
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
File: vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft (raw, json)
Hash identifier: UKDuw/U2Jxq5IUC5HZG6f3csYiZDir8DgBCUv7rLUHk=
Subject key identifier: 2F:E8:69:75:11:24:67:B7:3E:1E:04:30:2C:B7:1C:37:86:00:C6:1E
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Certificate issuer: /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial: 35DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
Manifest number: 359F
Signing time: Tue 28 Jul 2026 15:17:03 +0000
Manifest this update: Tue 28 Jul 2026 15:17:03 +0000
Manifest next update: Tue 04 Aug 2026 15:17:03 +0000
Files and hashes: 1: vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl (hash: hXtBTm6GgiK84YXvAO+lm2fM7X+9ciJV/8ZwtzjXl1k=)
2: 08347C420BFB11EDA31A0961C4F9AE02.roa (hash: PuiDctOuJlf4lt6A2dYZ1tgkERX2Xujv7L8tOvTc9eM=)
3: 21C0B7E23BD311F0B1BF6C56C4F9AE02.roa (hash: vtwMWBWJtSed875G1+wbpC+RKkrgpx2zfwNszIXKaRQ=)
4: 8E0F37D4AD9911EF8F5AF92EC4F9AE02.roa (hash: f1IGNhieFlad+lglHYXuxHBK/1cZW7IPzK8JCgEL25o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13787 (0x35db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Validity
Not Before: Jul 28 15:17:03 2026 GMT
Not After : Aug 4 15:17:03 2026 GMT
Subject: CN=6a68c7ef-cac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:45:16:a0:51:f2:d9:57:33:bc:a1:42:5e:
d9:cc:2c:89:f8:27:12:b6:73:2d:29:68:72:01:f4:
ac:06:e7:11:98:4d:93:22:dc:17:21:73:6d:e1:9f:
8f:25:f9:27:a5:3c:5f:9c:1c:e7:8b:2f:ed:ca:23:
db:cd:c3:24:10:76:5f:da:ff:2e:0a:86:78:fe:12:
b0:9d:77:2c:15:8d:35:77:af:85:50:c0:14:c9:e4:
f8:82:f6:0d:fb:dc:f4:d9:eb:e1:b4:42:3a:5b:03:
ae:00:5f:6c:c5:bb:11:f7:21:af:d4:af:81:ac:20:
fa:92:c3:a7:1b:78:58:16:f4:d2:cc:d5:c5:06:b0:
6d:89:c3:ad:d7:f1:58:c0:7f:9f:e8:4b:45:04:75:
38:c9:7b:1c:56:c9:fb:d8:47:34:46:e1:cf:e1:b7:
4f:b0:6d:5c:83:d1:9c:8c:25:60:f0:d6:0b:18:76:
28:ab:41:fd:d8:eb:f9:ac:e8:35:38:9f:2e:b5:2e:
16:bd:31:51:65:be:20:5a:d4:96:d3:7e:fa:21:97:
28:d8:d5:04:37:ae:37:cf:e0:c3:78:12:7d:29:eb:
f7:6f:e3:40:ca:ae:19:b6:4b:84:88:8e:54:4b:12:
8a:07:ca:3e:17:88:af:a1:5e:4a:7f:cc:5b:6d:7a:
f8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:69:75:11:24:67:B7:3E:1E:04:30:2C:B7:1C:37:86:00:C6:1E
X509v3 Authority Key Identifier:
keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:1e:b6:6c:74:4a:17:df:ef:82:58:1b:57:0d:35:fd:96:f3:
d6:b9:eb:14:a4:da:81:f8:a6:1d:39:c5:0e:c6:3f:98:15:c1:
ce:b5:1c:12:73:d7:4e:37:83:9a:6c:c5:ca:af:55:8f:d6:e7:
da:d5:99:60:77:7b:06:c5:a2:4c:1d:1d:ec:41:04:94:52:e6:
4d:c5:fa:88:6e:27:f2:21:d2:1b:00:c2:0f:6b:74:9d:f3:e6:
0e:d0:9c:4a:b5:28:51:61:ee:3d:c4:03:1a:42:70:10:61:64:
71:e8:53:21:ae:c8:9c:a6:6f:e5:50:bc:15:54:b8:bd:23:f8:
74:2c:2f:91:3d:2c:7d:ba:b7:fa:1a:9a:f7:30:38:b9:53:43:
d2:82:c5:04:f6:0c:d2:ab:c1:8e:ef:91:98:e3:f1:28:58:7e:
8f:1d:88:1d:3c:68:42:8d:9d:eb:27:f1:74:2a:01:44:43:1c:
22:41:06:32:50:8f:41:3b:03:95:76:4a:22:54:34:15:54:78:
17:97:7d:54:c1:7e:59:35:a4:29:a4:23:e4:56:d0:47:c3:87:
41:46:d1:0a:e8:af:67:f9:33:59:60:37:87:43:53:a1:13:06:
3e:11:b6:65:2b:b9:f8:26:47:7f:cc:8f:14:dc:e9:f6:e6:75:
9d:2d:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:18:10 2026 by rpki-client