
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier: BP5bRpTeqmtmfsM/IoYuWa8vcF0kn0B7r8jaDEeDuuA=
Subject key identifier: 10:84:24:7E:70:9D:35:3F:A2:48:9A:F3:F5:13:DC:96:B2:D8:5C:E2
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer: /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial: 0E8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number: 0E7E
Signing time: Sat 26 Sep 2026 17:48:38 +0000
Manifest this update: Sat 26 Sep 2026 17:48:38 +0000
Manifest next update: Sat 03 Oct 2026 17:48:38 +0000
Files and hashes: 1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: bMmx2NHa91RI7fDpCUAm+ChHrBBSRvmvNsG2VTCipk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 17:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3727 (0xe8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Validity
Not Before: Sep 26 17:48:38 2026 GMT
Not After : Oct 3 17:48:38 2026 GMT
Subject: CN=6ab80576-9a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:0a:97:1a:08:db:05:32:7e:70:2d:11:0c:
24:d1:3d:f0:ed:d0:b8:b5:ff:1f:7a:e2:54:4b:e2:
f0:0a:39:16:f1:8c:d1:6d:86:c3:85:8d:c5:68:34:
05:b1:5c:28:fe:cc:96:fa:2e:7f:f2:14:ee:7e:e2:
b2:c3:d6:63:a3:e2:7e:61:af:e1:80:90:85:1c:fa:
b7:d8:0a:98:75:f9:c4:4a:a0:e1:fe:f7:b7:de:d2:
3e:d8:ea:fb:1e:25:6b:35:7f:0a:6d:19:9e:0b:48:
23:71:fe:91:d1:12:8a:26:04:27:be:0c:a1:76:14:
60:c3:2c:b3:38:5a:c6:2f:f6:64:3e:cb:ad:b6:57:
7c:61:87:7c:bc:39:b2:d0:13:71:a1:e3:36:91:8f:
e3:bc:4c:5a:c3:b9:ee:27:20:fb:08:e6:e5:ca:1e:
77:55:89:16:66:82:36:64:2a:a2:6e:5c:85:16:6f:
1a:0a:7b:6c:d4:76:97:24:ea:ba:2f:f2:cc:c9:af:
1c:a6:ec:7a:55:ed:a9:20:70:6a:9a:38:f6:8c:3c:
da:02:f6:27:51:0c:e2:a2:ae:2c:2c:0d:b3:27:9c:
38:24:2d:31:a5:9b:f4:01:9f:9b:ba:3a:50:b5:48:
65:6a:ce:80:42:83:a4:69:42:01:3b:70:32:9c:7f:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:84:24:7E:70:9D:35:3F:A2:48:9A:F3:F5:13:DC:96:B2:D8:5C:E2
X509v3 Authority Key Identifier:
keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:31:99:a6:be:50:16:f5:af:f4:84:01:9e:d6:15:9e:6a:a9:
f3:09:5f:aa:9f:2c:58:ee:b8:4e:86:e0:35:e4:fc:9d:fb:94:
71:43:bb:b5:bf:cc:0c:09:23:51:03:32:f0:d5:7a:32:9a:65:
a4:e7:88:98:5e:7a:3a:8b:a4:a1:28:e8:82:8c:c4:00:7e:a3:
f1:09:60:7c:7a:fa:87:ad:67:cd:d9:71:ba:92:62:2e:97:5c:
b3:a0:8c:37:be:a1:93:de:1b:68:53:a3:89:e8:f2:48:1b:ed:
2f:71:9c:92:29:51:b9:b4:c6:d2:51:be:70:80:5e:14:49:8e:
b4:30:70:77:ae:07:6d:63:f7:3e:31:2a:62:69:f6:b5:67:da:
38:1f:1c:7c:f6:63:de:46:ea:69:ab:80:17:36:55:2d:47:ac:
fc:f3:38:e7:a7:99:59:3d:61:0e:07:cb:ab:7b:5a:fa:68:58:
c2:3d:ed:a2:07:47:4b:19:92:47:21:38:5f:8e:f8:59:20:b6:
49:95:33:31:57:b5:2b:38:dc:c5:94:c7:f3:c1:3a:00:e4:c1:
a6:a4:3c:b5:20:cc:77:36:7e:bb:08:34:0f:44:8e:3e:eb:db:
00:a8:91:53:24:23:bb:bb:1a:aa:8b:4f:35:e4:b3:9d:3e:b8:
17:e0:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:20:40 2026 by rpki-client