
$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
File: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft (raw, json)
Hash identifier: A4OGVin3MIiIBiIf+9nZQjUDgslJZt1Ep5XHn9ibGtY=
Subject key identifier: FD:B8:20:F2:B3:87:19:3E:4A:FE:44:3D:4E:AB:00:BF:E2:44:57:C5
Authority key identifier: BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
Certificate issuer: /CN=A91862F9/serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
Manifest number: 0232
Signing time: Mon 27 Jul 2026 04:13:45 +0000
Manifest this update: Mon 27 Jul 2026 04:13:44 +0000
Manifest next update: Mon 03 Aug 2026 04:13:44 +0000
Files and hashes: 1: vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl (hash: 1n/tbCCconl9trzsXbSRszclydr23NIgam2RHPsJTO8=)
2: EF15AC2A9EB611F09A08B07EC4F9AE02.roa (hash: 85UD2/db2JNfOGlb39R7ySUL/Ipyzf/y8vjlGn3oMtE=)
3: 46E49D1CE79811EEA89C5E56C4F9AE02.roa (hash: ZP+Fsk2FtcDycpwS+m0D9syGyr7ezG1ogPe4OjBVvG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862F9, serialNumber=BE6341A7CC0CA0F6C1A15E0466EC7155B8283C9D
Validity
Not Before: Jul 27 04:13:44 2026 GMT
Not After : Aug 3 04:13:44 2026 GMT
Subject: CN=6a66daf8-fff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:38:d2:22:13:37:c5:6b:b6:92:ff:5e:96:
96:07:72:bf:14:38:6d:cf:b2:24:24:36:ee:d5:36:
45:26:f4:d7:16:98:d2:7c:e0:df:ed:ec:91:60:ac:
6a:01:27:1a:fd:fd:ff:44:d5:b9:2b:0a:01:be:ef:
a0:71:6d:84:ec:83:12:49:f2:92:9d:48:b7:07:71:
f0:a9:71:ee:bf:6d:19:54:20:1d:c6:60:10:b5:15:
8c:ef:29:07:49:31:e9:02:8c:d6:53:26:cd:b3:b9:
75:97:b0:8c:f8:67:7a:be:e5:a8:45:7c:c8:21:80:
8f:fc:a9:6b:56:0d:05:d3:02:83:2c:b3:c0:bc:65:
d7:ad:87:f5:13:3d:7a:c6:db:ca:9b:9f:29:58:4e:
a2:b7:ef:33:02:e3:b8:05:52:2b:57:7a:2d:12:b8:
b7:ad:cb:20:b2:a6:82:d2:ad:12:e4:ff:94:b8:21:
fa:67:07:b9:9f:eb:e1:95:8a:16:60:cc:7a:89:01:
4c:39:7b:d1:ac:8c:8a:8a:01:4a:10:c0:92:d4:9f:
12:13:60:43:eb:a4:86:e1:b4:3c:dd:d3:7c:78:50:
5f:ea:96:6d:42:ad:c2:d4:5e:80:bd:12:04:57:78:
a6:bf:a8:04:e2:09:5f:e2:d9:b7:02:9b:b4:c7:78:
8b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:20:F2:B3:87:19:3E:4A:FE:44:3D:4E:AB:00:BF:E2:44:57:C5
X509v3 Authority Key Identifier:
keyid:BE:63:41:A7:CC:0C:A0:F6:C1:A1:5E:04:66:EC:71:55:B8:28:3C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F9/4E609A723B7D11EE9656FC64C4F9AE02/vmNBp8wMoPbBoV4EZuxxVbgoPJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:de:ef:17:73:19:a3:3d:e3:35:ea:8c:11:ec:33:c8:24:62:
f0:50:c5:80:d1:82:48:3e:17:60:81:ca:11:a1:ad:66:47:37:
78:90:73:50:75:e6:c7:fd:60:7a:1e:2f:70:8d:4c:be:89:92:
b9:db:3f:ff:7e:85:28:d2:63:8e:1c:a1:7b:7b:61:5e:a9:e7:
8b:6c:cf:98:7a:f4:64:92:ea:79:0b:be:3b:a7:86:4f:d1:00:
9e:c4:1c:8a:15:09:15:73:0a:64:f7:bd:ac:fd:58:be:fa:b9:
dd:aa:e5:85:30:ad:eb:1d:c8:ea:75:0b:ca:7b:66:73:b3:e1:
84:39:34:52:3d:7a:c6:d2:91:03:19:ca:9f:1d:8c:29:7a:4c:
55:bf:53:33:90:4a:42:c1:dd:ba:9c:89:78:d5:43:1e:d2:48:
51:02:0f:52:d4:8a:fa:36:b7:fc:6f:2a:a7:06:86:42:82:e5:
6b:a9:78:52:24:b0:81:d8:94:da:00:38:d0:f6:08:49:ab:82:
f7:e8:50:2d:b3:e1:f9:76:e6:50:9e:48:db:5b:b4:28:35:19:
5e:ab:dd:3a:ef:cd:ea:01:51:af:1a:d1:25:31:e7:f2:2e:19:
1c:75:e6:e6:fe:12:5c:e2:c3:32:11:ce:c9:a4:a6:85:00:a1:
05:ae:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:38 2026 by rpki-client