
$ rpki-client -vvf rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
File: vTfx1AdHvmxfXGujMH32Vgq2gaM.mft (raw, json)
Hash identifier: 8HLgZBjD3Agkg9mEXpM5Vm00cQdeOuh1Ld8qpmmN1Yg=
Subject key identifier: 23:4B:2C:56:42:D9:7E:E1:6E:41:71:1C:8E:4E:90:54:8A:66:20:87
Authority key identifier: BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
Certificate issuer: /CN=A91817E6/serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Certificate serial: 0109
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
Manifest number: 0C3A
Signing time: Sat 18 Apr 2026 19:57:46 +0000
Manifest this update: Sat 18 Apr 2026 19:57:45 +0000
Manifest next update: Sat 25 Apr 2026 19:57:45 +0000
Files and hashes: 1: vTfx1AdHvmxfXGujMH32Vgq2gaM.crl (hash: rfV/wnwz/6PHZMgC8VXoT6mQ2hFLc9++Ub+ZTd+Fdxc=)
2: 28C454FCB41211EF8D2EC946C4F9AE02.roa (hash: QB5ktFkmasLbkBlP1SMErkyzO+uRKfcfUdHGElXJLuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 19:57:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91817E6, serialNumber=BD37F1D40747BE6C5F5C6BA3307DF6560AB681A3
Validity
Not Before: Apr 18 19:57:45 2026 GMT
Not After : Apr 25 19:57:45 2026 GMT
Subject: CN=69e3e23a-231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:86:3c:e0:7c:02:45:aa:ed:53:f8:7d:07:49:
09:27:20:bb:f7:2c:73:d5:88:f0:ee:ca:05:73:26:
f5:45:dc:8f:48:db:a6:e3:95:82:03:2d:e1:a1:df:
c7:05:fe:28:48:be:b7:e5:01:29:ee:27:8d:76:08:
01:47:0c:93:ed:d6:ce:4e:fe:3f:f8:f9:54:a6:11:
e1:25:3b:b9:56:88:bc:7d:ae:48:27:c6:6b:57:1a:
d4:be:f6:45:f2:39:44:de:63:35:16:cd:c2:08:2a:
2d:89:35:1e:a3:88:68:58:bd:c9:f7:0c:18:34:ac:
bc:e0:99:57:1e:92:af:62:c7:ff:8d:6b:c3:b0:1d:
09:8f:64:05:b6:12:c4:ab:4d:e5:1e:bc:81:c8:d1:
8c:d0:dd:c9:9c:cc:2a:48:37:a5:7d:b6:a7:d0:db:
ea:90:a4:59:a7:98:0d:7f:48:dd:40:0f:08:09:70:
5c:35:f2:4f:1d:6d:3a:1d:fa:8c:ab:ec:97:3e:93:
93:4f:16:3f:ab:0a:f8:c5:ec:97:77:ba:65:a6:6f:
f5:a5:4d:80:70:c6:12:9d:4d:cd:7b:80:f8:d3:fd:
1a:d4:b0:06:d3:28:9e:d5:cd:c5:2a:c5:4e:92:89:
94:fa:5b:60:2e:1f:bf:e1:01:48:7e:93:39:cc:ff:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:2C:56:42:D9:7E:E1:6E:41:71:1C:8E:4E:90:54:8A:66:20:87
X509v3 Authority Key Identifier:
keyid:BD:37:F1:D4:07:47:BE:6C:5F:5C:6B:A3:30:7D:F6:56:0A:B6:81:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vTfx1AdHvmxfXGujMH32Vgq2gaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91817E6/55740E70B3B311EAB198CE0DC4F9AE02/vTfx1AdHvmxfXGujMH32Vgq2gaM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:10:35:24:9f:59:67:a3:82:d4:e0:66:38:ac:39:7e:ab:37:
21:ca:40:36:45:cd:96:05:23:13:e2:fa:bf:9d:ab:84:a8:22:
72:08:10:c9:df:cd:b1:db:f6:df:3d:6c:8b:70:1f:56:df:55:
33:31:8e:e6:82:e0:34:34:6c:7f:ba:75:7f:02:4c:4d:e5:a5:
d6:03:ce:3a:5e:82:51:61:56:0c:7e:2c:cf:1e:db:fc:84:e9:
2c:7c:8f:38:1f:aa:0a:48:e9:c2:a7:a2:e2:e4:00:88:3c:3a:
7c:b1:22:f1:04:2e:aa:aa:e4:31:e3:74:ba:26:81:60:1a:7c:
a6:d7:ff:f7:8e:73:4b:77:52:26:40:bd:6b:f0:a8:44:56:1d:
bb:ab:7f:6f:83:e0:50:c2:13:23:6f:5b:d3:7f:0b:07:b6:08:
e3:40:6b:a0:03:6b:93:ff:5b:7b:29:e1:3c:7e:09:54:17:02:
9f:3c:1e:cf:10:e4:40:ae:4a:58:a2:1f:2c:be:ba:39:a3:ba:
5c:ad:44:1d:37:9c:55:4e:80:e2:68:69:d1:62:3e:06:de:b4:
6e:ed:ce:ff:01:13:6f:e0:13:6f:50:53:7d:4a:99:c0:6e:f2:
2c:d6:82:62:91:68:d4:60:03:4a:ad:42:d0:1b:19:33:43:26:
5f:b0:98:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:33:02 2026 by rpki-client