
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json)
Hash identifier: 6oA/J+mRcgCvc5DZs4vlBgt9Ryw4Rcia3wyOPxIpAqU=
Subject key identifier: 72:9A:1F:4B:ED:2E:50:72:9B:7E:C5:13:56:D3:61:24:0F:CA:F0:E6
Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Certificate serial: 0834
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
Manifest number: 0817
Signing time: Sun 31 May 2026 21:52:30 +0000
Manifest this update: Sun 31 May 2026 21:52:30 +0000
Manifest next update: Sun 07 Jun 2026 21:52:30 +0000
Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: VmjUDmZGPcg1eZqaHAQrLyNExn3j/NPHzyI5Y4esT4s=)
2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: zwaIVuRApbY9s1XyqtW/uqvzs4vi0AfgJgFNST/nhro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 21:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2100 (0x834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Validity
Not Before: May 31 21:52:30 2026 GMT
Not After : Jun 7 21:52:30 2026 GMT
Subject: CN=6a1cad9e-6484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:16:31:95:55:7d:ff:31:5a:c7:b3:62:98:d3:
da:6e:39:d2:dd:7c:c6:42:2a:f6:b8:bc:65:78:60:
16:f1:35:ef:aa:3e:de:f3:db:00:19:8c:37:52:f8:
8f:98:ff:d9:d5:bf:1b:f5:b8:ac:a7:a0:18:d2:c9:
60:30:51:97:dc:6b:c5:54:99:ba:8c:78:1f:b2:cc:
01:1e:fe:67:d3:11:c6:c9:44:7f:31:86:de:b5:2b:
17:c9:e9:5e:0b:37:c7:ef:a5:f2:97:00:7c:8f:a2:
10:2e:a2:d3:2f:89:dc:8d:48:b6:e0:72:f4:7f:7d:
22:32:73:bd:90:ce:f7:aa:05:be:b7:22:87:f2:9b:
0f:03:1f:88:c0:bc:42:cb:3b:dd:fc:7e:ab:be:0c:
eb:96:58:67:a6:22:a2:bb:6c:91:98:ae:53:ae:84:
96:a8:37:f1:f7:fb:fc:08:fa:6a:d7:36:2e:fa:0d:
79:9b:16:02:69:f0:25:d5:62:0b:6e:ba:a4:14:8d:
b5:8d:12:30:5f:94:0a:40:6c:70:36:f4:81:4f:23:
f8:c2:73:1f:a2:5c:45:f7:92:87:ce:20:86:c9:0f:
14:21:67:3f:c8:dd:eb:a8:d8:f0:6a:49:db:a8:f2:
d4:f2:a8:26:96:13:5d:92:0c:43:7d:9b:fc:7d:02:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9A:1F:4B:ED:2E:50:72:9B:7E:C5:13:56:D3:61:24:0F:CA:F0:E6
X509v3 Authority Key Identifier:
keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:1c:b3:06:a2:9b:bb:de:13:d9:5e:74:ac:1e:aa:b1:4c:8b:
a7:ea:17:63:ff:a0:a3:e7:13:7a:e4:58:63:43:3c:81:99:15:
e8:fd:a2:c5:62:15:4f:a9:90:6b:85:89:95:18:c8:82:46:ee:
1d:74:74:7b:84:d2:96:f2:df:ea:31:e8:bc:c8:99:d2:65:58:
71:f4:41:e4:c4:03:79:9e:de:b6:87:d7:54:b0:9d:df:79:f6:
d5:6d:d5:eb:41:d3:0b:3a:b2:35:28:26:1d:27:8a:fc:56:58:
f1:96:8b:e7:31:81:7c:cf:c6:e2:fe:73:a7:9e:35:3b:c9:7f:
bb:3d:34:5b:3e:a9:8f:79:c7:36:b7:d5:29:85:c1:6d:6d:78:
95:bc:08:94:a0:36:c7:40:ae:3c:7b:7b:a6:f1:70:5c:48:3f:
e1:34:e0:62:5c:f6:a2:0a:68:ea:8c:e1:60:ab:b5:d9:58:a3:
e6:da:37:8f:4e:3e:29:57:53:35:54:91:71:1b:0f:1b:3b:ac:
88:15:7c:47:6e:2f:69:0b:82:99:b2:06:4d:d9:37:b3:bd:3a:
97:36:12:78:b7:7c:62:05:68:53:e7:6f:2b:fc:c5:14:4e:3d:
8a:ba:a9:65:e3:4f:1b:fa:88:0e:40:e9:13:44:a9:7f:6a:e1:
84:b9:da:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:21 2026 by rpki-client