
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json)
Hash identifier: k9saxVbN5I+ki4fuoQmM9wowOY311rSgYeEbil3d3U0=
Subject key identifier: 8E:98:59:63:57:6D:B4:9F:D8:00:7A:11:CB:F0:AE:E0:FB:8A:A3:F0
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
Manifest number: E0
Signing time: Sun 19 Apr 2026 06:12:16 +0000
Manifest this update: Sun 19 Apr 2026 06:12:15 +0000
Manifest next update: Sun 26 Apr 2026 06:12:15 +0000
Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: rxz0OF2UIFdNWDygkQyObLedcILz3rs9IygmmuvY77M=)
2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: hBcnC5PFlnMmxlDxFJ5KaA+un9OP3sAitrTcxqtGxZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 26 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Validity
Not Before: Apr 19 06:12:15 2026 GMT
Not After : Apr 26 06:12:15 2026 GMT
Subject: CN=69e47240-4a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:45:fb:0e:af:4d:13:7e:8e:f6:cd:ff:2a:
03:7d:21:f3:2c:6e:9b:da:27:22:8e:3d:c1:8e:d6:
3a:ac:bc:bf:d4:0d:bc:de:92:23:22:2b:c7:ae:9a:
75:83:09:36:f6:9b:39:ad:f6:42:27:a0:72:88:da:
c4:ae:20:44:7f:9d:0d:97:63:90:2c:24:7c:a8:89:
bb:b0:61:81:b6:a5:f2:62:66:33:a2:3f:e0:b9:00:
7d:79:f0:13:81:2c:15:0e:9f:d8:2e:36:81:58:3d:
6f:6b:73:fe:b6:3e:3e:b4:ce:1e:1c:8b:26:1f:21:
fc:13:8a:fc:2a:88:c3:0e:ae:30:6c:bf:d7:6b:64:
1e:33:f1:95:e0:60:ec:af:b7:ca:52:74:ed:9b:01:
a8:60:85:4d:6b:de:e7:a7:d2:0a:10:e3:29:02:4b:
9f:dd:a0:d1:5f:69:69:ab:44:2c:ce:2e:5d:c3:3f:
cc:93:8b:e4:cc:1b:21:2f:dc:5c:ae:59:1e:96:2b:
2c:a9:b7:dc:a3:61:91:05:36:8c:0a:7e:13:1d:e3:
6f:1b:0a:2e:6f:45:78:df:03:f1:88:d7:5e:f6:ef:
5e:4e:71:2b:cc:97:60:83:dd:36:6f:89:44:d8:66:
08:f3:ca:b7:b0:b3:2d:74:ee:5e:fb:36:3d:67:47:
e1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:98:59:63:57:6D:B4:9F:D8:00:7A:11:CB:F0:AE:E0:FB:8A:A3:F0
X509v3 Authority Key Identifier:
keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:35:46:68:8e:b0:24:42:99:79:f2:33:d6:3e:2a:23:7c:83:
75:2a:84:f5:dd:89:84:3f:4a:7e:6d:03:7b:49:81:af:fa:b0:
49:05:ec:ae:c2:d6:f1:ee:9c:e3:6e:3d:7b:9d:06:71:3c:91:
95:43:57:56:f9:8c:c7:2e:8e:fc:f7:bc:6e:52:c0:8c:09:8f:
48:97:9d:9c:f5:89:5e:fe:64:fe:9e:68:5b:0e:7a:59:1d:2f:
46:8b:13:1f:bc:2d:80:bf:27:5b:76:de:76:77:29:d3:b2:65:
94:ae:2b:b3:a5:11:61:30:b5:ea:3a:fd:e6:b1:5d:b6:6c:83:
c5:27:60:8f:e0:28:51:5d:eb:28:25:36:9e:6e:ae:e3:f2:3f:
5c:07:8f:ee:2d:86:9d:80:82:2b:be:6d:3b:a3:f8:32:05:9c:
d1:27:b4:76:f0:55:78:63:19:42:03:eb:89:de:b5:f8:50:14:
94:57:72:79:34:39:bf:04:51:82:81:60:fa:98:59:0f:e2:95:
17:23:ab:7b:fb:50:61:86:56:9c:ff:53:e5:86:f9:c2:5b:23:
50:ea:06:6e:93:2d:82:15:d7:5e:f8:6e:f2:21:c4:b1:dc:ab:
36:d3:bf:2b:9d:ed:7f:58:78:96:7b:b6:96:11:64:6e:f0:a5:
88:e3:71:19
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkxQ0IxMTAvBgNVBAUTKDU2NTIwRkExRDc2RTk1RjA4MTlCNkRERDQ5NjdCNDU1
MDQ2OTg2OUQwHhcNMjYwNDE5MDYxMjE1WhcNMjYwNDI2MDYxMjE1WjAYMRYwFAYD
VQQDEw02OWU0NzI0MC00YTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zdF+w6vTRN+jvbN/yoDfSHzLG6b2icijj3BjtY6rLy/1A283pIjIivHrpp1
gwk29ps5rfZCJ6ByiNrEriBEf50Nl2OQLCR8qIm7sGGBtqXyYmYzoj/guQB9efAT
gSwVDp/YLjaBWD1va3P+tj4+tM4eHIsmHyH8E4r8KojDDq4wbL/Xa2QeM/GV4GDs
r7fKUnTtmwGoYIVNa97np9IKEOMpAkuf3aDRX2lpq0Qszi5dwz/Mk4vkzBshL9xc
rlkelissqbfco2GRBTaMCn4THeNvGwoub0V43wPxiNde9u9eTnErzJdgg902b4lE
2GYI88q3sLMtdO5e+zY9Z0fh3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6YWWNX
bbSf2AB6EcvwruD7iqPwMB8GA1UdIwQYMBaAFFZSD6HXbpXwgZtt3UlntFUEaYad
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFDQi81QjZGQTM2MEVB
NUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxmQ0JtMjNkU1dlMFZRUnBo
cDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZsSVBvZGR1bGZDQm0yM2RTV2UwVlFScGhwMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTFDQi81QjZGQTM2MEVBNUExMUVGQjg0QUU0NjhDNEY5QUUwMi9WbElQb2RkdWxm
Q0JtMjNkU1dlMFZRUnBocDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXzVGaI6wJEKZefIz1j4qI3yDdSqE9d2JhD9Kfm0De0mBr/qwSQXsrsLW8e6c
4249e50GcTyRlUNXVvmMxy6O/Pe8blLAjAmPSJednPWJXv5k/p5oWw56WR0vRosT
H7wtgL8nW3bedncp07JllK4rs6URYTC16jr95rFdtmyDxSdgj+AoUV3rKCU2nm6u
4/I/XAeP7i2GnYCCK75tO6P4MgWc0Se0dvBVeGMZQgPrid61+FAUlFdyeTQ5vwRR
goFg+phZD+KVFyOre/tQYYZWnP9T5Yb5wlsjUOoGbpMtghXXXvhu8iHEsdyrNtO/
K53tf1h4lnu2lhFkbvCliONxGQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:48:56 2026 by rpki-client