
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
File: Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft (raw, json)
Hash identifier: Tkp/Fna2o7WQr1PyCmtLe4M38SmRmF87vOL44YfuZH8=
Subject key identifier: 41:54:CD:20:B1:47:85:47:C0:E9:04:80:35:4D:29:7D:4A:0A:FD:86
Authority key identifier: 56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
Certificate issuer: /CN=A91ADB98/serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Certificate serial: 02A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
Manifest number: 028F
Signing time: Sun 01 Mar 2026 23:47:12 +0000
Manifest this update: Sun 01 Mar 2026 23:47:10 +0000
Manifest next update: Sun 08 Mar 2026 23:47:10 +0000
Files and hashes: 1: Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl (hash: GBCfhHfgleuKXZLCREtUxf95clI1OBzBrk37iXfDCbU=)
2: 310AEC7A5B7C11EDAAFAB831C4F9AE02.roa (hash: s6hQH/XUcOEn8mr++TJ3GkI04opViNwePvL4KgonitQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673 (0x2a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=567F9AB2B2C79692685C03055AF969E60B66B800
Validity
Not Before: Mar 1 23:47:10 2026 GMT
Not After : Mar 8 23:47:10 2026 GMT
Subject: CN=69a4d000-6ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:93:79:7b:58:15:12:b9:28:a5:aa:a9:43:
2d:dd:aa:7d:42:99:34:c5:60:d9:cc:3f:0d:35:9f:
4a:49:67:89:93:c5:34:01:a0:f6:9b:28:94:3e:09:
b6:88:cf:26:14:3c:78:a0:d2:68:21:0f:bf:2f:f7:
32:b5:fe:4b:ff:06:35:15:48:ab:26:9e:9f:d7:32:
13:d4:c7:57:10:0e:c2:2b:ba:a0:1b:82:57:a9:b5:
9b:a9:23:3d:e1:7d:4e:b1:f8:93:29:ea:db:3d:e5:
00:1b:aa:61:e9:1a:56:b7:ee:89:57:10:a3:c6:ed:
af:4d:dc:cc:9e:82:7d:ef:8a:e2:3c:21:73:ae:d4:
1a:0b:22:4a:5c:1e:84:af:9d:76:89:e0:9b:f2:8e:
95:c6:53:8f:6b:93:ce:70:ad:d2:70:e8:7c:5e:d9:
71:5f:0e:dc:35:8f:8f:71:27:bb:d4:99:34:3b:1d:
36:02:ab:d5:20:97:53:79:20:9a:54:22:13:1e:3b:
ee:46:4c:2e:92:1f:ae:ee:f4:42:2d:0e:4e:0e:0a:
1b:dd:04:8b:fc:a4:22:e0:67:53:65:1d:ee:fe:41:
2a:98:2a:69:bc:0b:80:3e:b2:26:a7:8f:7b:d5:8d:
01:60:d5:a7:84:66:c2:34:4d:6b:c0:9e:a1:63:4f:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:CD:20:B1:47:85:47:C0:E9:04:80:35:4D:29:7D:4A:0A:FD:86
X509v3 Authority Key Identifier:
keyid:56:7F:9A:B2:B2:C7:96:92:68:5C:03:05:5A:F9:69:E6:0B:66:B8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vn-asrLHlpJoXAMFWvlp5gtmuAA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/E2DA8518492111EDABD59C53C4F9AE02/Vn-asrLHlpJoXAMFWvlp5gtmuAA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c5:cd:1b:cc:5c:59:0d:6c:60:ac:18:e8:c1:46:e1:82:fe:
0b:6d:48:2d:90:d2:0c:55:cf:9a:d6:ce:99:2b:07:89:35:28:
fd:a1:a9:ef:1a:c5:2e:e8:2f:b7:6a:47:36:e0:e9:be:80:fa:
03:a9:bb:51:02:17:4d:6c:ac:74:67:b1:3c:b2:62:94:4d:12:
cf:29:1f:56:6e:db:a1:48:02:0b:cd:a3:b9:29:ea:cd:67:a7:
cb:d3:a0:bb:85:c5:51:e3:46:f7:24:4b:ee:21:13:ee:57:3f:
4f:7e:0c:0b:56:1c:78:f4:15:51:f4:35:31:b4:24:c3:10:aa:
14:46:b2:a4:22:86:43:86:67:f9:7a:84:11:69:a6:16:da:b4:
59:f3:51:e0:2c:21:77:c3:cb:b7:62:48:73:1c:c6:91:58:30:
c6:1b:6e:c7:25:ee:b2:87:f1:03:3e:c0:45:9b:e6:dd:57:1c:
33:a3:6b:47:01:b8:9b:df:cb:71:45:21:83:fb:68:a6:f0:49:
a1:41:c1:9e:a8:c8:de:3f:fe:e3:3a:ca:34:12:81:df:f7:96:
50:f9:c3:27:df:58:69:b1:14:90:b4:5e:3a:dc:91:ea:12:ee:
73:ab:ae:5e:78:96:90:79:95:25:2f:ef:ba:aa:46:a1:6b:d3:
86:54:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:15 2026 by rpki-client