
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json)
Hash identifier: Lgkm6MjAUOkHLhXRwocAUl1nYI0wnzEJ0KhgZLiBaPo=
Subject key identifier: F3:EB:2D:BE:7E:95:18:85:DA:BE:D7:88:BC:D0:20:F7:B2:1D:84:10
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial: 0A37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
Manifest number: 09BC
Signing time: Fri 12 Jun 2026 20:11:49 +0000
Manifest this update: Fri 12 Jun 2026 20:11:48 +0000
Manifest next update: Fri 19 Jun 2026 20:11:48 +0000
Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: 8wVHi1giNaVv+tGM5D+++5Q5bVpR+OlUlEPis5/mQCA=)
2: A8896B1892E811F0A5E48134C4F9AE02.roa (hash: Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=)
3: 501941C093F211EEA029A113C4F9AE02.roa (hash: v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=)
4: 9672E862793811EE92C54834C4F9AE02.roa (hash: OrBLnxyiNzVNe59mG2m2meLOUn+J0nEWcAm3/0ePWkk=)
5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: OvH3fzPSveQwg1LNsqvZ4qweGuIQ/2uXhGIvOjFVfYA=)
6: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: BA6BStVHLf0gWqOgSoCGPU3bB5SibBkTMzQMt8U7qXE=)
7: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=)
8: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: R42xxi5mdGNkiu+sa7XDeJwjkUsIZrW52b4ix+87OCY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 20:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2615 (0xa37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Validity
Not Before: Jun 12 20:11:48 2026 GMT
Not After : Jun 19 20:11:48 2026 GMT
Subject: CN=6a2c6805-0639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:d9:f8:c1:20:2f:af:5b:72:1e:a7:b5:e6:
23:7f:89:f7:3f:76:da:5b:52:82:ed:4d:f3:46:8e:
b5:54:f2:57:b1:c0:30:e2:18:95:47:7b:2c:bc:a9:
b0:45:1a:73:ce:fd:0c:49:05:7f:12:da:01:48:56:
4f:c6:ae:5f:93:e6:a3:5c:9f:08:56:40:82:26:3b:
aa:81:db:02:3a:66:37:46:1e:e4:b0:f9:b9:bd:03:
4f:50:4e:fd:ad:75:3a:ed:87:18:20:a6:d1:6f:a8:
2a:50:6e:00:46:d9:5e:db:de:9b:18:ad:e9:0d:e8:
cb:31:12:0e:12:5a:ef:f5:98:33:5d:0f:23:2b:95:
9f:84:dd:33:88:6b:b3:5b:97:af:fe:9d:14:15:5c:
2e:b6:3f:bb:f7:0b:49:56:d4:b8:b0:9e:b2:61:9c:
a4:27:9a:6f:2d:fe:96:e3:16:6f:88:43:82:30:9f:
89:1d:bb:f5:7d:5d:b4:51:62:9b:e8:be:d4:a7:1a:
c9:18:43:2f:88:72:38:e3:85:2c:87:47:ac:2a:0a:
4c:53:00:f6:b6:73:f0:af:fc:35:a8:83:03:dc:ee:
d5:08:a5:f9:ff:00:31:55:05:b7:91:fd:2a:c7:c8:
6c:67:59:48:5b:b4:2c:26:c6:a6:54:ac:0e:c5:c8:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EB:2D:BE:7E:95:18:85:DA:BE:D7:88:BC:D0:20:F7:B2:1D:84:10
X509v3 Authority Key Identifier:
keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:42:06:d2:17:a0:e7:fe:58:be:f5:f6:7f:90:1f:a4:04:b5:
95:a4:90:ae:53:72:91:fd:f6:07:53:b1:f4:c4:01:73:07:b7:
17:7a:a6:b0:40:de:af:1d:02:35:ac:f0:47:a6:96:80:9f:7f:
91:f4:89:41:50:9f:fe:cf:69:b2:32:86:6a:24:02:74:e6:63:
16:e1:52:44:41:a7:ef:38:f8:11:5c:3c:87:70:ab:7c:a9:ac:
5a:4c:e8:fb:ae:44:34:a7:b8:b1:80:2c:4f:a3:86:b6:f2:3d:
f0:c2:7f:8e:0f:b1:53:1a:25:21:a5:ff:eb:d2:4f:8c:04:27:
d5:ae:b7:a9:94:39:be:06:c3:74:a2:e6:23:33:22:40:ab:2c:
dc:d9:42:9c:d4:3c:b1:b0:32:9b:a3:b4:76:aa:46:3a:fc:cf:
ce:02:b8:a5:b9:33:cd:d7:59:a1:78:3d:06:19:2f:a6:5b:fd:
25:14:8a:cd:99:01:b2:c0:90:a2:e9:5b:07:6c:68:0c:45:00:
47:2f:f1:41:fa:bd:16:86:b9:b8:e5:0f:2a:38:7e:e7:66:28:
4d:6d:3a:46:67:73:f9:04:3c:ef:36:58:fe:68:e3:77:be:b7:
aa:dc:fa:d2:2e:5a:5c:9c:7e:3b:17:69:1f:cf:d5:e5:23:54:
24:6f:32:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:03:24 2026 by rpki-client