
$ rpki-client -vvf rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
File: _x_VyU8S81-tE63yeZqJj94Gysk.mft (raw, json)
Hash identifier: dzemkYg9kcuWnronzFbyjwOY5ds0vv0W3G0/Zji0PAI=
Subject key identifier: 53:E4:F9:1A:CB:99:44:1B:AE:18:CE:FC:5E:4D:5D:70:8A:F4:28:89
Authority key identifier: FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
Certificate issuer: /CN=A91504D6/serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Certificate serial: 0144
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
Manifest number: 0140
Signing time: Sun 01 Mar 2026 06:19:58 +0000
Manifest this update: Sun 01 Mar 2026 06:19:58 +0000
Manifest next update: Sun 08 Mar 2026 06:19:58 +0000
Files and hashes: 1: _x_VyU8S81-tE63yeZqJj94Gysk.crl (hash: GNu2CVE/1U8VagYiag5GXpQ+aZtJeBwubBTwqCvvFIA=)
2: A81815BE31B711EF8F3D5F6BC4F9AE02.roa (hash: LwVsRjUQzSRI9ydULu5dHXqYOgccHVAUOAaCO30tHhs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 324 (0x144)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91504D6, serialNumber=FF1FD5C94F12F35FAD13ADF2799A898FDE06CAC9
Validity
Not Before: Mar 1 06:19:58 2026 GMT
Not After : Mar 8 06:19:58 2026 GMT
Subject: CN=69a3da8e-6223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:37:21:0d:a4:ec:39:bb:79:de:e3:de:5c:
50:10:61:81:64:e4:1f:58:7e:05:e6:b0:85:2b:39:
70:73:1d:86:72:22:db:f6:a3:e0:84:d9:69:6d:1d:
5a:9c:81:9e:77:e9:bc:94:2f:39:01:bc:dc:75:cc:
d6:4e:b7:3e:2e:03:06:9f:44:18:8a:77:1a:f4:1d:
56:3e:b5:60:b5:52:79:f1:45:4f:63:83:d1:9e:2f:
e7:6f:cb:83:af:53:5e:e7:98:04:30:dd:ed:d2:87:
d1:1a:4e:24:c9:a4:46:6a:ae:15:b7:8b:0c:68:fe:
1e:35:2f:46:bc:cc:37:61:ab:05:c0:82:f8:bc:11:
65:ac:8e:c6:06:0e:9c:97:46:bb:8c:90:c1:11:c0:
97:81:93:07:b0:86:76:5d:b1:ea:66:2c:b5:8f:45:
7e:23:70:9c:d8:51:35:09:26:71:44:bf:c4:ad:ac:
e6:02:48:19:7f:42:56:26:00:1a:ba:9a:d4:91:39:
05:11:cb:b2:af:fa:d9:20:a1:f1:fa:03:5e:37:54:
60:80:72:bc:b2:27:fe:99:80:0c:fe:6a:3d:5e:af:
45:04:f0:89:8f:d6:97:c7:d0:cd:50:e4:9d:92:5c:
f7:ec:20:f0:09:3d:cf:c1:89:cb:d3:35:0c:91:ab:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E4:F9:1A:CB:99:44:1B:AE:18:CE:FC:5E:4D:5D:70:8A:F4:28:89
X509v3 Authority Key Identifier:
keyid:FF:1F:D5:C9:4F:12:F3:5F:AD:13:AD:F2:79:9A:89:8F:DE:06:CA:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_x_VyU8S81-tE63yeZqJj94Gysk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91504D6/B6C0934C31A911EFB6FB1D60C4F9AE02/_x_VyU8S81-tE63yeZqJj94Gysk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:c5:69:f4:48:21:7f:95:82:86:16:77:4a:f1:e1:4b:bc:a3:
1d:90:74:cd:8e:ee:5c:77:d4:29:d0:cc:cd:58:17:1f:bc:0f:
57:eb:6c:95:1e:d6:97:61:53:dd:45:b6:88:76:c9:af:f7:f5:
af:dd:52:e0:47:89:35:9a:25:58:9d:3d:96:22:3c:20:f3:ae:
d0:93:49:4b:8c:8a:94:0d:83:c8:e8:ad:27:f4:4e:38:ba:15:
f5:82:f6:f6:2e:f2:46:84:84:61:59:ac:ec:d7:b6:71:04:0e:
c9:78:09:35:7e:b1:bb:82:9b:53:8f:cf:af:ba:97:d7:cc:51:
85:2b:d0:d4:f5:2d:3d:8a:c0:b4:95:68:2b:89:07:a7:ab:fa:
e9:2f:c7:a5:01:79:51:e8:32:2c:fb:4d:1d:aa:92:c1:bb:25:
62:c0:45:10:01:56:14:6b:f3:b9:26:cf:56:86:7f:50:3e:18:
0f:99:3f:a8:b2:d4:1c:97:ef:88:ee:9a:2d:6b:46:3a:b6:f1:
c1:20:f0:ed:c1:10:5d:f6:10:f9:0b:d6:ec:ab:f5:1f:6d:85:
9b:59:b3:ef:c3:07:8e:cb:3d:63:74:5e:ce:f3:6d:35:18:d4:
b1:fd:15:ed:13:69:5d:1f:07:77:7a:1c:06:00:00:d4:9f:99:
80:68:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:29 2026 by rpki-client