
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
File: VNOpVcw0GoQYFajN6hkK6lEC384.mft (raw, json)
Hash identifier: JTrM/cjolS6jeL3tOl/MnUKQsm+iwbkLU2G+eD9xfGk=
Subject key identifier: 34:39:DD:29:D9:14:59:E7:AD:97:74:B1:71:E7:6A:2F:00:F6:DC:8D
Authority key identifier: 54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
Certificate issuer: /CN=A91C1FAC/serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Certificate serial: 0D0C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
Manifest number: 0D03
Signing time: Fri 12 Jun 2026 18:13:39 +0000
Manifest this update: Fri 12 Jun 2026 18:13:38 +0000
Manifest next update: Fri 19 Jun 2026 18:13:38 +0000
Files and hashes: 1: VNOpVcw0GoQYFajN6hkK6lEC384.crl (hash: 49fUOqGUC8AeNypZxiaMB+hhcICKZqItRgvMUGeuIMQ=)
2: 86B7FE9005FF11EAB499A845C4F9AE02.roa (hash: CimA7kcPi/5547nh1YW65CDbGdKlvu8eSXBt/kVLyoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1FAC, serialNumber=54D3A955CC341A841815A8CDEA190AEA5102DFCE
Validity
Not Before: Jun 12 18:13:38 2026 GMT
Not After : Jun 19 18:13:38 2026 GMT
Subject: CN=6a2c4c52-1dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:a1:6e:34:ac:dc:93:a8:14:a5:3d:69:8e:
38:cf:07:3c:c8:50:af:da:19:69:39:1b:22:56:f1:
d2:db:c0:75:24:cf:d8:50:00:05:31:0e:1d:d6:f6:
d1:2b:13:81:8b:90:1f:98:f8:9a:34:b7:cd:67:bf:
8e:e9:b7:ea:77:c8:2e:81:fc:54:6c:ba:e1:d2:6e:
d1:e9:8a:89:ef:b1:98:7e:0f:e2:d0:43:fb:41:15:
59:84:d3:01:ae:50:bb:67:24:f8:84:ed:1f:05:d5:
0c:65:16:fc:c5:d0:3a:66:03:b5:b5:c9:12:fd:61:
37:45:19:69:a9:e6:63:50:3a:3b:c9:3d:7b:56:60:
40:55:f9:91:6c:34:44:d8:3a:24:54:72:2d:cd:a0:
fd:26:3b:9f:c4:b1:1f:ba:27:ab:cf:79:e1:85:f8:
b7:de:bf:3a:2f:4f:6f:f9:a3:36:b0:52:10:d1:66:
27:83:1b:6c:dc:06:b9:7e:e0:ff:b2:8a:f4:39:66:
40:7e:2f:4d:a0:52:c3:02:57:85:ec:40:f5:44:f7:
d3:3b:fe:19:56:f4:5a:fd:97:8c:40:fb:39:54:43:
ef:2c:4a:61:f8:c8:19:12:3e:fa:d2:dd:60:2d:ba:
d1:9e:1d:41:37:fb:57:e3:10:54:28:bc:26:0c:3b:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:39:DD:29:D9:14:59:E7:AD:97:74:B1:71:E7:6A:2F:00:F6:DC:8D
X509v3 Authority Key Identifier:
keyid:54:D3:A9:55:CC:34:1A:84:18:15:A8:CD:EA:19:0A:EA:51:02:DF:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VNOpVcw0GoQYFajN6hkK6lEC384.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1FAC/6819BF4205FE11EA8763C243C4F9AE02/VNOpVcw0GoQYFajN6hkK6lEC384.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0a:5a:57:a7:14:3d:53:65:d2:ec:bc:d8:4a:f6:b5:91:bd:
e3:c3:21:9c:58:3e:d0:59:60:dd:63:d0:3b:e2:2a:f3:d7:0d:
a7:c5:6c:34:1b:10:eb:42:75:81:f5:99:c3:30:18:b9:bc:eb:
02:37:0c:97:6a:b1:1c:59:8f:ef:64:0f:70:bb:41:02:57:58:
e8:06:7f:ba:d2:14:1f:33:2c:08:50:17:5a:19:be:34:bc:8f:
af:9d:b4:e5:0c:ad:62:f7:11:86:55:4f:19:68:fa:94:1c:59:
d0:8a:96:99:ac:17:c7:3c:d2:06:08:21:d3:98:6b:6d:f9:1e:
35:a6:e4:82:80:7f:d4:c4:1e:7a:20:fb:80:5a:97:b7:a4:2b:
f2:ec:f7:77:4d:02:a8:ff:bd:7e:16:ad:51:5b:77:7f:04:6a:
33:85:dd:6a:0e:78:62:ac:a1:3e:04:09:97:11:c6:0b:32:a1:
aa:4d:c9:d1:dc:34:19:df:07:7e:0c:ec:fc:6e:f6:9e:4a:74:
94:c9:fd:7d:ac:13:f8:e3:03:cd:86:00:c4:e2:ce:c0:24:20:
f8:8f:20:d6:00:5c:bd:07:35:c8:85:01:4b:fd:d1:85:e2:db:
1d:fa:d4:e0:a4:46:26:11:fa:94:e1:6b:f5:8c:c4:21:f9:dd:
07:d1:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:05 2026 by rpki-client