
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier: qarYCujjwKLjeee9h5CgM04UqSpfkApuzPTFm7CB9Bs=
Subject key identifier: FE:9D:7F:90:04:FB:C6:5D:F9:E8:0C:54:50:C1:C3:C7:E8:20:EB:5D
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 022D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number: 021C
Signing time: Sat 13 Jun 2026 02:55:49 +0000
Manifest this update: Sat 13 Jun 2026 02:55:49 +0000
Manifest next update: Sat 20 Jun 2026 02:55:49 +0000
Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: lhevuBSxpzyYmvgEGkr7BbP61GnYSTSE0luZ42yAXEY=)
2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=)
3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 557 (0x22d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Jun 13 02:55:49 2026 GMT
Not After : Jun 20 02:55:49 2026 GMT
Subject: CN=6a2cc6b5-dbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:74:be:88:f5:ec:88:1d:f1:74:39:9f:d8:
d0:d6:6a:66:a1:42:39:13:86:01:bd:a2:fc:0f:6f:
d9:f8:67:f0:23:eb:b0:4c:aa:1d:46:ae:65:b2:0c:
59:e3:b2:c4:0a:be:cd:b3:24:61:ef:45:10:84:e9:
0d:ea:34:b3:ee:e8:4f:cc:12:1d:10:fd:dd:74:57:
6f:a8:5f:d0:3f:03:b2:bc:b6:95:d2:75:89:0a:68:
4a:d1:1c:09:2a:b5:9b:59:70:1a:67:9f:ef:72:0a:
44:14:dc:89:87:bc:3a:7e:88:95:63:57:28:5e:4a:
75:42:1a:d0:2d:b3:65:77:b1:34:48:c7:bf:ab:94:
e9:f9:06:01:68:bc:3d:6b:0b:51:a1:02:dc:0b:36:
07:6b:2c:9d:08:44:d9:5f:f3:fd:6b:2e:28:f3:22:
01:3f:ca:ed:10:c2:d8:1c:b5:3a:12:70:46:34:83:
4d:fb:f9:fb:64:dd:ce:2f:17:b6:b5:27:cc:a9:3b:
37:76:50:df:f6:97:d5:bf:45:7a:30:cb:db:73:2f:
13:de:77:93:9e:7e:22:8f:c1:a2:e9:88:61:20:f2:
b9:6a:9c:98:c0:42:23:11:fe:70:d4:bb:96:60:8f:
1c:7b:bc:5f:eb:84:31:99:f3:90:c2:2b:1c:70:6c:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9D:7F:90:04:FB:C6:5D:F9:E8:0C:54:50:C1:C3:C7:E8:20:EB:5D
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:19:3d:59:ae:39:b1:c6:22:e9:26:9e:62:98:15:a6:2c:a0:
f7:80:f6:63:79:17:c5:bd:8b:3e:5c:9a:d7:56:c4:18:19:86:
3b:e4:eb:da:85:5a:f0:7a:fe:71:38:d7:06:c4:75:db:f2:07:
2c:e3:4c:ad:54:77:27:4c:ce:dd:e8:9c:ad:da:14:7a:2f:d6:
9c:3f:50:9d:97:42:55:90:1b:b8:54:77:1c:9b:39:4f:27:96:
16:07:5f:6f:5b:ea:2d:72:f7:50:02:d7:d7:d1:7a:a2:fd:47:
81:3a:91:8e:3b:fb:55:13:cc:e7:ac:80:4c:64:76:79:c1:1a:
0a:82:da:1b:79:36:06:2c:04:5d:56:20:fd:85:45:21:19:bc:
1e:99:39:98:09:bb:87:0d:b1:a2:6b:e3:47:2c:a9:9e:2c:9c:
53:3b:aa:13:e3:81:62:06:40:3b:90:02:74:ee:69:df:f6:5a:
61:d8:37:51:44:23:03:46:29:0e:f6:e7:3d:e4:20:4d:c5:4a:
c5:dd:82:65:8c:d9:b3:85:b2:09:81:58:9c:0a:4d:b0:4b:67:
68:e0:73:9c:69:07:2a:60:ec:f0:d9:75:8e:63:5d:1f:70:a5:
47:ea:41:6c:30:1c:ab:8a:d4:57:59:10:ab:fb:e5:81:9c:c7:
4b:cf:fd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:01:43 2026 by rpki-client