
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier: CdqGlSGxuO4fhpDWLoFMABa20bRI1kAYUYcp2Neas/M=
Subject key identifier: DB:C9:F1:2F:4F:FF:60:D3:22:7B:3F:33:C4:73:DA:E0:BD:51:15:5A
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial: 01F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number: 01E6
Signing time: Thu 21 May 2026 03:33:04 +0000
Manifest this update: Thu 21 May 2026 03:33:04 +0000
Manifest next update: Thu 28 May 2026 03:33:04 +0000
Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: TuWIgi+dfFxDLjY+Cfqr16aw3gFQmQEyS2m+2IKqYp8=)
2: 453686A272BA11F09A607433C4F9AE02.roa (hash: vxtVSqgO0tJzIWUXWRbBUws88DNS2So0GYHbthIwwJY=)
3: 3DA5441A070611F1ACA42273223D8C67.roa (hash: n+Kx5YLJVSW5gosUnIscCwbaC3lMeiZQn4J/zNSLjd4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Validity
Not Before: May 21 03:33:04 2026 GMT
Not After : May 28 03:33:04 2026 GMT
Subject: CN=6a0e7cf0-c246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:b8:c2:0e:a2:f0:cc:1c:b1:78:57:41:d4:
ef:67:7a:bb:bf:3d:7b:c8:97:5f:c4:d1:ec:53:5b:
70:3e:68:29:a9:c6:4e:fe:5c:79:8b:45:e1:f6:fb:
67:8b:5f:03:9a:b7:b8:03:bd:61:21:96:ce:ff:9f:
bf:1f:6f:e6:3d:5c:b2:36:09:b6:ca:e0:d7:b0:3a:
ff:aa:94:8a:0c:a2:e1:04:1d:b3:4f:eb:5b:07:49:
93:66:cf:f6:12:3c:22:83:67:c7:0b:78:9a:90:9a:
02:22:90:2c:90:e2:d9:a8:56:10:5b:0f:0c:24:99:
b7:59:2b:41:41:db:cd:99:aa:d8:60:70:f7:a3:3d:
1e:8a:7c:d9:40:fd:70:0b:d3:f1:6e:10:44:76:77:
74:ef:94:e5:f8:9c:5a:ec:cd:48:ce:d5:23:c3:b0:
be:58:8d:d5:be:af:66:40:1c:91:8c:ab:74:c1:e7:
02:a9:f0:bc:a0:d7:8e:ea:7a:da:8c:2d:8d:42:7b:
0f:75:e1:1f:8f:03:a1:34:78:04:47:5f:5e:12:07:
54:b3:44:ef:a5:c6:17:4f:34:6f:f8:ac:2c:b5:77:
98:10:c0:f2:58:9d:3b:c9:e6:66:03:38:e9:65:3f:
85:ea:0f:69:07:76:51:ed:c6:32:9e:70:4c:33:86:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:F1:2F:4F:FF:60:D3:22:7B:3F:33:C4:73:DA:E0:BD:51:15:5A
X509v3 Authority Key Identifier:
keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:6b:24:dd:e8:fe:60:28:42:2a:be:49:6b:62:28:24:8c:4f:
50:ca:b4:9a:72:87:18:96:cc:77:66:9d:64:cc:bf:b8:21:33:
01:c8:59:dd:77:23:df:32:14:22:f0:6e:f5:43:af:29:13:66:
e6:88:77:04:fe:36:66:76:87:81:3e:ac:24:71:cf:ed:93:36:
e3:94:94:8a:a0:14:29:40:df:fb:15:d4:73:43:96:a2:3d:0f:
e5:da:58:ca:f8:e5:84:e7:43:51:a8:4f:2b:ac:67:22:4c:10:
93:4e:b1:9d:26:4b:62:ea:02:60:0c:7f:03:f5:15:b4:b1:52:
a4:b8:45:4a:ec:9e:0e:47:a0:76:84:7e:12:88:52:20:52:23:
46:9a:c7:30:92:fc:17:36:4c:b4:68:f5:38:9d:3a:cf:45:8c:
6d:99:75:54:3c:b9:d7:97:96:5e:0b:58:78:42:58:be:a4:62:
52:10:6e:bc:c2:56:99:db:48:51:d8:2d:39:97:60:45:b1:b3:
f5:30:d2:d7:b2:f0:bb:a4:89:76:0e:9e:a6:03:7a:27:ce:3c:
d5:e4:0c:a9:31:52:59:a6:2d:b4:f4:8a:ac:4b:ac:39:04:39:
54:9c:8b:72:70:87:a2:a3:bb:72:7f:78:a0:1c:61:0a:20:94:
8e:c9:35:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:04 2026 by rpki-client