
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier: W8Ws5y8/xmn7BlDNqmTEoy2oLQNxX5v5lNw+JyN0t4A=
Subject key identifier: 46:8D:21:9C:27:AB:E4:0A:D2:A8:FF:F6:A1:EB:2F:98:1C:36:5F:65
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 0563
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number: 0542
Signing time: Thu 10 Sep 2026 23:25:36 +0000
Manifest this update: Thu 10 Sep 2026 23:25:35 +0000
Manifest next update: Thu 17 Sep 2026 23:25:35 +0000
Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: qU0Rq8JRHQzPrUE18AiXF8vtgtZtSkR2/hpHy9f00ak=)
2: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
3: 0D72C80EA21411F1A2E882014B11F970.roa (hash: QNtTKXUSfAEEjadKdZQUMOPyB19rXz5qCjaKrhfNMYY=)
4: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:25:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1379 (0x563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Sep 10 23:25:35 2026 GMT
Not After : Sep 17 23:25:35 2026 GMT
Subject: CN=6aa33c6f-eff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:81:7c:4c:56:b0:aa:10:b6:d0:8f:6e:6a:
50:cb:a2:ca:e3:a4:4e:c9:6d:c3:b5:88:10:da:2b:
da:8b:33:14:ba:b7:86:88:63:64:a6:db:4e:8c:ad:
3f:58:3e:63:b9:78:3b:63:7d:a3:ca:80:60:6e:45:
e7:7b:13:19:72:8b:c6:c9:8d:6d:c0:90:f3:0a:de:
52:4f:f8:3a:7b:83:a7:24:fc:98:a0:16:30:67:63:
79:5a:88:ea:75:05:6f:25:b0:b8:ee:89:e0:20:04:
51:92:dc:9f:87:bd:3b:b6:f9:bd:6c:7e:e1:cc:98:
69:91:2d:08:75:e7:3a:36:0b:09:9a:83:8f:8c:9a:
37:c6:15:03:d8:2b:60:09:7a:8d:c4:ea:56:4c:14:
e4:71:14:55:c9:42:9d:a1:0b:1c:92:de:19:f4:0e:
ea:c7:3d:1d:09:2a:dd:20:ab:18:53:62:3c:b8:f8:
bc:7e:fc:b6:40:9c:76:0a:fa:ad:d6:2b:d3:63:a0:
8d:e9:de:65:15:5e:bf:04:09:77:f2:ec:16:ee:71:
e1:61:a7:fd:93:37:ec:3e:55:68:c9:11:b7:5c:22:
c6:92:18:d9:c5:d2:81:96:6f:3d:0e:2b:bc:fb:65:
ca:9d:21:f5:ef:92:1e:4e:06:aa:fd:ec:82:7e:f5:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:21:9C:27:AB:E4:0A:D2:A8:FF:F6:A1:EB:2F:98:1C:36:5F:65
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:6e:00:d2:16:1b:3c:12:c9:a7:43:bd:a8:e3:a8:2a:46:d1:
43:36:94:e8:30:a4:f5:d4:6f:3f:29:af:98:8d:0e:3a:84:45:
bf:79:f3:a2:e3:71:c7:d6:ec:d9:a4:2d:ba:0a:2d:7b:d8:58:
19:b7:22:7d:e3:56:17:86:b6:3e:57:df:45:12:c8:db:39:8e:
02:11:5a:c3:d8:9a:02:2a:28:f0:1c:d2:a2:b5:a0:62:86:15:
98:30:2b:9e:58:c7:d3:8e:e6:d2:19:ac:cd:af:44:60:2d:a3:
9d:da:41:7b:c9:1a:0c:55:6d:eb:c3:7a:5a:18:46:32:e1:2d:
0f:8c:6f:3e:3f:0a:47:46:6e:75:57:93:7b:da:86:89:d3:bd:
88:01:3b:a2:9e:7f:cc:59:c3:a5:17:02:e9:70:61:f7:f9:2a:
7b:4e:43:cf:ff:54:b8:84:cc:bd:d7:8e:99:7f:02:a0:81:80:
d6:a8:f8:fc:85:da:f2:99:c8:16:a4:c8:a5:bf:23:13:21:f9:
f3:16:04:ac:8f:b0:4c:7a:67:03:fe:e9:be:c1:16:09:81:98:
6c:fc:56:61:30:d7:c3:59:bf:8b:43:ba:69:33:95:fb:0e:0e:
7b:01:45:a0:42:88:58:07:a2:2c:7f:cd:06:9b:3b:a4:08:f4:
e4:26:d6:b6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkY0MjgxMTAvBgNVBAUTKEJFODUyQThCM0I3RUE1QzVBQzVBNTJBQUNCODUyQTAx
QTRDREQwODIwHhcNMjYwOTEwMjMyNTM1WhcNMjYwOTE3MjMyNTM1WjAYMRYwFAYD
VQQDEw02YWEzM2M2Zi1lZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwUmBfExWsKoQttCPbmpQy6LK46ROyW3DtYgQ2ivaizMUureGiGNkpttOjK0/
WD5juXg7Y32jyoBgbkXnexMZcovGyY1twJDzCt5ST/g6e4OnJPyYoBYwZ2N5Wojq
dQVvJbC47ongIARRktyfh707tvm9bH7hzJhpkS0Idec6NgsJmoOPjJo3xhUD2Ctg
CXqNxOpWTBTkcRRVyUKdoQsckt4Z9A7qxz0dCSrdIKsYU2I8uPi8fvy2QJx2Cvqt
1ivTY6CN6d5lFV6/BAl38uwW7nHhYaf9kzfsPlVoyRG3XCLGkhjZxdKBlm89Diu8
+2XKnSH175IeTgaq/eyCfvUfKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEaNIZwn
q+QK0qj/9qHrL5gcNl9lMB8GA1UdIwQYMBaAFL6FKos7fqXFrFpSqsuFKgGkzdCC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjQyOC8zNUVCMTM0ODVE
RDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBjV3NXbEtxeTRVcUFhVE4w
SUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZvVXFpenQtcGNXc1dsS3F5NFVxQWFUTjBJSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RjQyOC8zNUVCMTM0ODVERDgxMUVDQjlCNEQ2MzBDNEY5QUUwMi92b1VxaXp0LXBj
V3NXbEtxeTRVcUFhVE4wSUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiW4A0hYbPBLJp0O9qOOoKkbRQzaU6DCk9dRvPymvmI0OOoRFv3nzouNxx9bs
2aQtugote9hYGbcifeNWF4a2PlffRRLI2zmOAhFaw9iaAioo8BzSorWgYoYVmDAr
nljH047m0hmsza9EYC2jndpBe8kaDFVt68N6WhhGMuEtD4xvPj8KR0ZudVeTe9qG
idO9iAE7op5/zFnDpRcC6XBh9/kqe05Dz/9UuITMvdeOmX8CoIGA1qj4/IXa8pnI
FqTIpb8jEyH58xYErI+wTHpnA/7pvsEWCYGYbPxWYTDXw1m/i0O6aTOV+w4OewFF
oEKIWAeiLH/NBps7pAj05CbWtg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 13:55:35 2026 by rpki-client