
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier: fVJtw9UXKeMcYTGEufwHiMBaZkjcC0rTjW6abIwIHBo=
Subject key identifier: 9E:12:B1:69:6F:B8:F0:C7:36:CB:ED:98:BB:74:8C:0C:E3:9E:7F:AE
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 057B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number: 055A
Signing time: Wed 28 Oct 2026 23:41:24 +0000
Manifest this update: Wed 28 Oct 2026 23:41:24 +0000
Manifest next update: Wed 04 Nov 2026 23:41:24 +0000
Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: gAMWUb8oCkoW7mkX/6bispiPG3JgZ+EInk+Pcti2NBQ=)
2: 0D72C80EA21411F1A2E882014B11F970.roa (hash: QNtTKXUSfAEEjadKdZQUMOPyB19rXz5qCjaKrhfNMYY=)
3: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
4: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Nov 2026 23:41:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Oct 28 23:41:24 2026 GMT
Not After : Nov 4 23:41:24 2026 GMT
Subject: CN=6ae28824-6368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:01:56:7d:aa:7c:5c:d1:1b:ec:84:87:cd:
26:07:fa:3b:6e:a4:dc:46:ee:be:16:39:2c:f0:1e:
1a:df:e2:12:95:b6:6a:d9:1c:3d:63:da:23:61:c5:
67:84:71:f2:d8:73:46:b6:60:e1:4e:9b:94:9c:4c:
e1:58:72:7b:a1:50:df:49:c0:74:62:fc:15:2c:97:
c4:c3:d3:d1:fe:93:4c:eb:c0:d6:8f:11:f6:00:a5:
05:61:ab:ab:02:9e:99:46:74:31:78:86:59:d9:85:
b4:7a:83:72:c8:db:e6:3a:2d:df:10:7e:17:ca:f3:
22:b4:05:6f:1f:cb:7a:55:1c:6b:e1:24:ce:44:83:
a4:1e:ca:47:69:92:76:d6:67:65:6e:ae:97:eb:47:
61:8c:58:b6:13:37:c4:b1:74:b4:b1:2a:06:50:cf:
7f:54:16:dc:80:1a:ca:a7:7b:4a:2e:ab:b3:84:c9:
73:d2:4f:4a:2d:21:ee:ec:95:9a:97:ae:90:83:2d:
15:1f:87:de:2f:be:73:5c:b4:f6:ad:41:49:b9:c1:
3f:47:f0:7b:c9:ab:77:1c:68:89:3d:db:b8:ad:66:
6d:8b:f4:8b:e3:57:29:c5:49:68:dc:81:77:24:6c:
6a:a7:41:88:83:08:43:3e:88:36:03:1d:88:8e:47:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:12:B1:69:6F:B8:F0:C7:36:CB:ED:98:BB:74:8C:0C:E3:9E:7F:AE
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:58:78:da:9a:93:36:25:b5:a9:b8:4e:e1:be:61:14:e6:e7:
c4:ca:94:6c:12:4f:dc:aa:5a:be:3b:33:f0:f1:71:34:db:b3:
f9:fd:11:12:91:d9:2f:20:d5:92:0f:72:a5:b3:e4:c8:49:71:
15:f2:d2:fe:dc:82:30:cd:5e:20:e3:49:fa:33:77:e3:ef:b9:
61:4a:64:30:63:62:7e:b4:8e:95:d1:54:20:8b:a2:ea:25:7e:
02:8b:58:a9:fb:c1:86:4a:8a:26:64:1b:21:3e:61:1d:9a:93:
5e:07:0d:e5:c6:d6:93:38:2e:db:e4:76:f0:4a:ae:a6:0f:bf:
25:72:69:a5:bd:93:3d:34:e4:60:e4:df:6d:de:61:15:f4:cf:
b4:1f:37:a0:de:fd:55:93:e6:40:af:74:6a:2d:e6:a4:0a:e7:
a2:ee:11:80:53:ea:fb:58:54:a8:de:53:49:f5:b6:21:29:d9:
d4:88:6c:ae:30:d5:5e:c2:b4:8c:8b:9a:c2:d2:1a:0e:d6:80:
bd:2d:cd:3f:28:6c:30:06:37:ad:82:fc:89:be:66:6e:33:1e:
dc:5d:ea:e7:fc:55:67:36:1d:d8:58:7f:f5:83:60:19:b2:06:
76:a2:4b:be:8e:17:c1:01:2b:b6:dc:8f:fb:24:e1:35:3d:98:
e0:02:c9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:12 2026 by rpki-client