
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json)
Hash identifier: CRjjqF6XQ+puvpfyLg3+pafoW/Hii3RoLz8E45n1y/w=
Subject key identifier: 91:52:CE:BB:7C:1D:DE:EC:21:BC:A7:C6:33:8F:98:8B:2F:3F:5D:24
Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Certificate serial: 5B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
Manifest number: 59
Signing time: Mon 01 Jun 2026 09:00:17 +0000
Manifest this update: Mon 01 Jun 2026 09:00:16 +0000
Manifest next update: Mon 08 Jun 2026 09:00:16 +0000
Files and hashes: 1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: dIbRB5artreo5jovTijrRNLH5LkCC+Z7ytuGuYNfngw=)
2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: tby1fxG8dty2Idd5oP0UTbPf2lfAkyvFDEToKB0Y640=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91 (0x5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Validity
Not Before: Jun 1 09:00:16 2026 GMT
Not After : Jun 8 09:00:16 2026 GMT
Subject: CN=6a1d4a21-e9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:b7:05:cf:4d:b3:76:4f:b1:76:11:b1:f7:
4f:24:b5:53:6a:36:75:39:0a:d1:55:f1:00:53:60:
b2:ee:a6:4f:2b:73:4f:ed:66:b9:2c:40:b6:82:01:
93:34:6a:a6:e0:df:75:96:cd:05:b2:4f:da:9b:5d:
34:a1:08:38:d6:57:dc:b0:e6:c2:93:0b:be:f8:99:
7e:f2:bd:b2:76:8b:40:7c:9e:fd:cb:ff:21:0d:9e:
d0:f1:9d:ad:cf:19:27:a1:6a:b4:78:c5:e5:5c:71:
8a:27:fd:b0:51:70:18:55:33:cd:81:23:25:e4:b5:
f0:78:70:f0:a2:00:9d:e2:04:1a:02:2f:9b:3f:0c:
a1:91:3c:88:3b:c3:4b:46:bd:ea:4d:2a:ae:28:68:
07:18:2d:20:ce:f1:9d:db:56:28:08:a4:d7:78:b3:
a5:31:e4:b4:28:3b:f9:b6:d7:05:fd:d7:0d:fa:6f:
b8:e8:94:54:92:bd:ff:37:20:fa:49:85:65:ad:a9:
df:77:f8:ae:27:6c:c8:26:5b:f4:cf:28:e3:d6:75:
78:15:11:70:09:34:9a:b4:78:55:43:8f:e3:f6:c7:
fb:ef:3d:4f:a6:c2:3a:f4:f3:d3:88:a9:6b:5f:cf:
2b:b5:98:c2:b7:15:c1:44:44:43:ce:63:c5:f8:54:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:52:CE:BB:7C:1D:DE:EC:21:BC:A7:C6:33:8F:98:8B:2F:3F:5D:24
X509v3 Authority Key Identifier:
keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:23:1a:e0:f2:a1:46:13:17:63:9e:bf:2e:63:50:86:53:49:
23:8c:53:2d:29:9d:e0:69:c5:76:06:8a:33:21:e3:8f:ea:a8:
b8:a0:29:ec:5c:ff:8c:b3:dc:e9:53:a6:e9:c1:49:54:74:6c:
55:e6:84:48:fd:14:cf:bd:bc:91:ec:27:4e:40:e6:97:d2:8e:
ca:da:bc:d1:06:9a:27:b7:16:c9:69:4b:0f:e8:7a:f8:a3:0f:
29:18:e0:90:f4:04:d5:8a:d9:5b:e0:57:28:35:99:41:b9:2a:
6c:9e:f8:d4:7c:86:e4:b9:80:04:24:90:44:d0:48:3e:48:eb:
a5:37:7c:c2:fe:b8:1e:99:6d:fb:95:e1:f5:15:5a:07:ac:9a:
f6:b5:c4:17:de:89:f1:81:ef:4f:8a:a7:de:86:d7:cd:f6:e7:
b4:67:4d:9d:7b:5c:e3:05:f9:db:8c:fc:29:84:9e:c4:2b:cb:
d3:73:fe:27:2e:be:05:d2:9a:6a:58:80:3b:54:45:ee:65:aa:
dd:95:70:29:7b:67:e6:ac:3a:d8:1a:87:b5:c9:e6:e0:cb:98:
2c:26:3c:7c:37:3e:b1:40:c7:6f:c8:c6:02:e2:e3:e7:e4:05:
23:80:bc:af:8d:98:4e:20:5e:a0:a1:db:6a:9e:8f:0d:d0:b2:
15:56:bf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:31:46 2026 by rpki-client