
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
File: vO4SgFOJtXjDX9i0JVpggdJoP3w.mft (raw, json)
Hash identifier: DCwyKQF/i21d4kmipDnSqP22vmxXIc4ihW3VqhOSOto=
Subject key identifier: 21:36:29:31:B0:87:AF:63:D3:A6:CD:3F:95:62:CB:B7:BF:E2:E2:71
Authority key identifier: BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C
Certificate issuer: /CN=A91B4B33/serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C
Certificate serial: 017B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
Manifest number: 017B
Signing time: Sat 13 Jun 2026 04:34:57 +0000
Manifest this update: Sat 13 Jun 2026 04:34:56 +0000
Manifest next update: Sat 20 Jun 2026 04:34:56 +0000
Files and hashes: 1: vO4SgFOJtXjDX9i0JVpggdJoP3w.crl (hash: n8LRJDp6jyqJdLd2U9TPS+I8znJaLxOtNmLd4sG0Nyw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl
rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 04:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 379 (0x17b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4B33, serialNumber=BCEE12805389B578C35FD8B4255A6081D2683F7C
Validity
Not Before: Jun 13 04:34:56 2026 GMT
Not After : Jun 20 04:34:56 2026 GMT
Subject: CN=6a2cddf1-2396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:4d:6f:a7:d7:f4:f2:d4:ef:09:9e:b6:6e:
16:26:2f:b5:0e:fc:0c:b4:fe:4a:21:1e:fa:d5:70:
52:31:3a:28:92:12:4d:5f:da:76:52:25:f6:5a:59:
2e:f4:ae:67:74:7a:a3:ea:70:c1:b1:de:f5:62:8e:
d2:cb:97:5a:91:29:35:b8:c4:d9:9c:73:5c:83:2a:
ea:db:92:58:94:5b:0f:af:d0:11:f9:c0:ca:35:05:
35:0a:18:ca:d8:cb:4a:b3:1f:55:0c:4d:5d:90:48:
1a:91:b6:15:bb:d0:69:c6:6c:d7:1e:30:24:ca:f9:
c3:90:d0:4b:db:91:33:cf:3a:77:c4:2b:08:66:2a:
b1:22:85:8b:12:6e:4d:96:6e:b9:1a:df:ce:2f:9b:
42:c2:17:7b:12:66:a3:24:57:64:12:46:e3:aa:05:
18:a7:34:ab:75:55:b8:b7:a4:e8:78:19:d0:5d:35:
13:82:8a:1b:6a:ec:d2:2d:50:9e:a1:f4:f6:b6:46:
d7:08:e4:4a:a1:d8:2d:19:fe:67:6c:af:09:4b:90:
64:a0:74:f8:95:f8:8b:08:8e:ab:f1:f3:84:fa:bb:
6f:76:48:4d:7e:7d:63:f0:9d:a2:8e:a7:8d:4d:a9:
f3:de:cf:27:0e:31:33:5d:a8:5e:3f:62:38:cf:a1:
fe:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:36:29:31:B0:87:AF:63:D3:A6:CD:3F:95:62:CB:B7:BF:E2:E2:71
X509v3 Authority Key Identifier:
keyid:BC:EE:12:80:53:89:B5:78:C3:5F:D8:B4:25:5A:60:81:D2:68:3F:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vO4SgFOJtXjDX9i0JVpggdJoP3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/244F849A221E11EF9344A309C4F9AE02/vO4SgFOJtXjDX9i0JVpggdJoP3w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:d4:76:58:a1:06:df:68:6e:2b:7c:35:48:5e:0a:67:e6:42:
3d:ea:ed:7e:14:ae:cb:f7:90:b0:26:da:a9:1e:fb:b5:40:99:
8a:52:37:a6:10:c1:7d:56:f1:e6:06:c0:b3:81:b5:b7:06:11:
26:9e:bf:7a:f0:b5:6d:dd:e9:e6:1c:05:8c:f5:b6:ea:5d:b9:
2b:73:ea:63:d9:52:8f:8f:47:7d:24:40:26:80:1e:53:b1:a3:
ea:ea:de:4a:25:4c:95:74:7d:31:04:97:d7:51:b2:29:d7:53:
f7:31:88:0c:f3:c0:f6:d9:0d:a1:d3:3d:d8:4d:2b:cd:32:0a:
43:69:73:0a:27:99:3d:6a:20:c0:10:16:0a:29:0d:a5:b7:64:
74:3f:47:15:b1:7b:ea:e3:58:11:88:f2:b4:ec:27:01:ae:4e:
7a:4a:0d:ee:c9:1c:ff:db:72:da:b4:0a:fb:ca:29:0e:57:80:
29:04:75:eb:33:f8:6e:2a:95:bc:0d:b8:4d:7a:24:99:1d:90:
91:06:44:ee:be:0b:bc:41:ff:cd:99:f3:aa:9e:f7:31:25:b8:
dd:92:e0:02:72:d2:df:ac:b3:dc:4e:49:31:09:ea:e2:31:5d:
ab:8f:55:ee:d9:5c:c5:c6:25:cf:82:97:09:7d:97:33:32:f0:
59:e1:ee:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:57 2026 by rpki-client