:8B:F6:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCXNTkiu32CLScwphHLFwG6L9vs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4700/186F2C2ABB8311F088969765C4F9AE02/vCXNTkiu32CLScwphHLFwG6L9vs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:57:62:6e:d4:4e:87:c9:f3:0a:9e:08:4d:91:6c:1a:b6:b5:
cd:ab:7f:8f:3c:cb:4d:c0:8e:a3:82:b8:42:18:71:b0:77:03:
6c:84:d2:2c:4f:30:dc:76:aa:cb:6b:f6:3f:1e:1c:54:68:75:
f1:1c:9a:b4:1b:89:1e:c8:ba:8d:80:62:03:85:07:4b:c5:f1:
4e:4f:d2:f3:b7:0c:3b:d8:31:65:a6:d2:e5:b7:ef:03:fd:bd:
5c:8b:3d:8a:ee:9e:19:f3:d7:8a:cc:21:a9:61:8a:ed:dc:cc:
ac:5a:cf:96:6a:3a:55:c0:5d:ff:a7:2e:78:79:52:2f:64:47:
a4:bd:35:32:1f:05:41:de:0f:f7:56:56:1b:34:8c:9f:6e:a5:
e7:72:e1:21:ef:49:08:b7:98:bb:26:b7:4f:e4:fe:49:8b:aa:
c0:30:1f:13:f7:05:34:ad:90:e9:a2:21:7f:5e:40:f0:c1:f2:
0e:b8:22:68:8f:ad:81:79:54:6e:99:f6:fc:04:89:09:b3:11:
8f:ae:09:66:1b:88:2a:4c:16:7b:ba:81:7a:25:74:58:7e:31:
42:28:09:eb:00:f7:d5:55:cf:30:1d:7a:a0:1e:87:26:8f:37:
fc:15:c4:44:b8:2f:64:07:90:ad:53:9a:c5:9f:1e:cf:2f:c5:
70:c6:c9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:34:59 2026 by rpki-client