
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json)
Hash identifier: BpSVtacAlrkNZHTwSMuM/To7C9w2gUL22IYvA8CNmtE=
Subject key identifier: 54:DD:A2:4F:49:2A:4C:4D:47:17:79:C3:73:D9:57:D6:75:8A:81:E6
Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2
Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2
Certificate serial: EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
Manifest number: EE
Signing time: Wed 19 Aug 2026 07:04:03 +0000
Manifest this update: Wed 19 Aug 2026 07:04:03 +0000
Manifest next update: Wed 26 Aug 2026 07:04:03 +0000
Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: S8DPDBisz/4wB3cOcb1ci+whfgxvXepXzrDvzOZi0LI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl
rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2
Validity
Not Before: Aug 19 07:04:03 2026 GMT
Not After : Aug 26 07:04:03 2026 GMT
Subject: CN=6a855563-402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:44:ec:14:d7:67:33:6c:bc:64:43:32:70:97:
4c:74:df:94:73:64:b8:b6:08:85:d5:f2:98:b5:d5:
51:f3:2b:51:70:15:d3:48:ea:6d:65:3f:2d:ae:9c:
ae:db:aa:89:51:73:c9:9e:80:f4:52:ef:e0:1a:b3:
08:34:8a:f2:cb:c2:80:7f:76:d1:47:cd:72:69:33:
db:ef:e3:8d:46:93:2b:5c:92:17:30:33:49:d8:c0:
7e:1c:cc:c7:d9:fe:fb:c1:76:d5:bb:d9:2f:97:22:
2d:7b:bb:59:b2:04:ad:37:75:df:f0:6f:0e:0b:45:
e7:b6:3d:cc:98:1b:cf:4e:1c:ee:01:94:f3:e3:c5:
8e:e1:a5:f1:0a:46:7b:24:a3:94:b7:62:19:92:42:
a3:b0:ec:d6:6c:87:c1:dd:c7:d7:3d:de:ef:57:be:
e3:17:c3:8f:d5:17:51:50:9f:cd:87:fc:40:d4:6e:
29:ba:da:d2:8c:3d:07:77:f5:ac:38:c5:e7:f3:56:
66:6a:79:4e:fa:a5:1c:07:46:88:5c:62:94:9c:12:
74:15:01:42:30:09:65:f0:7b:51:67:93:46:d3:0c:
f5:5e:42:d1:3e:c6:d2:9a:9e:dd:f2:be:d1:0a:8a:
f2:f6:b2:81:dd:0d:f0:2b:6e:29:7e:d5:44:7f:11:
3b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DD:A2:4F:49:2A:4C:4D:47:17:79:C3:73:D9:57:D6:75:8A:81:E6
X509v3 Authority Key Identifier:
keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1b:cb:70:64:8f:a0:9d:50:fc:c1:58:e6:0d:a3:23:94:ee:
1f:7c:45:6d:41:fd:23:37:51:f9:15:8d:b8:ea:cb:e0:33:2c:
51:7f:23:17:e0:43:86:d3:5c:9f:5d:30:66:c9:b4:74:da:34:
c3:e1:d1:15:17:c1:d9:a4:17:4f:e3:7e:93:6d:4d:7a:bb:c8:
d5:4a:60:7f:bd:29:75:c2:da:33:83:38:6d:c1:52:f7:87:36:
9e:9c:9f:d1:a7:15:51:37:89:cd:e6:26:f8:8a:32:6e:78:a0:
18:2e:d8:78:68:57:f4:89:e9:96:ed:3b:b0:6e:dd:90:37:df:
14:9f:4a:cd:e1:16:89:5e:f2:58:24:33:04:eb:02:71:69:6e:
ff:f3:c8:7e:fc:38:ce:41:72:fa:30:1d:83:c0:8f:02:69:d5:
77:14:3d:c4:fb:1e:86:da:06:57:0d:36:a3:87:7a:7f:6a:c2:
f2:e5:6b:0f:f8:84:8e:48:3c:05:43:1f:71:63:3c:c8:36:67:
c0:16:33:67:50:fe:23:83:af:24:d1:8e:37:b4:a5:6a:40:f5:
dd:aa:da:b7:10:3a:d3:38:7d:57:f2:a5:ce:f3:f9:c3:ad:28:
91:e9:9e:be:4d:97:e3:bb:47:61:6c:cf:3a:14:ac:43:f3:40:
78:8d:97:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:28:06 2026 by rpki-client