
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier: UfTQY528618TIcb7HDX7Xg4K+iIQTtTKS9Rd4MFQFqI=
Subject key identifier: 93:7D:C5:7E:B7:AF:1F:A5:4D:34:F6:9F:53:E1:AC:3D:27:78:04:50
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number: 0200
Signing time: Fri 17 Apr 2026 02:56:39 +0000
Manifest this update: Fri 17 Apr 2026 02:56:38 +0000
Manifest next update: Fri 24 Apr 2026 02:56:38 +0000
Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: BeUwm9dMXEZIWM0yA5zOzKO4qcE/isM7wFrY9RjRtA0=)
2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=)
3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:56:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Apr 17 02:56:38 2026 GMT
Not After : Apr 24 02:56:38 2026 GMT
Subject: CN=69e1a167-6663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:b6:98:8d:44:6e:f5:fb:22:b6:38:e4:6e:
5c:37:cf:86:89:6a:8c:b5:9f:ea:b6:8c:35:35:20:
16:97:c6:a2:e3:75:9a:88:1a:ba:ba:21:46:49:79:
c3:e9:22:57:0f:91:d4:c0:40:08:29:00:7c:d7:9b:
93:04:59:3a:51:a5:79:97:f6:fd:39:91:b4:1c:b8:
28:57:6b:ef:91:c5:45:29:01:92:b0:62:1f:c2:fa:
ad:42:1d:d1:2d:9b:3c:a7:0a:ef:bb:08:17:84:88:
fa:58:f3:4e:bd:92:39:10:37:b7:1c:7a:cf:15:8b:
bb:70:31:4b:32:76:be:06:98:2e:56:5b:49:51:72:
df:d7:f3:15:78:a4:1e:97:d0:2f:d7:ed:4a:fe:b6:
dd:97:77:05:59:65:4a:c3:2d:c0:45:f5:59:ee:13:
d3:51:dc:34:0d:80:e1:08:ae:05:35:60:9d:ca:81:
64:0a:eb:0d:25:6d:dd:1c:64:2e:f5:e2:e4:5f:58:
37:a9:44:18:69:f7:7f:71:fc:2e:a8:c7:87:92:de:
29:ac:28:3e:77:e6:67:9b:11:34:84:7f:b1:c4:97:
a9:24:d3:7e:84:f2:26:ae:85:16:ae:7b:9f:77:36:
84:b6:a3:e4:47:b2:0f:ce:97:d9:a5:d9:00:a5:24:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:C5:7E:B7:AF:1F:A5:4D:34:F6:9F:53:E1:AC:3D:27:78:04:50
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:52:49:4f:26:9a:8d:05:85:42:39:1c:2a:57:3d:24:21:75:
46:a3:dc:33:99:4e:f6:f6:ae:0b:a2:7f:8a:64:e9:c9:41:39:
fc:bc:2b:f0:a5:b6:c3:5a:1d:d3:b3:5d:68:2c:a9:16:3d:b8:
00:df:20:86:d7:1e:3a:0b:02:7a:ff:9e:a4:cc:9b:ab:39:09:
82:29:00:ee:d5:e5:dd:40:d5:ba:c2:50:6c:bf:ed:47:f9:98:
98:a1:ab:00:80:9d:02:2a:99:08:b0:c3:0c:f3:86:c1:2d:11:
29:14:dc:b6:9a:ea:8e:c2:36:ee:8b:b6:de:a6:86:3a:f7:f3:
3e:b1:4d:1c:51:41:1b:56:15:82:bd:4b:de:6f:cd:45:26:20:
82:75:1a:0f:9c:94:a0:75:b8:9c:db:1f:3b:e6:1c:c9:20:46:
0f:4c:07:a6:4b:06:97:0f:f7:a5:54:db:97:4d:9c:fe:45:da:
59:7f:ff:e7:c4:c8:bf:31:df:b2:56:f8:11:51:89:91:56:1e:
c1:c3:5f:d6:4b:41:f8:ba:d8:46:3e:87:d8:c9:2b:77:75:a7:
3f:4a:e6:b0:26:0a:75:97:55:ef:b9:10:6c:43:86:3a:3e:a1:
df:44:7d:25:79:38:2a:65:8e:52:93:58:f2:d2:04:b9:da:b3:
45:36:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:02 2026 by rpki-client