
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft
File: vYWifqA3zhvaSwsh9PBA2bHT53g.mft (raw, json)
Hash identifier: YwPTCej5YG7athBRJj2ysLkSG2ayLDowRFoTFYhTnTM=
Subject key identifier: 0F:34:98:7A:97:BF:65:E1:86:7E:3A:5F:62:68:3F:5F:8C:52:47:64
Authority key identifier: BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78
Certificate issuer: /CN=A91FCA43/serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778
Certificate serial: 1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft
Manifest number: 1B
Signing time: Sun 27 Sep 2026 09:41:16 +0000
Manifest this update: Sun 27 Sep 2026 09:41:15 +0000
Manifest next update: Sun 04 Oct 2026 09:41:15 +0000
Files and hashes: 1: vYWifqA3zhvaSwsh9PBA2bHT53g.crl (hash: wtpIrhR3V3DeiWoNWsYwzeZ5GZBlSYM67C7irIogFkk=)
2: m0_tJMWIkob__qWztDFwuI7BAqU.asa (hash: l1AjCWVrvXraVZ9Z8MnHg0my36XZ8gwtH5FBbkfxpK8=)
3: BF0C3468A27A11F1846886F86811F970.roa (hash: HiBw6l9Sxo7Rrs0kPz6lX0/bPt6FCdr2birEHDIBD+E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl
rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 09:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FCA43, serialNumber=BD85A27EA037CE1BDA4B0B21F4F040D9B1D3E778
Validity
Not Before: Sep 27 09:41:15 2026 GMT
Not After : Oct 4 09:41:15 2026 GMT
Subject: CN=6ab8e4bb-b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ec:41:41:1e:f6:f5:3f:8b:0b:b7:d0:f0:ca:
fa:ec:93:6a:c4:eb:b8:18:f8:46:c7:0f:93:7c:15:
5f:d3:c7:25:62:82:e0:ab:dc:3c:e4:05:8d:23:cc:
de:55:e6:ba:18:69:80:a0:03:bc:e1:77:f3:19:8b:
df:b7:0b:f3:01:28:4e:2d:ba:e3:82:68:53:5a:fd:
f6:1d:55:44:db:45:4a:2e:a7:1d:69:aa:2f:c1:4a:
91:97:fb:28:7c:c7:13:d5:5f:2e:1f:6b:c6:1d:54:
b8:44:cf:fb:bd:17:9f:db:dc:08:ec:2d:9f:c1:b8:
1f:b3:69:53:5a:a5:fa:26:97:29:e0:57:7b:ae:db:
32:37:9a:e4:de:12:85:b9:78:c8:c5:e9:0d:dc:b6:
15:51:67:b3:9e:5e:0d:03:e5:2a:10:0b:b6:bc:af:
91:fc:77:d5:3e:73:f0:45:45:b0:ba:53:62:c7:8c:
d5:0c:41:2a:a6:0b:96:45:04:93:02:c9:bb:38:94:
72:bd:53:04:f7:84:c9:d0:5d:12:48:82:72:e8:f4:
af:c2:42:dc:a2:e3:26:2c:8f:16:40:fc:03:2e:72:
51:a4:87:37:93:8c:dd:d8:94:a5:97:e9:5b:a4:37:
a0:bf:f7:e2:d9:68:27:6f:87:aa:db:97:9f:a6:ee:
e8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:98:7A:97:BF:65:E1:86:7E:3A:5F:62:68:3F:5F:8C:52:47:64
X509v3 Authority Key Identifier:
keyid:BD:85:A2:7E:A0:37:CE:1B:DA:4B:0B:21:F4:F0:40:D9:B1:D3:E7:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYWifqA3zhvaSwsh9PBA2bHT53g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA43/294B96DAA20711F1A226B7654611F970/vYWifqA3zhvaSwsh9PBA2bHT53g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:db:34:c9:5c:10:0d:b6:c1:74:c9:41:54:b7:2c:10:54:82:
3b:8c:d2:8f:ef:cb:eb:b3:3c:a4:f7:12:8d:74:54:e4:ce:25:
44:09:e3:30:d8:d4:2b:bf:14:1d:82:5a:14:bf:39:89:ae:8d:
62:7f:9b:92:d8:cf:56:2a:cf:87:fa:7e:0f:5f:e4:a2:fd:eb:
b3:3b:e9:b7:4c:3c:8c:22:d5:40:62:cc:c1:dc:68:99:0b:48:
c9:77:ce:e6:3e:de:5a:94:2e:2b:07:a0:cb:4b:83:15:4b:08:
6f:e5:58:17:15:1e:b6:13:fb:50:95:03:e5:ab:4b:f5:38:14:
54:a5:6e:eb:61:e7:15:94:b3:a1:10:84:75:ad:09:84:05:33:
0e:44:aa:f5:e4:0a:67:1d:f5:c3:3c:44:7b:ce:63:11:4a:56:
c4:f8:d9:eb:93:6d:6a:f3:2b:ba:d3:cd:2a:6d:94:99:78:14:
19:21:f4:40:fb:a9:af:00:9e:88:3b:81:52:b4:e0:fb:cb:60:
58:9b:92:ee:17:77:fa:66:27:2f:36:8c:4f:d0:fe:ed:9b:24:
47:9e:f4:03:88:33:55:65:62:59:6e:fa:e8:1a:09:5c:0d:c3:
06:0b:a3:46:68:9a:23:27:d5:58:02:61:08:58:f8:cd:a7:ac:
79:a4:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:14 2026 by rpki-client