
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
File: vSMtmLoKMv17e4shg0wFGXb4ZGw.mft (raw, json)
Hash identifier: tXbTIk6JYN5ZLNexyaVnrWtwrpHlHcCuDaG+uWw78WU=
Subject key identifier: 0D:0D:9B:72:EC:F4:1D:45:EB:96:4B:E7:77:8F:ED:BD:68:A7:4E:3F
Authority key identifier: BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
Certificate issuer: /CN=A91C4D37/serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Certificate serial: 0653
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
Manifest number: 064D
Signing time: Sat 28 Feb 2026 23:19:42 +0000
Manifest this update: Sat 28 Feb 2026 23:19:42 +0000
Manifest next update: Sat 07 Mar 2026 23:19:42 +0000
Files and hashes: 1: vSMtmLoKMv17e4shg0wFGXb4ZGw.crl (hash: TTPi/u7at2xGy/RFrn/pFBh8s2YgEqSD9EnN5a9eqFw=)
2: 008B17CEC2B611EB80F1B27EC4F9AE02.roa (hash: OJhgtnyBtvNgNFE2yR8f0UuKA46Eiv6iy340sUTMaq4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1619 (0x653)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4D37, serialNumber=BD232D98BA0A32FD7B7B8B21834C051976F8646C
Validity
Not Before: Feb 28 23:19:42 2026 GMT
Not After : Mar 7 23:19:42 2026 GMT
Subject: CN=69a3780e-90ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:98:c5:51:88:2d:84:bf:ba:c0:2b:38:35:
e8:6d:ad:5d:99:b2:91:6d:42:ee:29:27:0f:52:4a:
c1:35:7c:d5:1c:54:7f:02:2d:97:c8:4c:7e:f7:bf:
54:42:a3:15:4a:e6:d8:7e:0b:4d:39:59:2f:13:2f:
87:ce:94:b8:f2:c7:3f:0f:eb:48:10:86:27:fe:ed:
3a:11:39:73:e2:b6:f4:fd:5e:af:2b:93:9d:3f:ce:
65:7c:3e:c9:8e:c4:5f:22:da:ee:d6:82:c3:e7:70:
e6:85:f0:f0:ec:ae:7d:5d:14:f6:57:79:a2:a9:7c:
6a:2b:3e:5b:70:cd:b4:cf:1b:82:94:14:66:4b:6f:
cc:3f:ea:77:fa:7d:07:a4:d1:46:bb:9a:d1:17:77:
b5:af:5f:be:02:99:f3:4b:d1:35:5b:eb:71:df:48:
36:38:42:86:be:00:3a:f1:56:88:8a:c1:0e:e1:e5:
30:73:0a:91:dc:04:2b:25:92:5a:a9:f0:86:76:3c:
4e:13:0e:57:54:89:15:16:e1:03:e7:1c:cb:b4:b4:
21:3b:5f:fc:54:53:1c:e0:6a:3d:05:22:0d:bc:91:
13:ed:af:7a:9c:20:9c:78:45:b4:16:14:58:f6:09:
f7:a0:da:e8:ab:c2:3e:03:8a:ab:a2:8b:7e:8d:c6:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:9B:72:EC:F4:1D:45:EB:96:4B:E7:77:8F:ED:BD:68:A7:4E:3F
X509v3 Authority Key Identifier:
keyid:BD:23:2D:98:BA:0A:32:FD:7B:7B:8B:21:83:4C:05:19:76:F8:64:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSMtmLoKMv17e4shg0wFGXb4ZGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4D37/8AE0F4ECC2B211EBB7E7AD66C4F9AE02/vSMtmLoKMv17e4shg0wFGXb4ZGw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:2e:76:a3:3f:db:7c:50:bf:3f:60:0d:77:a2:84:0f:c5:c6:
c2:70:32:f5:81:b4:32:af:75:f5:fa:5e:95:98:87:84:21:da:
3d:b1:03:e0:fe:da:e5:e1:6a:54:85:71:e1:83:0d:92:38:d5:
b0:a9:0c:7a:e3:fb:88:05:d0:6b:ad:cb:64:68:1b:60:14:8d:
8e:12:20:df:13:65:01:3e:f6:f3:f9:13:83:8a:55:25:e5:82:
53:6c:a7:c0:b4:b3:b4:f4:39:6e:34:b9:d4:67:c4:49:d1:03:
de:48:55:29:eb:21:69:21:ab:fd:64:d3:d9:d6:8b:85:47:53:
60:9e:9a:41:c9:97:fa:46:7a:81:0f:8c:4a:83:28:4f:ad:bb:
ee:0e:11:cc:00:48:b3:4f:8e:cb:62:95:a1:76:77:17:38:13:
99:58:54:49:85:a1:02:a9:74:f7:27:cc:02:90:66:4f:48:5a:
61:9b:fb:b3:50:25:4d:a2:c0:56:45:be:e6:4b:33:14:56:19:
7f:63:79:12:4e:be:c5:77:b4:f8:23:c6:68:f3:02:69:31:db:
10:21:5b:8a:25:57:a2:5a:07:62:ee:49:3d:94:85:77:4e:f4:
d7:a6:09:c6:31:ed:56:d1:96:e4:3c:a3:0e:9d:9a:23:d0:26:
cc:80:7c:a3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzREMzcxMTAvBgNVBAUTKEJEMjMyRDk4QkEwQTMyRkQ3QjdCOEIyMTgzNEMwNTE5
NzZGODY0NkMwHhcNMjYwMjI4MjMxOTQyWhcNMjYwMzA3MjMxOTQyWjAYMRYwFAYD
VQQDDA02OWEzNzgwZS05MGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqt+YxVGILYS/usArODXoba1dmbKRbULuKScPUkrBNXzVHFR/Ai2XyEx+979U
QqMVSubYfgtNOVkvEy+HzpS48sc/D+tIEIYn/u06ETlz4rb0/V6vK5OdP85lfD7J
jsRfItru1oLD53DmhfDw7K59XRT2V3miqXxqKz5bcM20zxuClBRmS2/MP+p3+n0H
pNFGu5rRF3e1r1++ApnzS9E1W+tx30g2OEKGvgA68VaIisEO4eUwcwqR3AQrJZJa
qfCGdjxOEw5XVIkVFuED5xzLtLQhO1/8VFMc4Go9BSINvJET7a96nCCceEW0FhRY
9gn3oNroq8I+A4qroot+jcaA/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA0Nm3Ls
9B1F65ZL53eP7b1op04/MB8GA1UdIwQYMBaAFL0jLZi6CjL9e3uLIYNMBRl2+GRs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEQzNy84QUUwRjRFQ0My
QjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012MTdlNHNoZzB3RkdYYjRa
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZTTXRtTG9LTXYxN2U0c2hnMHdGR1hiNFpHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NEQzNy84QUUwRjRFQ0MyQjIxMUVCQjdFN0FENjZDNEY5QUUwMi92U010bUxvS012
MTdlNHNoZzB3RkdYYjRaR3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcC52oz/bfFC/P2ANd6KED8XGwnAy9YG0Mq919fpelZiHhCHaPbED4P7a5eFq
VIVx4YMNkjjVsKkMeuP7iAXQa63LZGgbYBSNjhIg3xNlAT728/kTg4pVJeWCU2yn
wLSztPQ5bjS51GfESdED3khVKeshaSGr/WTT2daLhUdTYJ6aQcmX+kZ6gQ+MSoMo
T6277g4RzABIs0+Oy2KVoXZ3FzgTmVhUSYWhAql09yfMApBmT0haYZv7s1AlTaLA
VkW+5kszFFYZf2N5Ek6+xXe0+CPGaPMCaTHbECFbiiVXoloHYu5JPZSFd07016YJ
xjHtVtGW5DyjDp2aI9AmzIB8ow==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:14 2026 by rpki-client