
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: igR3Vbu53GQnZ1LwZIWQnntpKlaeHILik05Nj72hBhg=
Subject key identifier: 98:0F:FD:EA:95:FA:F3:09:F3:72:76:2C:91:89:FD:DF:06:3F:D2:36
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 0313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 0309
Signing time: Tue 23 Jun 2026 01:17:35 +0000
Manifest this update: Tue 23 Jun 2026 01:17:34 +0000
Manifest next update: Tue 30 Jun 2026 01:17:34 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: F4aXk/mvlXV9wMDlfDrU3YNxnQY7QzQ4wykbjZLn3pU=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: /BvQ6kvIEgBffI02nHSKZcn99+fjwqt27ykwaYqA3zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 01:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 787 (0x313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Jun 23 01:17:34 2026 GMT
Not After : Jun 30 01:17:34 2026 GMT
Subject: CN=6a39deaf-57a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:72:e4:10:a5:ca:17:62:19:7c:dc:30:92:a2:
44:95:f0:b3:66:73:cf:c8:e0:be:14:a2:9f:8d:97:
98:db:46:e5:bc:ff:df:ae:0c:be:39:c7:94:a0:74:
32:2e:c7:4b:49:d1:b3:ef:06:6c:2a:82:66:1f:39:
62:6e:d8:8f:f5:ef:1e:ea:78:2a:03:53:ea:ca:82:
fe:d0:7e:bf:2b:68:b1:f9:6e:46:7a:c9:46:15:98:
76:70:72:d0:d7:a3:bd:7c:d4:bd:3e:c7:4e:a9:6b:
62:a5:5e:f5:28:06:fb:f8:73:2a:1d:f2:fd:9f:46:
66:f2:89:8d:41:e9:91:8e:c7:dc:9b:df:21:ac:8d:
71:4e:3d:69:38:f6:9c:18:3e:29:df:16:81:1c:b3:
bd:23:a7:dc:b9:f7:ae:2e:cc:2c:a5:23:38:4d:b3:
12:f5:c6:a1:52:95:26:01:93:90:c1:5f:54:1a:dd:
fd:4a:ce:ca:4b:f4:78:50:d0:65:95:ce:dd:61:12:
64:fb:2e:dc:b1:a4:c0:f8:b0:b5:ce:27:c5:ed:ad:
5e:da:85:54:67:d5:05:5f:95:83:c3:6a:63:9b:2e:
c4:cb:4a:c1:18:a5:e7:62:f2:ed:17:a3:f7:27:3c:
30:2a:2b:7c:c9:22:e6:7b:a9:86:f1:b8:35:5b:ca:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0F:FD:EA:95:FA:F3:09:F3:72:76:2C:91:89:FD:DF:06:3F:D2:36
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:fb:da:21:a5:9c:c2:22:5f:c5:3d:20:53:9b:97:d7:37:5a:
40:28:0a:6b:09:d1:70:90:e2:d7:1c:27:a7:b5:f1:0b:71:82:
18:7e:73:de:cf:86:af:33:71:96:c3:4e:0e:a8:9e:71:fb:b7:
e9:35:67:03:45:34:22:24:d5:e1:40:ac:d7:b3:c2:99:b1:4f:
26:9d:5a:f2:93:23:d9:40:98:70:ec:1b:e6:c1:53:71:d5:de:
e1:04:8a:07:7b:dd:0f:92:ce:67:2c:dc:5b:82:2e:d4:a0:ea:
96:f2:f5:ce:f8:b3:8f:21:1c:e5:c0:0c:c2:9e:56:8e:41:89:
6b:fd:06:f6:17:f1:4a:47:6e:44:9a:b1:7a:4e:41:0a:29:a0:
23:47:26:5b:e4:97:66:68:82:c8:7d:95:f6:4f:05:57:d4:14:
af:6f:4f:b6:78:db:4c:3d:7c:ae:96:8a:50:be:89:f8:b1:3f:
af:da:58:a9:2f:1f:08:72:c2:df:ef:73:8f:5d:db:57:cc:6e:
cc:73:87:e5:c3:7f:a7:d2:d2:ae:7a:75:b4:78:cb:0b:af:07:
e0:d3:28:0b:90:53:74:ee:1f:c6:97:13:f8:62:8d:47:d2:2c:
87:2d:ba:71:b5:48:66:34:ba:95:3c:22:10:df:34:d9:93:58:
ca:32:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:18:30 2026 by rpki-client