
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: c04FN55xaijptk31rKDmWEzibpiiyIPTgurvazZ7h6U=
Subject key identifier: 93:41:C8:B8:1F:6D:D8:2A:09:56:00:8A:CE:45:36:49:FE:19:BD:25
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 02EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 02E1
Signing time: Sun 05 Apr 2026 01:05:43 +0000
Manifest this update: Sun 05 Apr 2026 01:05:43 +0000
Manifest next update: Sun 12 Apr 2026 01:05:43 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: yi/aI8loyQtYPsbrJpi/EoaEXlr7Xu38AZKjOeevFeI=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: /BvQ6kvIEgBffI02nHSKZcn99+fjwqt27ykwaYqA3zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 01:05:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 747 (0x2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Apr 5 01:05:43 2026 GMT
Not After : Apr 12 01:05:43 2026 GMT
Subject: CN=69d1b567-2f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:3b:37:55:1a:95:e5:bc:93:0c:21:7b:95:
f1:44:38:34:bd:a8:1c:39:bb:63:c9:51:86:38:05:
ab:1d:55:0a:21:67:2a:f6:2b:5c:48:58:6b:74:70:
de:e4:70:89:4c:f7:d3:d8:77:41:a3:c4:12:ed:a0:
cb:fb:36:bb:ef:41:db:dc:03:54:b3:4b:51:89:60:
cd:b0:04:91:d1:b1:52:0d:0b:f0:a7:76:8e:28:e2:
0a:eb:5c:88:35:f0:84:21:99:6e:ad:0f:9f:d8:b5:
ca:2c:d8:cf:1e:4b:f6:89:d0:4e:fa:57:17:da:f6:
72:fc:79:13:43:9b:fb:b4:bc:5c:01:d4:43:50:c0:
d7:d8:cf:88:f5:f0:3f:dc:96:81:32:c0:57:09:e4:
19:10:c1:0b:2e:60:a0:fb:c7:53:eb:93:71:a0:f7:
46:29:e7:11:7a:2c:85:58:57:a2:f6:36:ea:b9:4d:
59:67:f6:1b:ee:ad:cd:8a:cc:5b:f5:f6:35:22:ee:
ec:d1:72:c0:eb:8c:6a:c0:4d:4a:65:38:ae:5d:77:
61:2b:ae:dc:c5:ca:d0:49:c1:0f:f4:3e:a3:70:c0:
b6:98:5f:b3:da:ba:41:7c:1a:83:c5:53:09:97:2b:
b2:8b:89:87:56:cd:06:0a:79:f1:61:0e:1c:ee:19:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:41:C8:B8:1F:6D:D8:2A:09:56:00:8A:CE:45:36:49:FE:19:BD:25
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:bf:0d:41:11:d5:4d:37:0d:df:4f:75:b8:38:e0:29:6a:67:
cf:81:90:95:56:d2:71:d6:d1:8f:d5:5a:c2:a8:29:1b:e3:9a:
39:3e:ac:65:5a:03:ac:a5:f6:68:8e:a0:b9:8c:36:ea:8f:5e:
b7:56:b5:36:8c:16:dc:25:2d:06:cc:0b:06:d8:ce:c4:e0:d2:
88:85:55:0a:8f:c9:35:08:0b:ab:06:90:c0:bb:a6:7b:2c:ff:
42:01:d1:16:cb:56:57:ba:44:a9:73:0e:15:a1:48:d4:c0:c7:
f1:ce:81:88:5f:b3:b2:03:2e:65:be:63:83:b9:6c:3c:69:9f:
02:f3:e2:95:17:c4:32:6c:d1:a5:f5:1c:22:de:56:ae:19:c7:
14:78:a4:32:ce:b3:db:c4:b5:5f:7d:73:96:05:01:42:6f:9a:
66:6a:4b:66:d8:2c:7e:2b:78:67:b8:61:07:3e:79:20:ac:d5:
98:ec:fd:0d:37:81:28:26:09:a1:69:78:08:d0:46:c1:aa:61:
8a:e6:3b:a3:04:d2:fd:fa:af:d6:54:56:4c:74:62:c8:45:79:
69:ce:26:46:a2:72:9b:f7:2e:7b:37:a4:a8:5c:0b:cd:e4:95:
52:d6:37:0b:42:d8:5a:fe:70:39:ec:eb:02:87:83:c3:c7:0d:
a3:b3:cf:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:38:19 2026 by rpki-client