
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
File: vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft (raw, json)
Hash identifier: pW01lq14XXbG4IC5uPKe80wrxr19ImX9WTrKspN/t3U=
Subject key identifier: 06:43:60:00:8F:00:46:D8:B1:97:39:EB:5D:00:52:D9:EF:13:71:AD
Authority key identifier: BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
Certificate issuer: /CN=A91B36DC/serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Certificate serial: 086D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
Manifest number: 0852
Signing time: Tue 28 Jul 2026 21:24:42 +0000
Manifest this update: Tue 28 Jul 2026 21:24:42 +0000
Manifest next update: Tue 04 Aug 2026 21:24:42 +0000
Files and hashes: 1: vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl (hash: VXoXUGNOVqq/IHr/XTa+ZJetaYrvN4CqACSROjSPyyM=)
2: 1714A7D489BD11EC9550C184C4F9AE02.roa (hash: yuMEpYdr92StEUkrCtc4em7H5dYpwH9n4xJ+CtwrLj8=)
3: FEA1EB7219FA11EBA0F82851C4F9AE02.roa (hash: P/YzwZrXirAfHcAYuoDInMv7oeZdvQaJfgoo3K4BZhU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 21:24:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157 (0x86d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B36DC, serialNumber=BC02B005CCAA0453FC9B817BB78CBA915F27C2A8
Validity
Not Before: Jul 28 21:24:42 2026 GMT
Not After : Aug 4 21:24:42 2026 GMT
Subject: CN=6a691e1a-7c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:d8:f6:0c:55:a6:1d:91:52:61:48:3d:1a:
93:2c:48:7b:5c:ab:6e:cd:c8:cf:3a:3e:02:4a:3c:
44:aa:05:15:8d:4b:26:57:53:ee:5b:1b:af:3a:fb:
2c:a5:8c:d7:80:05:dc:55:14:f3:7e:2a:b1:9c:a0:
f2:18:47:5f:c0:f7:a0:d2:84:24:b8:ce:99:5d:6c:
a0:6d:0d:91:64:b9:5e:88:d1:a3:f5:18:c0:29:92:
59:c0:0f:64:1d:c7:0e:24:2a:54:5d:70:54:f2:98:
01:34:0b:8e:ac:91:c4:94:74:3f:81:bd:59:0d:74:
14:a6:17:0e:a7:a4:fd:f2:8e:ee:40:d2:a4:9e:40:
4b:cd:8c:05:fc:53:06:0f:78:d3:7a:e4:a6:da:94:
ea:71:5c:53:3e:b2:2c:72:e4:df:79:d5:92:cc:22:
a1:6e:c2:bb:e1:e9:e9:1f:ce:66:14:7e:84:21:49:
fc:aa:4b:61:f6:44:1f:83:69:7b:ab:3f:e5:62:d8:
dc:d2:2d:78:ab:70:e8:d2:10:a8:0a:33:32:7d:e6:
53:7a:6c:3c:f9:7a:48:b5:a0:db:b5:bb:7c:a6:36:
ed:db:a4:8e:2c:48:6b:6e:bf:95:50:07:9f:83:30:
66:1a:fb:61:84:7d:c4:d9:f1:97:ba:6b:ff:db:4c:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:43:60:00:8F:00:46:D8:B1:97:39:EB:5D:00:52:D9:EF:13:71:AD
X509v3 Authority Key Identifier:
keyid:BC:02:B0:05:CC:AA:04:53:FC:9B:81:7B:B7:8C:BA:91:5F:27:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAKwBcyqBFP8m4F7t4y6kV8nwqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B36DC/B043647A19F911EBB8CDED4FC4F9AE02/vAKwBcyqBFP8m4F7t4y6kV8nwqg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6c:32:20:9e:bc:1e:bd:79:4c:83:4e:d8:4d:6e:3d:f1:6d:
15:ad:47:52:c8:65:91:f9:af:84:67:3d:94:f2:53:01:b7:bb:
fa:18:f8:24:2e:8d:01:ec:44:3d:73:6f:f9:dc:c2:80:a0:cd:
04:47:d1:c3:3a:a0:8a:88:51:dd:0f:c0:95:62:3a:be:2a:6f:
e6:6d:e2:75:f3:6c:42:e7:b2:97:fe:74:dc:d0:6a:3a:fc:3d:
ec:a5:eb:63:ba:40:6b:ca:7f:66:14:47:ae:1c:08:17:1f:c3:
46:f6:de:ae:a6:7d:ec:ed:09:6d:cf:19:5e:1b:3f:55:14:f4:
ee:1b:ef:61:d1:bb:b4:a0:f6:f7:3b:2d:d0:fa:8a:44:ff:28:
c9:a7:3d:4f:80:3a:7a:be:e3:f2:d6:08:72:06:d0:5b:e6:3d:
3b:9b:8f:4a:20:1b:a4:08:0a:22:0e:0b:e3:6d:98:76:a7:76:
a8:25:74:73:72:dd:f2:5c:c6:55:c9:0c:c6:79:a4:2d:b2:7a:
0a:fb:2c:65:4f:92:45:de:41:55:56:ef:07:8c:06:47:67:8a:
97:88:95:9e:c9:fa:4a:f7:29:f8:26:94:24:20:4e:f8:57:2d:
3b:d2:dc:28:d2:35:af:36:41:7c:c3:3b:7f:53:d7:45:39:38:
01:4f:42:dc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjM2REMxMTAvBgNVBAUTKEJDMDJCMDA1Q0NBQTA0NTNGQzlCODE3QkI3OENCQTkx
NUYyN0MyQTgwHhcNMjYwNzI4MjEyNDQyWhcNMjYwODA0MjEyNDQyWjAYMRYwFAYD
VQQDEw02YTY5MWUxYS03YzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlxXY9gxVph2RUmFIPRqTLEh7XKtuzcjPOj4CSjxEqgUVjUsmV1PuWxuvOvss
pYzXgAXcVRTzfiqxnKDyGEdfwPeg0oQkuM6ZXWygbQ2RZLleiNGj9RjAKZJZwA9k
HccOJCpUXXBU8pgBNAuOrJHElHQ/gb1ZDXQUphcOp6T98o7uQNKknkBLzYwF/FMG
D3jTeuSm2pTqcVxTPrIscuTfedWSzCKhbsK74enpH85mFH6EIUn8qkth9kQfg2l7
qz/lYtjc0i14q3Do0hCoCjMyfeZTemw8+XpItaDbtbt8pjbt26SOLEhrbr+VUAef
gzBmGvthhH3E2fGXumv/20zGZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAZDYACP
AEbYsZc5610AUtnvE3GtMB8GA1UdIwQYMBaAFLwCsAXMqgRT/JuBe7eMupFfJ8Ko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzZEQy9CMDQzNjQ3QTE5
RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJGUDhtNEY3dDR5NmtWOG53
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZBS3dCY3lxQkZQOG00Rjd0NHk2a1Y4bndxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzZEQy9CMDQzNjQ3QTE5RjkxMUVCQjhDREVENEZDNEY5QUUwMi92QUt3QmN5cUJG
UDhtNEY3dDR5NmtWOG53cWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV2wyIJ68Hr15TINO2E1uPfFtFa1HUshlkfmvhGc9lPJTAbe7+hj4JC6NAexE
PXNv+dzCgKDNBEfRwzqgiohR3Q/AlWI6vipv5m3idfNsQueyl/503NBqOvw97KXr
Y7pAa8p/ZhRHrhwIFx/DRvberqZ97O0Jbc8ZXhs/VRT07hvvYdG7tKD29zst0PqK
RP8oyac9T4A6er7j8tYIcgbQW+Y9O5uPSiAbpAgKIg4L422Ydqd2qCV0c3Ld8lzG
VckMxnmkLbJ6CvssZU+SRd5BVVbvB4wGR2eKl4iVnsn6Svcp+CaUJCBO+FctO9Lc
KNI1rzZBfMM7f1PXRTk4AU9C3A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:30:49 2026 by rpki-client