
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
File: VlIPoddulfCBm23dSWe0VQRphp0.mft (raw, json)
Hash identifier: mERshqzW1QlvYsNlm5p8fM3adpvC+LNRkd+GBX4Z2v8=
Subject key identifier: D0:83:65:E9:44:0E:9D:11:00:89:CE:69:9B:10:47:4D:4A:6D:2E:B8
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Certificate issuer: /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
Manifest number: 0145
Signing time: Thu 05 Nov 2026 06:17:05 +0000
Manifest this update: Thu 05 Nov 2026 06:17:04 +0000
Manifest next update: Thu 12 Nov 2026 06:17:04 +0000
Files and hashes: 1: VlIPoddulfCBm23dSWe0VQRphp0.crl (hash: lOFwU7aZXvMqtpEGj0Ps4fRClMvWmHFLrVn13MyC19Q=)
2: EE8CD88EEA5A11EF922B276DC4F9AE02.roa (hash: hBcnC5PFlnMmxlDxFJ5KaA+un9OP3sAitrTcxqtGxZY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 06:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Validity
Not Before: Nov 5 06:17:04 2026 GMT
Not After : Nov 12 06:17:04 2026 GMT
Subject: CN=6aec1f61-421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:0e:73:e6:71:65:8c:37:e6:a9:94:ec:80:
a8:69:2a:27:38:6a:f9:b9:20:75:30:2e:65:98:09:
62:32:e9:42:bf:5f:77:11:ba:88:aa:54:28:5e:39:
a3:6a:8a:8f:68:f6:54:96:23:1a:74:e8:f2:24:cf:
29:a7:71:c7:b7:bb:ec:db:65:d0:5e:51:42:11:3f:
a0:12:a4:19:f7:5d:0b:7a:7d:24:1e:7c:2c:8d:47:
45:f7:f4:95:8b:de:17:11:a7:99:ca:38:f7:8d:88:
9a:e5:c1:6a:3d:d3:ec:9a:3b:8f:6e:52:57:9d:6c:
93:89:00:00:75:62:68:8a:b0:56:83:81:95:83:83:
68:db:b5:21:aa:ba:5e:85:69:42:23:6a:90:f1:6a:
3b:bc:38:a7:4b:d7:bc:d1:65:d2:0e:52:d9:c9:a4:
9b:9a:c6:bf:44:78:57:06:ae:2c:36:54:f2:8a:d4:
e6:9c:f6:be:9a:22:bf:d2:59:b9:a5:98:b9:2c:80:
ad:06:8b:e3:a7:05:af:5b:17:6e:8a:22:a4:6f:ef:
ca:d1:2c:9f:4c:f6:dc:bc:eb:ab:80:d2:74:df:2f:
15:70:a9:b8:c6:64:d7:83:1e:ff:54:4b:43:29:39:
d4:bd:de:22:04:e9:34:6b:15:96:ca:40:4e:82:47:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:83:65:E9:44:0E:9D:11:00:89:CE:69:9B:10:47:4D:4A:6D:2E:B8
X509v3 Authority Key Identifier:
keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3c:84:81:e0:ac:d5:a4:21:b1:1a:11:f5:54:e4:42:4e:08:db:
17:96:55:68:28:b1:1a:07:94:24:6e:02:9d:60:21:39:d6:0e:
b5:79:fb:16:f7:a8:1c:aa:8e:29:bc:2c:21:b3:3c:96:f0:76:
64:35:0f:fc:65:0f:90:6c:b9:5c:78:53:35:59:ba:9c:9e:bb:
d0:6e:b2:ad:6a:27:7d:cb:c2:53:ec:e1:be:91:f8:02:61:96:
d5:a2:8a:c5:62:c6:90:a5:a0:b0:f0:fc:5c:37:4b:df:78:4d:
f3:2f:97:68:8b:7f:51:7a:45:de:f6:82:a2:0c:d9:aa:bf:b3:
47:07:9f:92:04:47:9a:35:3f:8d:67:a8:86:94:60:b2:9d:63:
48:ef:cf:1b:67:08:ac:4c:c8:f1:58:17:27:c8:71:ea:7a:85:
56:1f:8a:04:00:0c:45:73:be:59:5a:47:0e:11:fd:1b:39:4b:
81:f8:40:dc:61:e9:d4:b6:18:47:b7:2c:38:37:76:b9:42:f1:
e2:01:84:d0:ad:28:82:4a:3e:37:af:9c:b2:90:52:2f:42:49:
52:ae:93:d2:f7:dc:f1:36:f0:99:63:0b:5a:a9:f6:dd:ae:81:
1c:52:88:b7:c4:6e:08:7f:6b:a6:db:fa:06:d7:64:23:31:e4:
53:be:ea:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:31:12 2026 by rpki-client