
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
File: vaPoqCMceH9rfxi8FGuV-1wDjtk.mft (raw, json)
Hash identifier: jVuhHnSdtbnL5IRMAtga5XsR783NEBUrDMkZdoIjPqo=
Subject key identifier: 89:98:A2:91:E5:A5:90:DA:46:CE:56:2C:C1:A0:C4:EC:CB:DF:3D:3D
Authority key identifier: BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
Certificate issuer: /CN=A91AE8D7/serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
Manifest number: 0121
Signing time: Mon 21 Sep 2026 05:46:42 +0000
Manifest this update: Mon 21 Sep 2026 05:46:41 +0000
Manifest next update: Mon 28 Sep 2026 05:46:41 +0000
Files and hashes: 1: vaPoqCMceH9rfxi8FGuV-1wDjtk.crl (hash: LN7sfqLi54RNt3LW7Djc8emHlVSP+DKOUxLjfil+zF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AE8D7, serialNumber=BDA3E8A8231C787F6B7F18BC146B95FB5C038ED9
Validity
Not Before: Sep 21 05:46:41 2026 GMT
Not After : Sep 28 05:46:41 2026 GMT
Subject: CN=6ab0c4c2-739b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:58:ea:40:f3:86:e2:52:f5:40:64:81:7c:f6:
2c:40:5f:13:f0:bd:fc:67:f6:df:a1:93:8c:dd:fe:
c5:32:0c:65:36:4d:c9:64:c4:0c:0d:24:67:21:ef:
51:24:b6:18:8a:50:29:6d:22:d9:35:46:52:d2:b1:
48:f5:fe:18:86:07:e7:ae:d1:50:5a:55:73:cc:32:
aa:a5:26:11:6a:ae:ed:6c:aa:c7:22:14:56:da:96:
a4:6a:b3:d7:e4:4a:06:c7:c4:2d:90:a9:6c:ec:c2:
e5:d3:4d:72:c3:13:f6:7a:9a:7f:db:3e:26:86:d0:
7d:a3:67:6e:e6:38:aa:e1:8e:7e:12:19:46:29:f0:
43:f5:ec:86:a0:55:88:03:f9:94:bf:26:8a:75:99:
f7:80:f8:61:cc:c9:6a:05:82:a2:10:66:b8:96:21:
9e:d4:9e:ea:54:40:af:d4:ce:0a:3d:b1:c2:e3:23:
c7:8f:51:3f:9f:f7:3b:22:8f:d4:0b:c9:49:54:f7:
59:2c:e3:c5:3c:dc:ca:60:80:b0:b7:7d:60:ec:9d:
7d:b8:ac:d3:6e:76:6a:27:56:f0:53:db:b6:d2:8d:
d1:24:87:0c:80:b1:8a:a7:8b:c8:2f:24:88:a6:93:
6e:63:71:74:92:66:0b:12:37:ea:d7:d9:f8:e9:dd:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:A2:91:E5:A5:90:DA:46:CE:56:2C:C1:A0:C4:EC:CB:DF:3D:3D
X509v3 Authority Key Identifier:
keyid:BD:A3:E8:A8:23:1C:78:7F:6B:7F:18:BC:14:6B:95:FB:5C:03:8E:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vaPoqCMceH9rfxi8FGuV-1wDjtk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE8D7/4B01C4A6F93F11EFB7EAB425C4F9AE02/vaPoqCMceH9rfxi8FGuV-1wDjtk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:3c:40:50:da:94:78:df:1d:8f:35:39:26:89:a8:9a:e3:4c:
33:79:4d:c8:d8:ed:66:3f:4c:3c:c5:8d:b3:54:96:14:e7:32:
ff:33:44:ae:a0:a6:4d:a2:d0:c8:cf:fe:58:11:66:1b:60:66:
ad:47:27:7d:58:bf:14:b1:81:f2:92:3b:03:32:bd:58:33:17:
9e:7a:7b:56:cb:79:1c:07:6b:41:ef:f3:99:d1:b0:ee:d4:a5:
3b:d8:50:5e:2b:77:34:dc:8c:6e:65:03:81:10:78:b2:ee:1a:
14:9d:df:e9:4f:6b:12:d4:2f:61:c2:19:22:b6:b2:f5:28:84:
ad:d1:79:74:a8:bf:2b:39:3d:c6:81:61:3c:4a:5c:e6:de:85:
8b:90:0c:59:27:34:3e:0a:0f:96:43:06:46:77:32:a8:54:f7:
74:6b:af:8a:f3:e0:ea:ed:07:79:cf:fc:99:44:1a:7b:53:a0:
c2:4e:8c:24:2f:61:f3:0b:29:ce:d8:2d:7b:86:b0:02:cb:1a:
99:64:d2:a8:61:56:94:ad:7e:2b:20:ea:ec:47:71:bd:b2:f9:
d5:1a:9d:7e:13:f9:ab:7b:59:8c:1d:44:39:a5:4f:f8:0d:cd:
26:c0:d3:db:27:53:2e:e9:93:d4:40:7e:67:17:7d:cf:ba:36:
29:51:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:36:44 2026 by rpki-client