
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
File: vxobyMAsIDYtD9n5K8AGoolejIA.mft (raw, json)
Hash identifier: Njyw3cUGDoJQTPNHxGY6MGRUszwZVVoda4KwKmhvvzU=
Subject key identifier: B4:D8:06:C3:49:06:1B:0F:1A:D2:51:A6:9D:17:EA:F8:0F:BB:64:87
Authority key identifier: BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
Certificate issuer: /CN=A91A423B/serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Certificate serial: 0898
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
Manifest number: 0890
Signing time: Sun 20 Sep 2026 20:36:38 +0000
Manifest this update: Sun 20 Sep 2026 20:36:38 +0000
Manifest next update: Sun 27 Sep 2026 20:36:38 +0000
Files and hashes: 1: vxobyMAsIDYtD9n5K8AGoolejIA.crl (hash: +rd7XRHRcWxuZUh1iEBJWACSe5+TGe/GFPSuYuYCZf8=)
2: ABD5003E079C11EBA7C04832C4F9AE02.roa (hash: 778EGlGgVJG4KhFCrh96xdUIIB8BVjBB6yGmPip2Cyc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A423B, serialNumber=BF1A1BC8C02C20362D0FD9F92BC006A2895E8C80
Validity
Not Before: Sep 20 20:36:38 2026 GMT
Not After : Sep 27 20:36:38 2026 GMT
Subject: CN=6ab043d6-e032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8b:3a:80:68:71:5f:3b:48:91:50:ca:12:86:
0a:e8:fc:e9:3b:47:3f:29:e5:e5:b9:f3:87:05:ad:
0f:e5:25:1e:bd:a8:f9:7b:3e:bf:59:d0:d8:4d:45:
03:94:52:09:fc:d4:ff:2e:f2:2e:d6:bb:95:76:b6:
36:51:7e:ed:28:b5:44:1d:24:ed:4e:fd:80:08:91:
c9:25:e4:96:7d:2a:90:d3:ec:72:80:c3:77:11:45:
3e:4d:ba:4e:3c:47:62:a9:dc:c8:29:be:64:f7:8d:
3d:2a:27:8b:5f:ba:aa:9b:01:f6:36:8c:95:f8:c6:
a9:ef:ae:35:42:57:3e:cf:16:3f:4d:72:ac:19:06:
93:f3:ff:35:3a:71:3f:eb:66:6b:f2:e7:d2:18:d4:
78:ff:97:77:bc:11:17:7c:4c:83:c4:5f:f8:f0:26:
c1:bd:b4:6a:4a:c0:36:09:a9:f7:8c:a0:26:a7:99:
6f:7d:6a:8d:ea:eb:4d:77:75:cb:97:57:9e:f0:9f:
81:3c:e6:a6:a8:e0:15:83:a5:46:1f:2d:72:22:f4:
f1:3b:5c:1b:4f:c3:aa:24:8c:8d:30:85:a3:97:f0:
8c:92:3b:0c:f8:ef:3c:0c:41:8b:38:f3:30:db:a0:
45:73:88:5c:13:3c:9f:78:57:f7:9d:4d:c9:91:5b:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D8:06:C3:49:06:1B:0F:1A:D2:51:A6:9D:17:EA:F8:0F:BB:64:87
X509v3 Authority Key Identifier:
keyid:BF:1A:1B:C8:C0:2C:20:36:2D:0F:D9:F9:2B:C0:06:A2:89:5E:8C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vxobyMAsIDYtD9n5K8AGoolejIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A423B/AF756B94079B11EBA4828031C4F9AE02/vxobyMAsIDYtD9n5K8AGoolejIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:14:68:e7:41:fc:20:e1:a1:7b:bf:aa:f9:ab:ab:3a:c0:
a0:78:9d:76:31:1c:6d:e6:09:bd:a4:ef:8d:28:62:3c:83:6d:
5e:1b:9c:66:91:c0:d3:2b:07:14:06:18:49:20:e7:0e:d0:fa:
bf:b6:1c:5a:91:7c:c8:53:e1:97:95:dc:19:36:5c:9f:47:d0:
ae:fa:74:23:36:84:5e:81:d5:8a:f8:dd:78:c5:3a:d5:3d:6a:
21:55:f0:9c:9d:cc:d3:24:bf:26:b6:b2:5e:93:cf:47:e4:2c:
be:ba:e6:60:a9:37:ac:2e:23:3f:ce:86:27:10:62:76:2c:4d:
09:42:b3:66:8e:74:f2:87:c4:fe:9c:81:55:a9:ec:1b:02:e0:
a5:98:2f:3c:8e:e2:b4:58:3d:83:dc:76:73:d0:4f:ee:8e:eb:
65:27:50:8e:4c:dc:f4:04:d8:6c:53:11:5f:1f:4b:12:f0:4c:
5d:81:bb:1d:30:b8:07:00:14:f6:c5:c0:5b:21:31:b8:4c:c7:
20:8f:d1:4b:fe:71:ba:94:b6:c4:b4:1b:8c:f9:1e:fa:73:97:
db:bf:0c:c1:0b:a5:67:6a:62:ec:38:76:00:a8:58:a1:f0:16:
f5:ac:e4:b3:26:4b:82:86:50:e5:ca:4b:ba:02:31:22:a0:19:
38:8e:d8:13
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQyM0IxMTAvBgNVBAUTKEJGMUExQkM4QzAyQzIwMzYyRDBGRDlGOTJCQzAwNkEy
ODk1RThDODAwHhcNMjYwOTIwMjAzNjM4WhcNMjYwOTI3MjAzNjM4WjAYMRYwFAYD
VQQDEw02YWIwNDNkNi1lMDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA44s6gGhxXztIkVDKEoYK6PzpO0c/KeXlufOHBa0P5SUevaj5ez6/WdDYTUUD
lFIJ/NT/LvIu1ruVdrY2UX7tKLVEHSTtTv2ACJHJJeSWfSqQ0+xygMN3EUU+TbpO
PEdiqdzIKb5k9409KieLX7qqmwH2NoyV+Map7641Qlc+zxY/TXKsGQaT8/81OnE/
62Zr8ufSGNR4/5d3vBEXfEyDxF/48CbBvbRqSsA2Can3jKAmp5lvfWqN6utNd3XL
l1ee8J+BPOamqOAVg6VGHy1yIvTxO1wbT8OqJIyNMIWjl/CMkjsM+O88DEGLOPMw
26BFc4hcEzyfeFf3nU3JkVuzHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLTYBsNJ
BhsPGtJRpp0X6vgPu2SHMB8GA1UdIwQYMBaAFL8aG8jALCA2LQ/Z+SvABqKJXoyA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDIzQi9BRjc1NkI5NDA3
OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lEWXREOW41SzhBR29vbGVq
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Z4b2J5TUFzSURZdEQ5bjVLOEFHb29sZWpJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDIzQi9BRjc1NkI5NDA3OUIxMUVCQTQ4MjgwMzFDNEY5QUUwMi92eG9ieU1Bc0lE
WXREOW41SzhBR29vbGVqSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO50UaOdB/CDhoXu/qvmrqzrAoHiddjEcbeYJvaTvjShiPINtXhucZpHA0ysH
FAYYSSDnDtD6v7YcWpF8yFPhl5XcGTZcn0fQrvp0IzaEXoHVivjdeMU61T1qIVXw
nJ3M0yS/JrayXpPPR+QsvrrmYKk3rC4jP86GJxBidixNCUKzZo508ofE/pyBVans
GwLgpZgvPI7itFg9g9x2c9BP7o7rZSdQjkzc9ATYbFMRXx9LEvBMXYG7HTC4BwAU
9sXAWyExuEzHII/RS/5xupS2xLQbjPke+nOX278MwQulZ2pi7Dh2AKhYofAW9azk
syZLgoZQ5cpLugIxIqAZOI7YEw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 04:10:36 2026 by rpki-client