
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
File: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft (raw, json)
Hash identifier: lNngKquOomi9oDNDG+Vxd8H/qiCeS+jfYyyPnyUWi+c=
Subject key identifier: 08:20:47:CD:9D:CD:20:D6:2C:3D:47:1B:AC:6B:5B:99:5E:9B:E1:DA
Authority key identifier: 55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
Certificate issuer: /CN=A91B00DC/serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Certificate serial: 14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
Manifest number: 12
Signing time: Sun 01 Mar 2026 10:34:22 +0000
Manifest this update: Sun 01 Mar 2026 10:34:22 +0000
Manifest next update: Sun 08 Mar 2026 10:34:22 +0000
Files and hashes: 1: Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl (hash: 9ah+IeaHag31s8DmKA0NzHVxnELvNeZVUgcHYkzz6LE=)
2: 63ABE3C0001811F1804E761C426F56BC.roa (hash: DthUWy6Hm+llw2ps4qbubO2gT5P5TYvR85rrtYYcYEE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B00DC, serialNumber=55DE42B6B18BD5799A26E842996103FA34BC1718
Validity
Not Before: Mar 1 10:34:22 2026 GMT
Not After : Mar 8 10:34:22 2026 GMT
Subject: CN=69a4162e-5620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:ce:a8:c3:30:97:47:d2:d6:19:37:00:20:
b7:db:b0:48:22:31:ee:4d:8f:60:13:96:ea:03:26:
1a:ef:93:da:0a:77:b4:e3:0e:2f:66:82:05:f3:17:
b7:25:ec:da:e3:4d:e7:06:50:45:fc:d0:ce:70:c7:
8e:49:64:4b:5a:fc:d1:e8:58:9f:1d:28:df:d3:90:
50:8c:24:d4:41:79:41:d0:83:8b:71:43:b0:29:32:
f5:e4:c5:48:39:88:1f:70:18:a8:dd:cc:39:85:9e:
1e:70:a4:e7:ab:1a:41:2f:7b:f6:af:b7:cc:99:b8:
cc:f8:ad:70:ac:95:78:54:36:d2:ac:9f:db:ac:2b:
8f:10:7a:88:55:43:ee:a9:fd:76:16:cb:48:a5:a5:
25:a5:eb:ff:de:e5:11:c2:85:3a:b6:9a:4d:6b:d7:
cb:8a:aa:99:7e:1c:81:ee:09:ca:57:c9:a7:e0:1d:
37:ce:e7:e8:0f:26:1f:ad:cb:62:f1:17:81:9b:34:
fc:d9:af:68:8d:85:77:ef:29:17:ca:07:7c:e1:4e:
ad:50:0f:72:8a:d3:2f:60:0b:44:5c:28:ae:f2:ed:
99:3d:42:6e:ac:8d:f2:55:ab:f4:fd:75:d2:a7:0c:
34:c6:88:73:4f:0f:fe:20:a7:7a:e9:bd:14:6f:3d:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:47:CD:9D:CD:20:D6:2C:3D:47:1B:AC:6B:5B:99:5E:9B:E1:DA
X509v3 Authority Key Identifier:
keyid:55:DE:42:B6:B1:8B:D5:79:9A:26:E8:42:99:61:03:FA:34:BC:17:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B00DC/2FBBC36E001811F1B6A12A14426F56BC/Vd5CtrGL1XmaJuhCmWED-jS8Fxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:55:a2:75:6c:68:9d:21:be:3e:c7:ba:94:ea:eb:57:74:f1:
ea:31:9c:d7:4a:29:08:5a:38:20:e3:39:a2:6e:3c:8c:7b:03:
91:f9:54:04:c4:e0:ed:62:41:ee:c3:b2:3d:c0:8f:df:34:33:
de:78:66:3d:78:0a:24:3f:66:9c:5d:2b:e2:29:a9:b5:3c:43:
71:c5:65:78:d6:59:3b:1f:70:7a:b1:0c:aa:01:a0:27:ac:58:
4a:fb:68:a9:4a:c4:48:76:32:c1:ba:25:b5:8a:e0:d6:22:aa:
1a:c5:d2:6e:12:37:6a:1c:86:54:89:bd:01:36:d5:cb:58:b1:
38:96:61:b2:92:5a:22:7b:95:66:49:b5:11:10:6b:49:e6:45:
50:ab:f6:02:b3:f5:8b:e1:dc:4b:ac:68:e6:99:63:7c:06:cb:
b8:ec:7c:7d:21:2f:25:84:e1:39:15:e6:23:a0:1f:63:7a:65:
2d:d6:c6:f0:a5:c6:fe:b3:d7:b3:f7:60:78:d2:5b:8d:eb:20:
a0:8d:cc:cd:f8:b5:c9:16:24:c9:16:ba:ab:33:d0:a0:f4:ea:
22:02:17:21:28:ec:fa:d8:22:88:e2:e6:7c:35:07:c3:66:08:
c9:b0:53:d6:9c:6c:3f:90:39:6c:a7:64:e0:99:f2:5d:44:7f:
f9:14:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:00 2026 by rpki-client