
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
File: Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft (raw, json)
Hash identifier: T7gg/zNaxVlpX+sfq9nJwX7RYzgX8wpv5n7syTO0wJA=
Subject key identifier: 46:27:86:FF:57:6A:08:68:DA:93:E6:5E:99:EB:6A:0C:3A:64:CB:EF
Authority key identifier: 55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
Certificate issuer: /CN=A91127C1/serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Certificate serial: 02E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
Manifest number: 02DC
Signing time: Sat 26 Sep 2026 19:34:39 +0000
Manifest this update: Sat 26 Sep 2026 19:34:38 +0000
Manifest next update: Sat 03 Oct 2026 19:34:38 +0000
Files and hashes: 1: Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl (hash: 8FMDZGNZkT3hPR0CVvB7jG3kAiCMa+Z6T4MEmVrgVbs=)
2: 8ED301D0782011F0BDB6E683C4F9AE02.roa (hash: mlBrSrR3pgA04x8jSnmONOEEm/8z9vhlANdGKFaajRw=)
3: 96C1C6A0782111F0A5880F87C4F9AE02.roa (hash: Cpj2rnPMgYM5VqySWqHdCDB+CGxD+l6btMfOp3kgYVw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 19:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 740 (0x2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91127C1, serialNumber=55FB7BCCA740285FC81AA360F02CE32F95816DB6
Validity
Not Before: Sep 26 19:34:38 2026 GMT
Not After : Oct 3 19:34:38 2026 GMT
Subject: CN=6ab81e4e-f348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:03:8a:07:41:3f:05:83:fe:a6:b9:6e:1a:a5:
d6:83:e4:75:92:4a:9f:5f:5f:5a:7f:03:c6:97:ac:
50:c2:97:5d:32:19:f5:06:55:c8:d3:69:ad:9b:b9:
56:78:41:61:75:be:07:ea:99:ac:db:8c:6f:6e:a9:
1d:78:57:b8:2f:03:2e:ce:be:dd:33:9f:62:d7:76:
1c:95:6d:0c:ea:88:0d:25:b2:23:ba:b9:e6:bf:62:
9a:5d:4a:69:6e:28:02:01:64:e5:12:01:ba:c0:14:
1b:f0:e0:34:39:a5:3e:65:08:de:8d:af:00:16:5c:
a3:53:30:6f:62:7e:28:5b:83:58:4f:c0:a2:f7:42:
5e:f2:59:b0:cb:83:74:d3:4a:6d:b2:e6:ec:af:eb:
ce:80:f3:89:a8:6a:44:92:33:72:27:b2:fb:7a:a6:
ae:a7:47:7a:3a:c9:3b:a6:31:1d:71:60:f7:8d:31:
a7:f7:b1:44:42:6a:fb:fc:b2:03:c5:e8:e1:c0:e7:
39:18:d4:8b:28:a5:80:b3:62:9d:c9:a3:5b:5e:fd:
ce:87:43:b1:55:4f:6f:c1:96:3b:97:cf:df:f6:a9:
4d:fe:cb:11:dc:18:21:d1:85:13:ba:70:cb:a7:92:
a1:25:93:28:b9:be:d8:f3:ce:c4:51:69:b7:c5:49:
fd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:27:86:FF:57:6A:08:68:DA:93:E6:5E:99:EB:6A:0C:3A:64:CB:EF
X509v3 Authority Key Identifier:
keyid:55:FB:7B:CC:A7:40:28:5F:C8:1A:A3:60:F0:2C:E3:2F:95:81:6D:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Vft7zKdAKF_IGqNg8CzjL5WBbbY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91127C1/DCF98A16778111ED96B36464C4F9AE02/Vft7zKdAKF_IGqNg8CzjL5WBbbY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:ec:1c:03:c6:ac:ec:d7:f7:1c:5a:c2:1f:15:4c:0e:ee:
f2:78:ef:84:63:cd:5f:c7:1d:14:2b:05:ad:10:6a:3c:ef:41:
75:9f:0f:53:e6:c0:d4:d9:8b:05:6a:50:b8:e6:1c:47:cb:6c:
d2:f0:47:59:7d:6e:50:97:34:57:80:cd:33:cf:ff:3c:f2:28:
9e:20:cc:3c:f3:c8:3b:24:db:09:65:ec:a2:a4:9c:31:91:7e:
c9:b9:98:75:88:85:d5:68:61:ed:95:aa:11:e1:75:e9:25:53:
43:00:81:25:6f:e9:b9:60:03:82:3e:3c:a7:52:a0:17:19:7d:
57:8c:4a:ca:c9:b2:17:39:49:14:3f:27:24:16:11:cd:8d:19:
23:58:22:88:01:59:ac:f2:17:29:72:e3:65:56:a5:3b:ee:d8:
4d:79:d0:f4:1e:00:32:df:c8:5a:cb:de:39:ae:80:22:6d:02:
12:f8:0b:b1:35:5c:70:ee:05:2d:01:ea:a4:5e:0b:58:49:1f:
be:93:9b:c0:28:fa:2b:2b:61:ab:3e:ca:27:2c:ca:cb:a6:da:
43:ab:f1:20:f8:41:29:3c:61:6e:e6:86:72:30:7d:bc:b5:f6:
98:e3:ca:22:67:99:f0:8b:b9:87:b0:63:ea:a2:de:2f:e2:ac:
c3:c8:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:38:28 2026 by rpki-client