
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json)
Hash identifier: VYgNJblyHioFM2JA2seHlbrO8hhHmVg5qEcp14wx3q0=
Subject key identifier: E1:5F:5D:6B:7C:F9:11:E1:A7:89:2B:6B:AD:CA:DF:FF:2F:75:37:A9
Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
Manifest number: 024C
Signing time: Wed 19 Aug 2026 02:55:35 +0000
Manifest this update: Wed 19 Aug 2026 02:55:34 +0000
Manifest next update: Wed 26 Aug 2026 02:55:34 +0000
Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: xHQF6t+2Cn3D76yNbCs0Xkltg/N+5IMfbxjguWWaKg0=)
2: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=)
3: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=)
4: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 02:55:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F
Validity
Not Before: Aug 19 02:55:34 2026 GMT
Not After : Aug 26 02:55:34 2026 GMT
Subject: CN=6a851b26-d9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5a:60:b1:42:06:3d:e5:92:92:ef:65:3d:c9:
f7:37:83:05:b3:a0:02:a4:15:54:e8:9e:a7:ce:12:
60:1a:40:39:d9:9b:6c:ab:89:30:24:af:98:ff:1f:
6c:c4:9a:02:9c:7e:3b:2e:15:db:ef:be:c1:19:25:
fe:48:4a:20:20:bd:d1:f7:bc:11:c5:da:0a:0a:08:
9a:10:d2:fd:65:cd:74:2a:b8:4f:37:42:bb:ef:1a:
e5:0a:b2:fc:6c:ab:1a:7d:a4:d0:dd:87:5d:4d:ac:
cf:45:0a:68:64:50:5d:7d:09:b3:f4:65:39:e7:69:
d7:96:3c:94:d7:06:5f:9e:b0:cb:36:5c:55:c1:8a:
c9:ad:f6:6c:e5:5b:3c:8a:68:90:b4:a0:4f:dd:06:
a0:25:d4:d1:e4:a3:86:93:07:a0:c6:d9:cc:9e:86:
b7:54:1f:71:91:f1:64:d8:e4:8f:78:61:4a:5f:2e:
e3:7a:6c:88:b1:81:35:43:41:7b:9f:b8:6a:29:c9:
0e:25:1f:bb:f5:c6:b7:ba:de:c0:ce:2a:dc:8b:4f:
a9:39:26:53:d9:8a:49:e4:fb:4d:dc:04:40:b5:13:
4b:b8:45:8f:47:dc:f1:6d:b1:28:7a:59:03:92:f9:
59:cb:42:2d:06:c7:ab:9d:e4:61:3e:af:30:da:46:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5F:5D:6B:7C:F9:11:E1:A7:89:2B:6B:AD:CA:DF:FF:2F:75:37:A9
X509v3 Authority Key Identifier:
keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:64:f6:66:c5:49:99:5d:1e:67:f8:dc:2c:1e:9d:9d:97:4e:
04:50:08:36:07:53:b4:05:53:93:04:9d:83:f0:9e:b5:9b:54:
94:d8:c5:15:fd:45:ff:d2:43:7a:d7:6c:69:57:90:67:ff:47:
98:d5:48:95:34:01:1c:1e:e7:47:00:17:5c:4f:86:8a:cb:02:
58:f8:ca:d5:8b:72:d0:1e:7c:b7:7c:3e:b1:88:2b:bd:5f:7b:
bb:47:ff:07:38:3e:f3:2d:54:42:30:c1:82:49:fa:22:8e:03:
ad:3f:fa:28:81:4a:9a:dd:59:69:d0:41:cf:51:76:40:28:83:
bb:d7:8e:4b:10:49:ab:28:07:7b:a6:d3:4f:21:b5:45:51:d1:
53:e8:d2:f0:d6:4e:d9:82:fb:2b:ec:ff:97:0f:87:9f:ff:94:
d2:d4:1a:c6:38:e3:f1:f0:8a:c0:a2:e6:f0:92:1e:d1:dd:6f:
fc:f2:5c:03:28:68:0b:66:1d:80:10:ab:e2:50:5f:0c:3d:8c:
d7:c4:44:35:60:f3:38:69:4f:ce:49:58:1a:8d:f1:d1:77:27:
17:49:c0:c0:b7:cb:91:a4:11:b7:a2:ec:7c:95:09:47:42:ba:
da:e7:09:13:80:35:15:10:8f:50:df:24:d5:3b:f0:29:df:75:
52:05:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:27 2026 by rpki-client