
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json)
Hash identifier: so2AH3FNY4KuRodVrze/u9IM2F0UyTa5UafG5dQY0jo=
Subject key identifier: 21:DF:E7:43:1F:F4:CC:50:7D:5E:1B:91:2F:E9:B4:23:99:93:13:BC
Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
Manifest number: 1A
Signing time: Sat 13 Jun 2026 09:02:58 +0000
Manifest this update: Sat 13 Jun 2026 09:02:57 +0000
Manifest next update: Sat 20 Jun 2026 09:02:57 +0000
Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: bFIx6vngdd7+LGcuKZCZfyifDB2kQ3c3AlVjCx4gGC4=)
2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4
Validity
Not Before: Jun 13 09:02:57 2026 GMT
Not After : Jun 20 09:02:57 2026 GMT
Subject: CN=6a2d1cc1-56c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:5b:a7:92:e8:b6:97:3d:69:3b:3d:f5:92:
85:cf:a8:a7:05:03:b5:b4:b7:fd:fa:fa:99:f8:9c:
c5:49:dc:8f:ab:f0:f1:d8:e0:52:02:ae:4a:46:60:
98:4b:5a:01:90:3d:2a:f5:c4:e6:b6:8b:a2:b7:2e:
8e:a2:b2:bb:73:ac:d0:be:6e:34:40:5b:3d:80:cf:
b2:a1:be:38:b8:43:53:27:00:80:a6:33:ac:3a:b5:
61:08:27:cd:b0:bd:aa:6e:93:07:bc:7a:40:81:4d:
4a:cd:a1:22:7a:57:87:bf:d4:40:c9:74:f1:c0:b1:
65:54:82:d0:c7:58:ea:93:35:37:f8:28:93:cd:a6:
1e:1e:da:94:19:72:8e:8f:55:96:f8:b4:69:24:4c:
1d:f2:84:ca:c4:af:2a:1d:98:3f:3c:4e:55:af:1a:
6b:59:81:bc:58:bf:37:b8:da:26:ae:1f:d9:4a:5e:
16:07:d9:1c:12:9c:40:bb:73:c9:98:71:43:34:b8:
16:38:cf:34:6b:e9:c9:69:c8:26:73:01:c9:0e:a8:
82:97:9e:6d:de:b0:a7:ed:1e:e6:27:78:52:e5:f2:
00:5b:41:cd:3f:3a:98:d1:67:1a:b3:18:68:a5:63:
0f:cc:ec:f2:3c:21:6e:d1:52:7c:c3:b1:18:13:c4:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:E7:43:1F:F4:CC:50:7D:5E:1B:91:2F:E9:B4:23:99:93:13:BC
X509v3 Authority Key Identifier:
keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e9:38:37:fb:6b:63:ad:47:01:0a:0f:c5:e5:fc:14:a8:4f:66:
ad:a0:08:8a:65:8f:a0:15:50:ac:3d:0a:52:db:85:9d:f5:3d:
07:c7:f6:e0:45:da:72:00:5f:41:c2:e7:a8:b9:99:14:be:b5:
c6:2c:e7:04:2d:1a:5b:10:51:ac:27:31:b1:f0:23:0b:a6:03:
6c:50:6f:dc:01:4a:f0:0f:34:02:2d:c2:8b:56:eb:83:1a:f1:
16:77:ec:5a:e3:03:74:14:64:15:d3:f9:27:9c:34:90:f3:95:
95:03:57:7e:7a:d0:50:58:b5:d8:2f:1f:db:ed:78:e7:ff:17:
e3:d2:83:83:d6:23:5b:87:c4:df:e9:bc:42:e3:30:3a:5c:18:
25:8f:e0:a2:35:ea:cc:6a:dc:1a:2d:75:7f:ff:05:0d:e2:e3:
99:9d:0b:dd:aa:40:fa:51:21:7d:3e:6c:70:70:c4:09:89:e5:
f4:a8:2f:11:83:e8:e7:61:10:5a:04:53:cc:75:62:ca:96:8d:
d9:ff:bd:2f:a9:22:a6:34:5a:ff:50:03:b9:ee:1a:95:cc:61:
0d:59:51:57:58:5c:7f:a1:fe:10:b5:61:7c:a4:5a:88:67:9f:
4e:4f:56:2a:c8:ca:59:b5:9e:03:68:72:aa:16:eb:14:47:27:
d9:4b:41:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:30 2026 by rpki-client