
$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
File: VQWhoodm2zGCLEYVhuaO3fKnk_o.mft (raw, json)
Hash identifier: /R1c1EyrofFYfkUQZ8kLsZWpCFbl7jilOLZJeT1AGk0=
Subject key identifier: 5B:08:28:DF:28:6C:B1:E3:1B:88:34:27:F1:B9:EC:04:48:40:06:C7
Authority key identifier: 55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
Certificate issuer: /CN=A91850AD/serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
Manifest number: 016C
Signing time: Wed 29 Jul 2026 06:08:40 +0000
Manifest this update: Wed 29 Jul 2026 06:08:40 +0000
Manifest next update: Wed 05 Aug 2026 06:08:40 +0000
Files and hashes: 1: VQWhoodm2zGCLEYVhuaO3fKnk_o.crl (hash: y8u7kkAjsdBCVby54TkGykTQweJfyTslEQqPtsxz3/0=)
2: 95737270643711EFBCD1344AC4F9AE02.roa (hash: FhlQPzHqzyHEsTCRhj+QxZMQM2lLAuEx3Q/b46+pZ5E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91850AD, serialNumber=5505A1A28766DB31822C461586E68EDDF2A793FA
Validity
Not Before: Jul 29 06:08:40 2026 GMT
Not After : Aug 5 06:08:40 2026 GMT
Subject: CN=6a6998e8-4ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:68:5b:e2:49:83:df:ba:1a:79:ea:a4:c7:
a8:b5:53:10:92:3b:7c:8d:ed:18:a2:7c:b8:c2:dd:
70:fb:1d:56:e7:bf:5f:d9:42:f4:41:ea:de:07:82:
d8:4f:8b:4c:73:0a:8e:c2:f1:27:f7:94:61:be:7d:
e0:f8:0e:11:9f:9d:50:d9:91:9e:81:57:42:f9:6d:
93:89:13:d9:50:0f:d3:15:40:d5:a3:1b:f9:a5:30:
7e:08:e0:77:2a:8f:32:c0:6f:25:58:02:cf:b9:32:
e7:7b:85:2e:67:aa:bb:da:db:15:03:8f:7d:eb:a3:
56:ce:47:69:77:27:31:41:3e:9d:fb:af:1b:06:57:
1b:03:c1:52:74:63:42:70:ec:3a:ec:31:83:ed:19:
3a:3b:c8:74:96:a1:9d:ec:83:f4:fa:d7:87:db:6e:
de:7d:f0:6c:f7:f8:00:a3:7f:26:a6:64:88:8b:6e:
2d:66:24:95:83:a1:9c:3d:0f:9a:00:5b:37:ea:0d:
da:29:a1:a1:01:17:19:71:33:4f:3a:50:22:80:a6:
38:fb:2e:ea:0a:46:52:da:15:09:8a:f5:c5:b3:4a:
8f:b2:ca:f7:87:d5:f3:e4:d7:89:32:fc:b7:39:32:
13:11:70:d7:43:7b:83:c7:79:bc:fd:c9:75:74:c7:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:28:DF:28:6C:B1:E3:1B:88:34:27:F1:B9:EC:04:48:40:06:C7
X509v3 Authority Key Identifier:
keyid:55:05:A1:A2:87:66:DB:31:82:2C:46:15:86:E6:8E:DD:F2:A7:93:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQWhoodm2zGCLEYVhuaO3fKnk_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/6A0AC802643411EF842FC620C4F9AE02/VQWhoodm2zGCLEYVhuaO3fKnk_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d0:da:e6:c3:ad:b5:5f:ac:9b:ac:4d:e1:5c:6d:12:25:d1:
60:c8:e3:3c:b9:ff:92:66:56:d4:3c:90:01:be:29:e0:c5:bd:
a9:5f:4b:58:26:79:9e:9e:35:b6:88:1c:64:31:7a:49:b0:f9:
ff:d0:b1:08:29:12:5e:11:2e:85:0f:c0:17:d8:41:5d:68:c6:
81:dd:34:6c:d9:4b:d8:92:1f:11:23:58:63:7c:1d:a7:e2:93:
76:c2:60:d3:00:2e:a7:10:30:b0:8b:9f:bf:16:03:9b:d9:b7:
2f:8b:96:96:3f:9b:4d:d0:e7:c3:64:dd:5e:83:8e:57:0a:1a:
e1:20:df:b8:4c:b6:37:ed:1e:f6:0a:ec:a2:d9:96:d5:56:67:
4a:9c:77:81:7e:7a:43:aa:ee:58:91:94:e6:7d:ea:81:57:98:
5a:53:88:14:b7:fd:3e:1c:1e:6b:2c:9a:15:e5:f5:64:7e:fb:
f8:e0:27:58:2c:4b:6c:a0:7e:55:f5:e3:35:ba:ca:c4:68:bf:
03:8c:bd:6d:72:cd:77:09:d4:aa:c3:fc:74:5c:09:43:db:50:
29:16:fb:97:a1:22:51:52:63:bc:44:14:2f:7f:ce:3a:59:a0:
e5:84:b3:2d:5c:18:a7:cb:8f:e7:09:f6:5b:94:d5:55:1a:a6:
f9:ea:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:57 2026 by rpki-client