
$ rpki-client -vvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json)
Hash identifier: 5Qcp3DYIO9OYi5+hgHcq6ggvuo6O1pzV6i85V/ni5nQ=
Subject key identifier: 33:3C:05:12:97:31:9B:A2:39:7E:7A:64:30:09:3A:17:8C:EE:73:D3
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial: 028D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
Manifest number: 0287
Signing time: Thu 16 Apr 2026 19:33:22 +0000
Manifest this update: Thu 16 Apr 2026 19:33:22 +0000
Manifest next update: Thu 23 Apr 2026 19:33:22 +0000
Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: jdPIfKcgPmkfKb8HzcUekHg7eodxQ6iaA0yw3WVjnjo=)
2: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: or57mv8ZhngJVzct5ohW9eT9dxQJSb4OczHWwGVKrtg=)
3: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: WdYTpOxwaQ+j+4KBzA/L+jmy1fW724k61VLOBUYqe/g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 653 (0x28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Validity
Not Before: Apr 16 19:33:22 2026 GMT
Not After : Apr 23 19:33:22 2026 GMT
Subject: CN=69e13982-6b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:78:3a:4b:0f:8a:96:58:fa:cc:2b:f2:41:84:
d3:0d:37:c1:31:13:18:4d:9d:eb:4d:18:9f:e9:30:
84:17:80:a6:0c:27:79:f2:93:8e:1a:dd:58:04:bd:
a0:e3:22:10:c3:e8:6c:99:2e:81:e8:b0:f9:f3:26:
6f:4f:ca:43:2b:50:09:3c:43:7e:66:15:f2:81:bd:
cd:2c:08:bc:08:64:56:a2:23:a5:fa:08:7c:84:78:
6a:14:35:94:f5:5b:a6:98:71:82:56:aa:50:f4:10:
ce:3c:2a:21:d0:75:30:b6:1c:4a:90:ba:8a:57:f7:
08:b5:00:13:03:c9:06:48:4a:ef:25:bd:6d:e1:83:
d2:0f:b0:04:c5:06:cc:a1:c0:9a:df:c6:e0:f8:08:
40:86:ee:84:d5:c4:a1:a3:4c:9a:f6:42:fe:84:f3:
b7:0a:ac:b9:b0:7e:e0:48:b7:b2:c1:e8:cf:de:28:
42:1e:e4:dc:e9:0e:e4:b9:90:42:f9:3e:02:51:b8:
61:2f:d3:30:81:a9:d6:a1:fd:39:f3:77:6a:00:78:
a1:2c:be:4a:75:4e:8c:36:dc:4b:38:2a:46:f1:a3:
5e:78:ed:f0:a6:1d:f0:a0:5d:4e:7b:d5:71:b4:a7:
9a:18:8b:93:0b:4f:6a:da:d2:81:7b:69:e4:a8:59:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3C:05:12:97:31:9B:A2:39:7E:7A:64:30:09:3A:17:8C:EE:73:D3
X509v3 Authority Key Identifier:
keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:4d:e3:e3:11:e2:9e:2e:44:03:01:f9:9c:7e:96:42:61:c6:
b0:a9:7c:a2:4b:2c:7a:2f:6c:80:e4:73:92:37:3a:c2:31:ec:
82:28:a1:1b:ca:94:42:7f:ad:a9:ca:66:07:7e:d8:4d:0d:50:
62:22:ef:2c:33:1d:c0:76:79:ab:36:a7:03:4e:52:fa:38:46:
71:3a:b1:c3:1e:1f:d5:e8:12:c5:1d:34:15:52:ca:0d:f3:eb:
1f:90:e2:a1:da:6c:c8:23:5e:c5:7e:1c:e4:fa:8b:5f:7c:67:
d1:3f:f0:87:e6:1d:45:64:6d:0e:c7:b2:06:25:ce:23:c1:2d:
3c:09:b2:a9:e0:af:44:c8:8a:d6:4a:a5:df:e4:59:55:4e:67:
98:0b:ce:d3:f1:3b:1c:05:ed:f8:58:59:5e:cd:41:b2:36:e4:
72:87:0a:c6:9e:76:8f:2b:c0:ee:2f:d4:1c:3d:88:cd:72:67:
e4:3c:00:bb:bd:6f:2c:10:21:aa:92:80:20:ce:82:18:d3:03:
7b:22:62:81:eb:8a:2e:d4:62:1c:4c:77:34:c7:c7:4d:1d:dc:
46:a7:1c:85:a5:f3:2f:1c:4a:1a:80:45:02:8c:68:c5:03:99:
a4:12:f0:11:7e:f0:cd:74:e1:de:22:fc:07:4a:7a:07:e7:65:
29:b5:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:18 2026 by rpki-client