
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
File: vK5XMu8hlzK0msgoTbGBTpLIaxE.mft (raw, json)
Hash identifier: y9IxIu4AUKc2AN3sgmHP8ECpeKE7tsqcniC/SRUgy7w=
Subject key identifier: 82:6F:F6:2D:C4:C3:A3:7D:15:67:91:F9:7A:AF:D3:BD:F3:B5:04:A0
Authority key identifier: BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
Certificate issuer: /CN=A91B653B/serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Certificate serial: 0916
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
Manifest number: 0908
Signing time: Sat 28 Feb 2026 20:37:10 +0000
Manifest this update: Sat 28 Feb 2026 20:37:09 +0000
Manifest next update: Sat 07 Mar 2026 20:37:09 +0000
Files and hashes: 1: vK5XMu8hlzK0msgoTbGBTpLIaxE.crl (hash: 5xDwzIrHcQP5ABU6J8QqDCL8R7CRkMx/y/K1ITFzAmw=)
2: 2015E6B2C66F11EAA0B1B019C4F9AE02.roa (hash: h3J4Tvd13De8oeu9y10qw5WhotHnj9E107WlmlhLTLE=)
3: 1F99EBD4C66F11EAA0B1B019C4F9AE02.roa (hash: WRLRqvOq3SfDppm3IqDFX7iVTIlxw9qpmPcVf6+EH5s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 20:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2326 (0x916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B653B, serialNumber=BCAE5732EF219732B49AC8284DB1814E92C86B11
Validity
Not Before: Feb 28 20:37:09 2026 GMT
Not After : Mar 7 20:37:09 2026 GMT
Subject: CN=69a351f6-df0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:7b:2c:d3:8e:93:a8:3e:1b:b3:b2:d0:ae:
8b:8f:27:24:27:b4:d5:72:bd:17:46:36:14:e6:0a:
8b:12:b6:d7:6d:c6:2b:b5:4f:fa:b6:92:fd:74:32:
a4:d1:9a:81:c6:9e:71:5a:5f:37:24:50:a8:86:12:
ae:53:8f:5a:47:05:e7:e9:0b:29:f0:89:9b:9b:ff:
fc:4b:e1:69:11:7f:ce:d5:38:66:b4:62:c6:9e:d1:
fc:fd:f1:99:70:bb:0a:16:09:b4:5d:5c:9e:18:30:
a7:8c:57:c3:2f:95:69:c3:48:95:c0:d3:ec:6a:06:
36:20:0d:55:e2:de:7e:84:69:e8:64:66:0f:57:a5:
7d:d9:0a:78:05:41:59:97:51:ef:d9:4c:d8:26:e1:
11:c8:f2:42:0b:85:d2:d5:b5:38:c5:e3:5c:89:30:
1c:90:02:f8:5e:7f:4e:62:4e:e4:1a:84:bf:cb:91:
87:2f:8b:02:7c:f3:67:af:9a:4a:0e:53:5f:de:dc:
3f:c2:11:69:5c:8f:8d:cc:c7:72:92:6a:3d:3f:81:
33:93:ad:21:35:06:db:d9:0a:7f:12:a4:b7:7d:68:
0d:74:97:18:46:58:6e:ec:c8:99:ba:75:5e:95:c1:
30:8f:e5:d9:2e:ef:ea:11:f9:f0:64:58:50:ec:3b:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:6F:F6:2D:C4:C3:A3:7D:15:67:91:F9:7A:AF:D3:BD:F3:B5:04:A0
X509v3 Authority Key Identifier:
keyid:BC:AE:57:32:EF:21:97:32:B4:9A:C8:28:4D:B1:81:4E:92:C8:6B:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vK5XMu8hlzK0msgoTbGBTpLIaxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B653B/29383CDEC20C11EAB812A01AC4F9AE02/vK5XMu8hlzK0msgoTbGBTpLIaxE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c4:18:1b:c2:d7:e8:04:d4:6f:2e:f8:94:d6:ec:57:b1:90:
98:4f:cd:b6:13:d0:77:ab:b2:19:d0:47:f5:80:b0:f3:37:64:
7b:ba:12:4a:c3:96:6a:ad:e6:1e:24:f5:65:35:da:ad:89:e1:
0d:4c:1f:2c:ce:12:98:be:3e:9b:a5:10:f9:b9:87:b8:ce:0c:
02:3a:10:95:7f:fd:08:e5:7f:5b:ff:09:e1:a1:b2:71:67:38:
00:7f:46:cb:b7:80:9e:85:97:bb:9d:27:6d:1a:ea:51:24:27:
b4:aa:50:1c:ff:9a:3f:23:96:f0:15:50:8d:38:42:3f:23:ca:
4d:84:0d:6f:48:53:e3:a9:0e:b1:f5:fb:56:c0:67:d8:eb:df:
1d:0f:91:30:f5:6e:2a:1f:56:d0:23:45:68:46:e2:1a:ef:ac:
28:b2:d0:12:0d:2c:79:45:a7:01:6e:91:bf:dc:d1:4c:2e:55:
81:f4:db:7d:df:fe:4e:48:57:cc:a1:74:91:fe:3d:2f:7e:a3:
fb:3e:36:64:79:6f:f9:c5:b7:f9:2e:10:54:1d:85:c7:4c:18:
a6:ad:03:1f:0e:04:42:dd:ed:39:3f:18:9e:ab:ec:00:5c:d6:
3d:1a:80:2c:ab:ac:44:e7:32:65:87:ef:8f:2c:4a:84:ba:5d:
31:e4:c8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:29 2026 by rpki-client