
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
File: VVf9XdSgiVmupCqY3iBy7QUB204.mft (raw, json)
Hash identifier: OyNPDMxO7KR4/PVe/klCOTe+YzC7a2VHVKZgCBbp8tU=
Subject key identifier: 1C:C0:72:36:95:71:70:64:76:D4:58:AE:D0:B0:62:66:5E:D5:4A:7B
Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
Certificate issuer: /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Certificate serial: 34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
Manifest number: 33
Signing time: Tue 23 Jun 2026 08:53:33 +0000
Manifest this update: Tue 23 Jun 2026 08:53:33 +0000
Manifest next update: Tue 30 Jun 2026 08:53:33 +0000
Files and hashes: 1: VVf9XdSgiVmupCqY3iBy7QUB204.crl (hash: YaU0cbRRkjSRHzTwoXA9uBu2iy8Qtzii2LFWcsaRxjU=)
2: 1CEBECEC229511F1916F29FEAE833773.roa (hash: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 08:53:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52 (0x34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E
Validity
Not Before: Jun 23 08:53:33 2026 GMT
Not After : Jun 30 08:53:33 2026 GMT
Subject: CN=6a3a498d-fb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:e1:3b:b0:ca:e7:ef:cd:1b:39:13:c1:1e:
b5:45:c1:fe:b7:02:2f:8c:30:fd:f0:fe:90:5a:c0:
df:e7:72:35:ef:47:a1:0c:d2:b9:85:a9:a5:6c:17:
2a:09:1d:77:d0:eb:7f:5a:47:82:9d:26:07:13:1e:
39:04:1d:3b:74:b8:28:47:d4:68:cd:c8:5a:2a:7d:
e9:22:73:15:fc:e9:70:16:a5:a3:e3:8b:05:7b:6c:
d6:e9:f4:af:75:d8:5a:af:d3:e2:21:a9:3b:0d:1a:
25:17:2d:a8:a3:fb:4e:f7:5e:c3:03:c5:55:65:0b:
b6:f5:fc:06:0e:33:cc:2b:9a:04:59:57:ec:ce:0b:
ac:87:18:7e:44:6d:72:5a:22:40:b7:ea:25:a6:fc:
ff:ed:52:37:f7:f5:1f:01:50:f9:0b:56:3d:77:29:
9a:70:04:e4:a5:6e:c5:c0:a8:6d:81:98:7b:8d:4c:
81:21:c2:9a:af:17:72:a8:1e:26:7e:a6:2a:6f:9d:
82:02:da:00:b7:f8:dd:2e:4f:51:0d:9b:31:f8:04:
e8:c6:58:da:d8:95:3e:67:3d:0d:b4:f2:f2:43:92:
83:07:58:90:2c:bd:ab:fc:21:ee:bb:8c:b9:b6:8d:
5c:81:e9:50:85:b5:e0:2d:20:fc:5d:0a:45:69:34:
a7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C0:72:36:95:71:70:64:76:D4:58:AE:D0:B0:62:66:5E:D5:4A:7B
X509v3 Authority Key Identifier:
keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:92:3b:ac:db:bc:a5:1b:b4:ae:dc:97:b3:82:49:3c:90:9b:
44:ce:98:af:38:91:fd:40:84:6b:ee:cd:67:ad:6b:bf:44:7c:
ee:81:08:27:ca:c4:f6:6b:ca:83:0f:ae:5a:af:67:e1:e5:6b:
49:7e:6f:64:63:4d:f9:22:26:21:9e:a5:68:ab:7a:91:1d:80:
0b:55:89:e3:ce:d3:12:31:76:06:61:3f:15:38:61:9a:bf:4b:
cd:bd:d1:20:f1:8d:84:96:a3:f2:84:f3:4a:68:2c:44:03:78:
0a:a0:dd:84:24:cf:37:81:63:df:dc:34:7e:ae:e0:2f:e8:a6:
eb:e3:41:e1:b3:f0:bc:3d:11:b6:53:bc:ac:9c:fd:11:00:cf:
c8:9f:f5:67:7d:af:b9:79:38:bc:d2:d7:94:e6:34:dc:da:bc:
dc:45:2a:d5:7b:3b:37:b0:b3:50:8e:b9:51:03:3d:ce:af:19:
04:37:9f:00:41:b1:48:d3:c5:51:36:12:d7:bd:c0:05:73:56:
5b:be:69:5b:fe:17:52:1e:ae:04:8d:39:44:63:08:48:bf:cc:
ee:8a:a2:3a:a1:0b:d4:18:80:01:42:85:70:31:16:e7:c1:19:
96:7e:32:0b:23:1e:d3:1b:53:85:91:60:76:2e:4c:b0:94:35:
c4:4d:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:20:56 2026 by rpki-client