
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier: qTqYLdx320bvybF9+txjZ3QFmnIyMGG4r3BiOHwdQgI=
Subject key identifier: 96:AE:B0:0E:47:73:A6:55:63:66:E1:79:34:1F:17:A3:A9:99:0F:D0
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 359C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number: 3565
Signing time: Thu 16 Apr 2026 14:37:42 +0000
Manifest this update: Thu 16 Apr 2026 14:37:42 +0000
Manifest next update: Thu 23 Apr 2026 14:37:42 +0000
Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: V3KdovZubeuknN8IFaUMt5sm2CpnOnN/C/wyRtDPvmE=)
2: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: jSyladWwIPcLDhRoJV9EkcXRD2yn45YjwYV1xLB7tkA=)
3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: ei/pNFfYuuTuQw4Uvc9PFgEYvRb+k6YfbWf/kyJWsGU=)
4: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: bKCsW0HOObswpaBTmtOg5un1FXNgtKQBykPxtUBttFM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 14:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13724 (0x359c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Apr 16 14:37:42 2026 GMT
Not After : Apr 23 14:37:42 2026 GMT
Subject: CN=69e0f436-0422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:00:57:00:47:db:b8:58:68:3e:01:5f:06:55:
d4:23:03:c9:b0:d0:d0:4d:6c:9f:45:e0:69:22:3d:
26:87:b8:00:1d:52:8d:1f:42:41:17:7d:42:a7:0d:
59:5d:92:88:0d:9b:d9:28:c4:f3:6b:1b:c5:94:54:
f2:20:1a:04:ba:b4:aa:d3:af:6c:2b:ea:f1:5e:b8:
ba:b6:bf:1c:bc:00:93:ab:60:56:56:b6:68:c6:75:
16:4f:b8:ca:42:43:6e:8c:35:c7:a1:a4:0f:8a:51:
60:22:63:46:1b:d5:47:a4:8c:8c:a2:48:2d:ba:75:
ff:4e:ac:30:1c:51:17:93:28:d2:3b:7e:36:03:e7:
16:7d:00:b0:6f:6c:9f:72:37:8d:39:10:7c:17:ef:
92:2d:e9:39:3c:b6:65:ae:3b:75:02:f4:e1:2d:10:
0f:dd:60:2f:50:b4:f5:60:d5:34:0c:dd:64:1f:5c:
a8:82:0a:36:12:f6:b2:20:5a:13:e4:41:6a:4d:8c:
cc:be:62:27:3d:ba:90:40:23:38:dd:a7:1b:c0:a7:
3a:85:c6:72:41:9b:35:02:65:b0:88:b8:e0:15:ed:
06:63:ee:52:37:64:cc:6a:13:2b:84:32:f7:5f:1f:
1b:71:9a:42:23:37:cf:e4:b8:23:d4:52:81:2e:32:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AE:B0:0E:47:73:A6:55:63:66:E1:79:34:1F:17:A3:A9:99:0F:D0
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:90:ef:a0:04:4e:5b:7c:0d:35:51:9b:9f:89:ba:79:44:
4b:3f:47:14:50:d2:71:4c:73:c3:17:04:eb:aa:4f:0b:15:68:
db:ad:03:4c:a8:8e:2b:c7:d9:3a:ec:0b:bc:95:df:ce:5c:d3:
39:3d:4f:77:b2:b9:26:7e:d5:65:89:1c:71:5d:ea:03:56:81:
ab:6f:38:8c:6d:4c:a8:57:65:64:93:f4:be:0e:d4:91:30:79:
5c:8c:00:5b:29:9e:8c:a0:38:e8:b5:0b:10:ba:a5:53:90:e6:
23:de:77:79:99:4d:fe:ad:1f:c7:2b:80:6c:d2:fa:9b:08:e3:
cd:02:63:15:38:8e:00:8b:24:e3:99:9b:47:f7:b4:c9:86:1a:
dc:08:ef:03:31:8b:06:dc:2b:27:30:59:cf:9d:d8:3d:6d:34:
a1:2c:2a:78:af:a0:07:39:57:fe:fb:8b:cd:ce:39:a9:90:7b:
39:13:3e:df:45:00:1c:96:be:41:e8:26:a0:7c:0b:e5:5f:aa:
57:9d:59:e4:07:f9:46:b9:86:b3:df:58:eb:d9:d4:15:c9:38:
05:88:8a:e2:21:6a:05:9d:a0:2d:f2:74:dc:3c:af:18:82:46:
2f:91:1e:66:b6:49:28:10:cf:c8:f6:0d:12:e6:50:0b:8e:a5:
e3:d1:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:59 2026 by rpki-client