
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
File: VVf9XdSgiVmupCqY3iBy7QUB204.mft (raw, json)
Hash identifier: WIGbTL3g9nsRf5iflTHkm0DsyOwdWjtIX9CwWbcexSA=
Subject key identifier: 03:16:80:07:F2:9B:08:11:49:63:4C:39:1B:32:3E:45:4C:86:57:B5
Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
Certificate issuer: /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Certificate serial: 68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
Manifest number: 67
Signing time: Sat 03 Oct 2026 08:43:27 +0000
Manifest this update: Sat 03 Oct 2026 08:43:26 +0000
Manifest next update: Sat 10 Oct 2026 08:43:26 +0000
Files and hashes: 1: VVf9XdSgiVmupCqY3iBy7QUB204.crl (hash: 94iBeYmnQ+GBVE/BLk4Uli94OK+Ti/x5etDGJUxNGbE=)
2: 1CEBECEC229511F1916F29FEAE833773.roa (hash: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 08:43:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Validity
Not Before: Oct 3 08:43:26 2026 GMT
Not After : Oct 10 08:43:26 2026 GMT
Subject: CN=6ac0c02f-720b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:23:6c:53:a9:21:90:60:d8:dc:38:3b:e2:af:
82:ef:88:e6:aa:41:6d:1a:33:93:41:10:9a:69:43:
54:41:d2:b4:a3:d3:a2:46:96:06:5a:78:8e:3e:0a:
19:c2:13:d7:5d:26:7d:38:93:80:97:1b:fe:3e:ea:
37:40:51:2a:8a:9c:86:9e:9e:25:18:66:ab:fd:02:
a8:eb:a7:ba:96:91:8f:72:1e:05:86:ba:fc:b2:80:
c4:21:a4:9e:ce:43:fc:d0:c8:ae:dd:11:7a:0a:06:
09:cb:52:e1:be:da:66:24:f1:1f:4e:3d:3c:77:b3:
b0:97:cf:18:c2:83:79:5c:76:34:1f:6a:33:0e:9e:
52:86:51:1a:9c:d4:4c:cc:ab:45:9b:1b:1b:5d:ae:
da:07:12:af:76:58:19:eb:1e:63:8f:70:eb:4a:98:
4c:8d:78:cb:3d:1a:58:97:c9:0e:23:61:a1:0a:aa:
1f:51:c9:e0:43:18:5e:bf:75:ea:d6:a6:01:b1:2a:
2b:cc:e7:7f:6f:9d:65:c3:2d:6a:ba:3c:fe:52:82:
32:6b:c7:1b:8a:45:cf:44:f1:71:82:5a:b1:b3:ef:
16:7f:9b:1f:0e:c6:53:91:40:d3:27:b2:34:c6:c7:
61:7e:28:a0:aa:b4:a1:91:8a:f6:87:db:72:e6:d7:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:80:07:F2:9B:08:11:49:63:4C:39:1B:32:3E:45:4C:86:57:B5
X509v3 Authority Key Identifier:
keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:88:c4:c1:94:c5:af:89:4c:c6:d0:bc:0f:90:f0:44:65:
d3:aa:1a:39:78:ab:5d:dc:cb:65:59:f8:bc:68:d8:d1:c6:cb:
27:11:13:53:31:11:75:b7:22:8c:8f:74:be:d0:72:21:a1:e5:
c6:06:4d:b0:a8:ae:0f:d3:01:0a:f1:b6:ca:04:6f:c2:36:90:
2d:e8:00:5e:7a:68:09:21:f1:1a:eb:c8:3c:32:49:bc:58:77:
ec:27:11:2e:9a:59:50:2d:b2:27:91:c9:dc:27:7a:22:52:92:
03:c8:55:b4:db:2b:0a:a7:7e:38:10:77:c5:2b:5d:56:74:25:
6a:89:a4:a7:8c:95:12:16:b2:d8:3f:70:2a:9f:b9:a8:16:7b:
73:29:a8:44:f5:58:ae:9c:ba:90:3b:1e:c0:0b:36:bc:58:da:
9a:03:ab:dc:2e:31:28:54:d5:d8:03:f5:84:75:50:4a:7b:50:
82:86:bc:df:39:d4:0c:39:21:bd:3a:84:7c:d3:1b:72:d9:b8:
45:c9:a5:c3:5e:0e:8e:fd:f3:05:0d:68:d4:48:bf:3a:ae:4b:
5a:09:d8:cf:2b:67:18:ef:91:b6:40:04:99:95:57:aa:e1:49:
21:90:b3:08:fd:f2:95:4b:6e:4a:67:f6:42:d9:3a:ae:12:49:
63:a4:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:36:06 2026 by rpki-client