
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
File: vKs-dvhO1DdC8qCBJCcI55nOG18.mft (raw, json)
Hash identifier: KlcE+Yu/LVk6wu8UpVYe2nAwgveI02DD1r3bJvEx+sM=
Subject key identifier: D6:8C:93:58:51:D8:F3:30:1F:D1:2B:D7:F6:3D:85:FB:2F:F5:41:6E
Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Certificate serial: 0181
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
Manifest number: 016B
Signing time: Sun 01 Mar 2026 06:00:49 +0000
Manifest this update: Sun 01 Mar 2026 06:00:49 +0000
Manifest next update: Sun 08 Mar 2026 06:00:49 +0000
Files and hashes: 1: vKs-dvhO1DdC8qCBJCcI55nOG18.crl (hash: aPcoSaHBwsqBcsPIlp5LUoUWfZ15ncaT93LDwgWKTBI=)
2: 222F2952038511EFAF036327C4F9AE02.roa (hash: 0POds3yRjM0RD6yJRDt5kjZrzEVN1RcsA2tdedecI4c=)
3: E08658208D2D11F09327643FC4F9AE02.roa (hash: 41FC6Qh9FHv4UtlaWBSLbf5ObxYVTSL2scuznbl1Qds=)
4: A0AD48EA083011EF82AFFD44C4F9AE02.roa (hash: E2oXK+nP7XuyH0hDSL1uq1DEWcq+1W48Rez3w3+1ppw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 385 (0x181)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F
Validity
Not Before: Mar 1 06:00:49 2026 GMT
Not After : Mar 8 06:00:49 2026 GMT
Subject: CN=69a3d611-77f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:c3:84:8e:51:de:4a:a4:85:de:bb:70:18:
42:dc:5f:49:72:72:c5:a3:be:41:19:ca:1b:b1:64:
51:ae:6a:0c:f1:56:03:dc:4f:cc:a8:c0:8c:63:07:
d0:05:59:6c:09:b2:69:6c:22:67:e3:76:b0:8c:37:
16:89:fc:29:b7:9a:9d:16:1c:f8:90:57:95:19:f9:
1b:43:31:ab:09:44:3e:59:1e:ae:77:2c:e8:9e:24:
0e:44:8b:d9:93:24:7e:94:7f:ae:5f:32:de:2a:ba:
2b:d4:3c:2d:dc:76:b0:9e:74:34:6f:5c:67:43:a5:
6f:5c:74:99:9f:1c:eb:eb:17:fa:f6:86:78:77:16:
0a:4d:15:dc:ef:24:90:89:c1:6f:3e:6b:58:f8:2b:
a8:50:2a:03:6d:2c:0e:98:56:ab:cf:bd:79:c0:2e:
d0:14:41:77:75:32:4e:1e:32:c5:e4:62:62:61:2c:
75:d6:cb:50:89:ff:fb:7b:65:86:86:bb:d2:86:54:
1e:0b:2d:da:d4:52:31:83:a5:c6:09:b1:1f:52:65:
5e:36:72:61:2a:b4:75:a3:f2:4a:ea:9a:88:44:d4:
b6:16:54:b8:09:23:0c:0d:26:26:e4:9b:92:66:ba:
72:3e:1d:15:0a:0d:73:c4:5f:0b:95:bc:58:ca:14:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8C:93:58:51:D8:F3:30:1F:D1:2B:D7:F6:3D:85:FB:2F:F5:41:6E
X509v3 Authority Key Identifier:
keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9e:e8:0a:03:00:8c:47:81:10:5f:86:1e:67:9c:b3:fb:31:
cf:06:54:41:58:56:fb:44:bb:3e:91:56:fa:12:d5:23:87:ac:
e3:31:76:04:46:99:ec:16:c3:25:a3:f8:bc:b0:13:46:46:a7:
ba:b8:6c:f0:6e:11:42:8f:ba:7d:66:25:b5:22:89:fb:cd:0e:
52:b4:7c:e0:c6:a4:a2:7d:35:35:55:4e:6d:bd:f8:5f:2a:6e:
da:b5:67:bb:36:66:a6:e1:db:6d:bb:b5:a1:22:d2:4c:97:4f:
38:22:f7:48:9e:25:4b:4d:de:20:eb:77:1f:7b:62:19:d4:63:
76:28:dc:66:67:64:53:45:eb:cf:85:33:85:19:9d:3d:b1:22:
65:43:34:d6:cd:07:e6:da:e4:6d:c6:d0:6e:37:37:c9:f2:5a:
5e:ae:60:b6:59:4e:fd:d7:16:66:73:be:8d:fc:91:ac:a0:97:
39:40:d0:d5:ad:70:1e:b7:bf:cb:52:eb:4e:07:78:c3:8b:60:
06:9b:b5:5d:79:33:ab:1f:0c:d7:dc:f9:b0:4d:bf:f0:52:e1:
4e:e8:f5:b8:1e:32:e8:8a:e0:66:b5:f5:8e:09:09:c2:b0:a7:
0c:fc:7c:ee:42:40:fd:81:21:bb:d1:a3:1b:76:48:77:7e:41:
83:55:45:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:23:29 2026 by rpki-client