
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
File: votHM7Guikc2t-kTJzPWVAkePSs.mft (raw, json)
Hash identifier: hCuSgwBXnBaJAlH1kDDHRpBq2yK9czqQ1yJ2bFVObgU=
Subject key identifier: 51:8F:4F:B1:C6:18:1A:C0:91:43:E6:CF:82:55:CD:6F:F5:23:B0:D0
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Certificate issuer: /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
Manifest number: 0145
Signing time: Mon 21 Sep 2026 05:23:43 +0000
Manifest this update: Mon 21 Sep 2026 05:23:42 +0000
Manifest next update: Mon 28 Sep 2026 05:23:42 +0000
Files and hashes: 1: votHM7Guikc2t-kTJzPWVAkePSs.crl (hash: zIXKcolTeaVQk+DFJOihSEgklOgxjzLNPVcNMi9uXq0=)
2: A3815188C9D211EFB961F44DC4F9AE02.roa (hash: DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=)
3: 63817B3AC9D211EFBC6F934DC4F9AE02.roa (hash: m0i0X9j0yXnsKKSGdxoju3T5IQpZd4Oir8j6ny4qit8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Validity
Not Before: Sep 21 05:23:42 2026 GMT
Not After : Sep 28 05:23:42 2026 GMT
Subject: CN=6ab0bf5f-a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:24:68:9b:64:44:51:fc:3e:b0:b7:84:f7:
8f:29:75:92:3d:f2:a9:de:89:aa:48:56:e2:94:90:
52:31:6b:2e:41:5c:22:ef:de:59:42:8c:d4:83:bd:
30:33:1f:21:0e:8c:cc:b7:46:7d:45:1f:63:46:ab:
cd:08:9c:55:49:76:9a:cf:dc:84:ce:9b:81:ab:8c:
d7:9b:e8:42:9e:90:ac:45:38:a2:49:a2:c6:d5:47:
c6:61:c6:f5:cf:90:31:92:4d:8f:18:a1:6d:c7:ce:
e4:15:5a:1f:e8:ff:16:7d:f4:e3:0d:4e:82:59:58:
c4:55:6a:ac:ce:6c:19:5f:8c:89:8d:45:9a:24:8a:
f6:58:09:f8:62:9b:cc:da:29:34:f0:2d:3e:19:12:
29:fe:ce:8c:31:43:06:9d:ff:0e:1a:6e:66:50:ff:
e7:09:c7:8a:3c:95:98:b9:38:08:bc:4c:00:89:39:
77:fa:09:c9:d1:3f:42:e9:3a:62:fd:9e:28:60:e8:
a6:45:e8:f5:5e:2a:cb:ab:d9:08:a5:f7:ed:e3:3c:
d1:a3:80:5c:72:61:5c:de:33:b6:21:8c:f3:2f:e1:
d0:3b:f8:1f:d2:26:4d:5c:5a:7d:ce:39:4e:df:cb:
e4:f2:8b:98:fc:1f:9a:4b:c9:8f:23:80:91:59:27:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8F:4F:B1:C6:18:1A:C0:91:43:E6:CF:82:55:CD:6F:F5:23:B0:D0
X509v3 Authority Key Identifier:
keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:f7:04:8e:71:1f:ee:d4:67:45:17:09:8e:ad:de:5c:03:
8f:fa:c2:21:46:53:42:6f:e4:80:b6:b2:a1:87:33:2a:04:f1:
c3:13:d8:e9:bc:42:dc:38:72:40:e3:3a:7b:eb:12:ef:5e:8c:
bd:72:52:89:22:5f:07:39:91:38:5f:fe:e0:8a:51:ab:17:af:
95:07:da:72:ab:a6:ad:bb:52:1e:4d:f8:6e:07:a6:06:7c:dd:
1a:37:10:2d:b4:5a:ac:08:13:18:d2:94:01:d7:b4:21:ef:39:
e0:99:8f:4f:e2:b2:fb:c6:e6:4b:0a:83:6f:6d:6d:d3:e6:5d:
90:4d:6b:86:36:16:e5:c7:3d:ab:61:09:db:ab:d9:56:64:9e:
d2:7f:87:54:58:20:d7:0a:41:9d:ef:2b:8a:d2:ad:a0:d5:a5:
57:bf:1a:91:2a:7b:b1:27:f2:a4:dd:f6:53:49:32:12:39:23:
b5:3a:ea:d1:7b:5e:bb:a0:72:cb:f0:5b:32:5c:ed:6c:72:82:
5b:fc:9c:7e:dd:a8:76:7e:ac:c8:47:51:05:f9:23:d1:70:c0:
9b:fc:dc:95:93:f1:b6:6d:50:fb:50:8f:33:ce:91:13:c3:94:
8a:ee:39:8e:c4:dc:11:92:7d:47:e1:8a:a0:5a:cc:fc:58:0b:
ef:1d:50:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:06:13 2026 by rpki-client