
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File: VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier: orF4ICPhv8L0FIR3yedKlLwA7JYwIXUqVkzcycjL0/8=
Subject key identifier: D1:8A:FA:3A:B3:B6:90:70:8A:C7:C6:F1:A7:97:BC:38:93:A4:2F:85
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer: /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number: 015D
Signing time: Sun 25 Oct 2026 05:32:21 +0000
Manifest this update: Sun 25 Oct 2026 05:32:20 +0000
Manifest next update: Sun 01 Nov 2026 05:32:20 +0000
Files and hashes: 1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: WLSJtEji7pRFgibPoGHOL0GoQOiS8SG/CyRYbUQrW9U=)
2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: MQmdIDvcYM844/1uv1UkwZ4FyyfbWMvsu3GOUFQnx9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 05:32:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Validity
Not Before: Oct 25 05:32:20 2026 GMT
Not After : Nov 1 05:32:20 2026 GMT
Subject: CN=6add9465-6dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:46:f6:7f:87:35:b6:ef:de:9f:0f:4f:b2:
13:15:dd:56:0b:6f:ac:ad:f4:9b:46:e4:5a:ab:c8:
20:d9:bc:65:97:a2:5b:be:80:0e:a3:3d:da:a0:1b:
29:41:1f:61:cc:3d:dd:b2:84:8a:ad:eb:7d:b6:05:
3a:2a:32:c7:d6:c6:75:0b:8b:aa:72:15:9d:35:cb:
0d:96:00:c1:a7:ae:02:47:d0:95:e9:3f:4c:ed:05:
e4:6c:11:29:ea:15:76:e3:ab:a5:cb:c0:bf:5a:2f:
31:c1:30:b0:0e:1f:c1:c9:be:11:b2:d8:31:d8:eb:
05:36:14:12:e0:83:66:5f:95:7d:3b:bb:99:cf:76:
ce:15:9d:21:da:f3:b7:52:f5:e2:cc:5c:a6:3a:61:
67:ed:c0:33:d3:2e:be:e0:15:64:66:68:55:f4:9b:
19:6f:63:d1:c0:db:8c:bc:3e:79:07:56:0c:ae:c5:
31:5a:8f:6f:8b:fc:ba:98:b2:4c:1f:01:f0:d8:54:
39:bd:19:1f:1c:1f:b0:a0:18:ba:fb:35:ba:41:1c:
20:37:80:c4:3a:b1:68:15:2a:be:e7:db:59:69:0f:
d3:86:52:5f:67:15:3f:59:a2:26:31:df:e6:76:d2:
23:a7:d8:67:a3:36:10:51:91:9a:e9:9f:c0:33:7c:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:FA:3A:B3:B6:90:70:8A:C7:C6:F1:A7:97:BC:38:93:A4:2F:85
X509v3 Authority Key Identifier:
keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:d9:ac:a0:e9:b9:29:f5:ec:1f:15:6a:ff:69:9c:3a:62:fa:
43:12:14:b8:5f:0a:3b:0b:53:d0:c1:dc:1b:20:e0:60:80:be:
4f:0d:b2:a2:6e:18:07:cf:53:2c:65:6f:1f:0a:b4:19:f9:f4:
73:d9:0f:77:48:3a:61:96:db:92:ca:80:bb:a2:bd:75:7b:b9:
65:35:df:0c:0c:0c:17:94:52:92:52:ed:d9:9a:17:37:d7:17:
82:9c:bd:a4:bd:7a:ee:da:36:60:f1:f1:48:4d:91:b5:30:bf:
52:b6:f7:58:7e:21:8f:a8:ce:4d:4a:e2:82:4e:6c:26:0b:a3:
5b:9a:07:b2:fc:4f:0a:d4:0c:35:91:25:a1:41:54:60:e5:9d:
76:35:7c:74:92:05:1e:d5:2b:42:3c:03:78:70:26:2d:c9:65:
9f:c4:5f:57:09:d7:5e:9e:b1:90:42:1d:7a:0f:ea:12:14:ec:
f9:e4:74:9d:82:f0:95:4b:71:f8:7d:42:65:1d:26:8e:4c:ab:
56:6b:80:c4:71:dc:cf:b0:a6:3f:d6:cb:b6:47:3f:d3:2b:aa:
b8:2f:39:af:fe:59:af:cf:ad:25:24:59:fc:f8:25:55:e3:49:
cb:2d:1b:cd:c5:39:80:46:01:90:8b:21:a0:f3:44:0b:ad:49:
ab:e9:48:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RThCRTMxMTAvBgNVBAUTKDU1NEY1RDdDNjZFQzUwRTg0QThBQkJCQTk5NjgxNzdF
NDcyOUQzNjYwHhcNMjYxMDI1MDUzMjIwWhcNMjYxMTAxMDUzMjIwWjAYMRYwFAYD
VQQDEw02YWRkOTQ2NS02ZGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqwlG9n+HNbbv3p8PT7ITFd1WC2+srfSbRuRaq8gg2bxll6JbvoAOoz3aoBsp
QR9hzD3dsoSKret9tgU6KjLH1sZ1C4uqchWdNcsNlgDBp64CR9CV6T9M7QXkbBEp
6hV246uly8C/Wi8xwTCwDh/Byb4Rstgx2OsFNhQS4INmX5V9O7uZz3bOFZ0h2vO3
UvXizFymOmFn7cAz0y6+4BVkZmhV9JsZb2PRwNuMvD55B1YMrsUxWo9vi/y6mLJM
HwHw2FQ5vRkfHB+woBi6+zW6QRwgN4DEOrFoFSq+59tZaQ/ThlJfZxU/WaImMd/m
dtIjp9hnozYQUZGa6Z/AM3zaSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNGK+jqz
tpBwisfG8aeXvDiTpC+FMB8GA1UdIwQYMBaAFFVPXXxm7FDoSoq7uploF35HKdNm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FRUVGN0ZFQUJG
OUMxMUVGOURBODgyODJDNEY5QUUwMi9WVTlkZkdic1VPaEtpcnU2bVdnWGZrY3Aw
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZVOWRmR2JzVU9oS2lydTZtV2dYZmtjcDAyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OEJFMy9FRUVGN0ZFQUJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9WVTlkZkdic1VP
aEtpcnU2bVdnWGZrY3AwMlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANNmsoOm5KfXsHxVq/2mcOmL6QxIUuF8KOwtT0MHcGyDgYIC+Tw2yom4YB89T
LGVvHwq0Gfn0c9kPd0g6YZbbksqAu6K9dXu5ZTXfDAwMF5RSklLt2ZoXN9cXgpy9
pL167to2YPHxSE2RtTC/Urb3WH4hj6jOTUrigk5sJgujW5oHsvxPCtQMNZEloUFU
YOWddjV8dJIFHtUrQjwDeHAmLclln8RfVwnXXp6xkEIdeg/qEhTs+eR0nYLwlUtx
+H1CZR0mjkyrVmuAxHHcz7CmP9bLtkc/0yuquC85r/5Zr8+tJSRZ/PglVeNJyy0b
zcU5gEYBkIshoPNEC61Jq+lI8g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 09:55:47 2026 by rpki-client