
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
File: vpuQTrdssFxgw-LDeeL6SJoOF3I.mft (raw, json)
Hash identifier: v1fP8/KdHYh8py+xV3v14TAMVxm6hPMwW1j+bLuHGK4=
Subject key identifier: 68:EE:38:7A:40:C5:9D:58:85:4F:09:BA:80:F5:BD:D9:4B:26:A3:71
Authority key identifier: BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
Certificate issuer: /CN=A91E5832/serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
Manifest number: 0145
Signing time: Mon 05 Oct 2026 05:46:01 +0000
Manifest this update: Mon 05 Oct 2026 05:46:00 +0000
Manifest next update: Mon 12 Oct 2026 05:46:00 +0000
Files and hashes: 1: vpuQTrdssFxgw-LDeeL6SJoOF3I.crl (hash: GqeKKGqtqGhF1QP+LuqJRJcLujUABoIaBH7C40UBvhY=)
2: A9C0AECED0BA11EFB7A6B027C4F9AE02.roa (hash: NUBIPTzmLE7ei0rq8siWB1jNLIe1jHWLzPPD5tPj2mA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 05:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5832, serialNumber=BE9B904EB76CB05C60C3E2C379E2FA489A0E1772
Validity
Not Before: Oct 5 05:46:00 2026 GMT
Not After : Oct 12 05:46:00 2026 GMT
Subject: CN=6ac33999-16ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:73:36:6d:52:4b:29:ee:07:85:21:35:d8:
2a:1a:ba:8e:fd:a6:c3:e8:06:b6:5c:7c:54:56:ab:
ce:ab:0d:78:19:80:dc:7a:93:76:58:a1:79:dd:bf:
bd:90:7c:af:ee:f4:90:50:7e:82:17:98:6b:23:21:
8f:0b:0f:00:9f:c1:a6:ee:da:7f:43:89:88:ac:a7:
3f:03:2d:73:a5:d6:ef:12:ed:9f:d3:bd:24:5b:c7:
e4:c2:45:1f:f9:80:f9:2e:08:1f:9a:e2:91:f2:83:
ba:91:d4:c5:01:ee:1a:35:5f:3b:ef:67:68:9c:e0:
e5:65:fb:cf:54:da:21:d0:08:af:ae:1e:e1:71:84:
a5:14:b4:47:81:a9:e6:2d:ec:e8:78:bf:60:63:5a:
05:5b:ff:06:76:47:ec:4e:fe:8f:1e:74:3c:43:4f:
16:f0:b3:bc:c8:9f:f9:39:eb:1e:06:45:19:20:1d:
72:ab:f1:1f:b8:6e:d9:b3:14:3f:74:66:bb:74:07:
b9:9f:25:7a:d1:b7:9b:09:7b:26:5e:97:3c:be:4e:
9b:ee:c0:04:20:d1:a7:b4:cb:34:15:ab:45:5c:43:
e0:e3:d3:59:d4:56:b2:ca:a4:69:4b:f5:55:17:40:
07:c9:ec:72:d6:f8:18:40:bc:1c:08:68:fe:86:b5:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:EE:38:7A:40:C5:9D:58:85:4F:09:BA:80:F5:BD:D9:4B:26:A3:71
X509v3 Authority Key Identifier:
keyid:BE:9B:90:4E:B7:6C:B0:5C:60:C3:E2:C3:79:E2:FA:48:9A:0E:17:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpuQTrdssFxgw-LDeeL6SJoOF3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5832/26E58254D0BA11EF896CD026C4F9AE02/vpuQTrdssFxgw-LDeeL6SJoOF3I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:8d:bd:96:d4:eb:35:da:02:6a:12:d9:9f:c3:fa:af:70:b6:
5a:e3:16:c6:28:25:4b:f9:c3:6a:72:df:c5:8e:51:cc:6e:fc:
60:d3:9f:cb:b5:c4:cd:02:f1:8b:36:10:33:cf:a8:ce:47:82:
01:75:bf:04:b7:5e:a9:01:e0:4d:d6:0c:7e:2d:85:d5:aa:ea:
93:bf:f8:33:68:9d:17:44:37:e4:29:57:73:04:58:df:2f:de:
18:1d:85:d9:38:9b:56:40:39:10:06:3f:76:62:43:38:e2:2d:
35:21:ce:d6:2c:8d:94:b7:a0:94:8d:71:04:31:7a:bb:e9:05:
e0:88:9a:5d:e3:df:d4:c6:9d:2d:0b:1c:c2:29:d6:c1:34:8d:
b6:d0:ba:ac:72:4b:13:1b:f0:63:9a:f6:86:0c:1b:1f:da:b5:
b5:a4:32:63:ff:0a:4b:51:b4:a3:e7:20:08:dd:86:1f:82:22:
67:99:f7:fe:9d:de:83:93:57:86:bb:09:db:ce:7d:28:83:16:
b9:ee:e2:18:d0:d5:10:82:31:17:1f:5f:b7:46:aa:85:a7:35:
bd:e6:8b:be:a0:27:0a:cb:f6:88:8c:98:42:80:c1:f5:5b:85:
10:6e:89:02:66:58:3d:46:93:12:30:ec:6e:ac:db:c3:0a:a6:
37:b5:e4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:56:57 2026 by rpki-client