
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier: PO8R8kc1BVAz8FKaQ4fE0NbE7IA2jeM6XDHs09v3tI0=
Subject key identifier: AD:E7:24:F0:AA:C8:1E:B8:9B:BE:06:AA:3D:5B:F8:7E:AA:E0:62:2F
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number: F6
Signing time: Fri 17 Apr 2026 05:59:49 +0000
Manifest this update: Fri 17 Apr 2026 05:59:48 +0000
Manifest next update: Fri 24 Apr 2026 05:59:48 +0000
Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: KmRTxQMwec6g6xAbFIJe6CuJrHPnc3r7EHSqD65z2Ug=)
2: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
3: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Validity
Not Before: Apr 17 05:59:48 2026 GMT
Not After : Apr 24 05:59:48 2026 GMT
Subject: CN=69e1cc55-23ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:df:2d:be:fb:79:d9:23:59:a6:d1:a0:60:
f2:ea:83:52:b6:78:fd:aa:4c:d3:9d:6b:c1:8a:81:
03:29:7b:5f:66:bd:bf:e6:e5:a7:55:25:b3:2e:fc:
70:77:6a:f7:81:f8:9a:79:74:70:3b:11:a4:2c:9f:
ec:1a:95:75:4b:c4:a6:40:dc:30:af:8a:67:bc:2c:
5e:1f:15:f8:cd:99:a3:45:bf:4f:64:22:3a:f3:ef:
b3:ad:73:78:be:f4:68:48:92:cd:c6:cf:f4:3a:e5:
45:48:ad:b6:b6:7d:bd:0a:f9:cd:b6:d7:81:4f:04:
9d:8f:96:a8:31:0d:c1:7f:1b:6f:89:22:33:39:63:
22:e0:85:3a:3f:f8:67:88:52:73:13:48:b2:09:b7:
a8:d3:b9:d4:85:9f:76:74:82:b0:1e:5a:9e:45:ec:
f8:01:15:06:e1:56:8a:2e:4b:ea:81:ea:78:ee:b2:
7a:81:61:2c:fa:93:74:cb:9b:9a:61:33:4e:18:81:
d5:e7:6a:0e:88:bb:da:aa:64:90:79:d5:0e:17:7f:
8a:bf:58:a1:a3:5b:ee:19:80:c6:d2:5b:bf:13:d8:
49:7c:53:c7:62:9b:d7:a5:aa:ea:10:c8:34:3b:f3:
98:2d:da:c7:cd:2d:56:58:c6:c1:e3:bf:e5:7a:81:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E7:24:F0:AA:C8:1E:B8:9B:BE:06:AA:3D:5B:F8:7E:AA:E0:62:2F
X509v3 Authority Key Identifier:
keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:aa:96:99:ca:75:46:92:98:6c:3a:b0:5b:3f:6b:18:3e:47:
37:96:0d:8a:a0:11:aa:64:28:27:6c:13:40:84:dc:84:0f:64:
58:90:60:e2:3c:c8:91:c9:43:03:b6:90:1c:04:98:1b:8a:b1:
2d:a3:eb:2e:6e:ed:fb:52:3d:01:28:77:3e:02:9c:dd:b0:73:
48:57:fb:39:44:cf:87:b0:96:35:69:59:ec:ac:89:30:41:87:
de:f2:89:36:ad:a0:f0:5e:3d:cb:e7:41:db:8a:17:50:8b:41:
68:d3:9b:d2:87:87:c3:e5:eb:4b:55:d9:57:e1:1a:be:27:e2:
f8:03:ef:a2:90:8e:f3:b1:cd:42:62:cb:9e:00:98:5b:ba:af:
4c:ad:b5:55:d7:a5:d6:c6:86:1a:1c:ee:fb:b4:cc:1a:78:0e:
07:bd:16:2e:21:3f:36:71:e8:9a:6d:77:29:63:90:a8:ea:c1:
c2:93:1b:9e:65:53:5f:8b:eb:a9:d2:5e:f8:4f:b6:58:2b:72:
27:e3:02:7c:71:ef:a6:3c:5b:59:56:13:7a:f1:32:17:e6:37:
8d:07:bc:aa:c5:d9:3f:e7:95:98:39:d0:1e:16:dd:29:d4:3e:
09:b8:f7:95:64:f7:f5:5d:6e:29:13:cf:a0:cc:98:ed:38:17:
53:ee:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:11 2026 by rpki-client