
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier: QgxpqrJ0h5vq08FaX14ZSaS1Ar1Kb/gpGzD5WD12+XA=
Subject key identifier: 91:5E:C1:43:35:B5:40:E9:5D:1A:C3:68:18:50:F3:84:14:F8:CC:E3
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 051F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number: 04FB
Signing time: Tue 21 Jul 2026 00:38:10 +0000
Manifest this update: Tue 21 Jul 2026 00:38:09 +0000
Manifest next update: Tue 28 Jul 2026 00:38:09 +0000
Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: ClgI8ygggAiJgjOY/xCOO9wvW+y1WcK7nuNPtOjlLKE=)
2: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=)
3: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=)
4: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 00:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1311 (0x51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Jul 21 00:38:09 2026 GMT
Not After : Jul 28 00:38:09 2026 GMT
Subject: CN=6a5ebf71-af40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:a0:8c:a9:1d:fa:ef:45:a3:85:4f:92:27:
88:41:89:59:9d:2c:22:de:a3:9f:73:34:83:c8:ae:
d4:e0:46:1d:04:05:28:60:3d:56:ba:72:38:b4:39:
ee:f7:58:00:a7:d1:47:72:8c:86:bc:fb:a1:c3:e2:
94:07:5e:bd:f3:1a:78:2e:62:61:11:c1:b8:9c:a1:
eb:b0:22:92:38:58:6e:8f:64:d1:83:f3:7e:2b:bf:
f0:6e:97:ac:0d:e4:6b:ea:a1:e4:b4:8d:04:bb:86:
a0:db:b0:99:3e:68:92:0b:b4:0c:7a:39:58:4f:8a:
46:3a:c6:b1:80:72:71:13:15:75:1c:c7:0a:3d:95:
20:28:f4:c9:ea:2a:8a:b7:aa:a5:23:2a:48:d0:e5:
bb:3a:0e:1d:8a:ac:22:7a:67:5d:05:3c:75:6c:ef:
ad:4f:c0:a5:88:39:c8:f9:b0:fa:8b:16:b6:b9:99:
c0:05:99:ad:27:d0:c9:a7:46:c2:cc:9c:e5:49:ad:
24:45:4a:c4:a1:93:1f:24:07:08:88:b8:5c:39:16:
23:93:90:76:88:b5:84:4e:a9:c3:f7:a1:a0:c5:97:
5e:58:3e:a9:b5:ab:bb:63:5b:69:f1:aa:90:bc:0d:
e0:14:76:34:40:74:56:13:f8:d7:b4:7c:f2:d6:0d:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:C1:43:35:B5:40:E9:5D:1A:C3:68:18:50:F3:84:14:F8:CC:E3
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:1d:b1:b5:bd:0b:5e:f8:6c:1b:1c:38:3d:b4:fb:1f:49:cf:
61:7a:1f:b2:b8:e0:a6:d4:5a:af:c0:1c:33:55:0b:ba:52:bd:
4a:7b:1a:c5:ee:7e:31:02:1c:d3:5b:88:8a:ff:2f:56:11:47:
ce:e4:0a:cc:43:f9:12:28:b7:6f:00:f5:eb:d3:a4:35:69:7e:
67:df:a9:ab:33:92:df:c7:46:71:99:7a:b3:f5:1c:4c:42:22:
9b:73:2a:47:cb:cb:94:44:2e:e5:17:5d:00:ff:bc:f9:75:c7:
a1:02:f1:86:f6:69:49:37:4e:bd:0a:1d:bf:63:40:9c:ef:41:
62:8f:7c:fa:6b:1a:a5:5a:70:60:a7:82:18:60:7f:14:8e:5e:
8f:b7:7e:b7:da:22:3b:12:1d:86:02:e8:e4:ae:e0:cb:fa:06:
df:95:1c:dc:7f:89:43:b4:a5:cb:47:20:f9:bc:37:39:91:93:
1b:7f:32:e8:3e:58:7f:70:84:e8:da:c6:a4:61:02:7b:16:71:
a0:a6:aa:f9:ca:68:8f:10:d9:8b:54:b4:d8:ef:10:d8:e6:56:
a2:2b:13:9a:21:81:0f:d6:4a:4b:1c:ac:70:a7:c8:51:50:96:
5a:c9:cb:20:e7:52:d4:4f:9e:51:f7:79:17:0c:55:d8:b8:7d:
99:3a:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:10:22 2026 by rpki-client