
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: kaqqwj0rd/SU7cEudWZDFzeqCsUZiXIusHxfauTOSfA=
Subject key identifier: 02:ED:1A:9A:EB:97:15:E1:FA:38:55:FF:CA:E2:DC:92:B5:1A:05:6F
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 26C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 26AC
Signing time: Tue 28 Jul 2026 15:47:16 +0000
Manifest this update: Tue 28 Jul 2026 15:47:16 +0000
Manifest next update: Tue 04 Aug 2026 15:47:16 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: swP4DRwyuC696TFqb90dJG8MgSF7iOh6kJIMhQl8g+0=)
2: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: YYtbQVr1blBcfl0KXa9WX3fO1sfcPhFjjPvdgZB4tRs=)
3: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: M+Wr8rsuFkv+pEdccGdYS8z/By6LwokW8IQrKL2jIU8=)
4: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: /HZqYc+XrDRax1XWxnWWaDO8ZrVsGYFgHHVy0LG/zoI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9927 (0x26c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Jul 28 15:47:16 2026 GMT
Not After : Aug 4 15:47:16 2026 GMT
Subject: CN=6a68cf04-d939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:ce:d3:4a:ed:ca:c3:f2:bd:5f:9a:c8:c4:
83:cd:9b:a6:2a:50:61:0f:59:8c:a8:ae:e4:21:bd:
48:b8:9d:f9:b3:42:ea:ef:e0:ef:69:04:25:cf:f0:
cd:1b:12:d2:4d:f6:54:14:1b:f5:12:11:e0:f0:29:
83:32:06:48:e2:ef:70:68:fb:88:2a:0c:d7:7e:03:
f2:2c:1e:78:25:e5:bb:c6:95:69:16:3e:ab:7c:08:
cb:81:81:a1:37:8b:2a:6c:f4:e9:ad:60:34:e6:39:
ea:63:da:af:fc:3b:98:89:c1:85:82:ae:a1:09:b6:
53:ab:33:5c:87:a8:10:a1:6c:5d:7a:32:17:f7:43:
87:40:52:3f:db:42:1f:f5:f4:39:5d:00:11:46:52:
f9:d1:4a:76:4a:07:e4:86:78:92:8f:b8:2a:b5:6b:
84:c8:78:b0:39:d2:69:62:90:dc:b1:11:4a:a0:6b:
fa:1c:e1:31:05:cd:b6:23:c5:17:91:93:49:c4:6c:
02:08:68:9b:91:0a:6e:f2:40:0f:10:cd:f4:61:2c:
c4:5b:9d:9e:67:30:43:5a:57:6f:99:8d:3a:4d:c9:
be:43:f1:2a:a4:5f:4d:9e:63:d9:8f:cb:f3:85:0a:
71:2e:0f:94:0c:bf:f1:b8:e2:05:13:f8:31:6a:25:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:ED:1A:9A:EB:97:15:E1:FA:38:55:FF:CA:E2:DC:92:B5:1A:05:6F
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:15:0e:10:dc:60:3f:36:6c:90:0d:97:b1:02:00:6c:c8:53:
89:c8:b6:c0:20:3e:5f:30:c3:3a:63:f6:82:bf:83:ec:f0:88:
03:9b:6c:e1:a6:bb:bd:a5:3a:d8:ee:c0:ba:d4:dc:ae:80:bd:
85:38:66:ff:8c:4f:5a:a9:b4:e3:60:70:45:e9:1c:74:01:09:
d2:05:2f:27:b1:33:1a:5e:2e:d2:3d:78:f2:7e:ac:99:53:c1:
95:f0:33:e3:49:c5:5a:c7:82:6a:cd:89:86:85:c1:c4:91:ea:
9c:fd:d6:c0:be:6e:18:97:4a:ac:31:67:8c:9c:f3:bd:e6:5e:
5d:9a:3c:ba:7b:3d:2f:e9:6f:f3:22:25:b2:21:3b:ac:5f:03:
f6:cc:4e:72:d3:e0:5f:89:e8:d1:e5:fc:74:c1:b2:07:a4:62:
88:65:60:64:e8:0b:d7:39:d5:e9:40:68:0c:7f:3b:3f:26:df:
84:7f:d6:65:07:91:0e:c9:99:d2:3a:fd:fe:86:85:c1:71:5c:
06:5d:84:9c:d5:4f:47:2f:ad:44:e2:ff:08:97:b4:f2:9c:a6:
3b:7c:f1:7d:d2:8b:3b:4f:1e:dc:96:b3:cb:4b:9e:1d:34:2a:
1a:26:33:b0:70:38:5d:5e:17:9b:60:60:9a:36:a3:49:a9:37:
5b:00:b1:90
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVCNDYxMTAvBgNVBAUTKDU2Q0QzMkQxM0Y4Q0FFMUU5MkY5Qzk3RjM5NUYxQTIz
QUJCOUM2RjcwHhcNMjYwNzI4MTU0NzE2WhcNMjYwODA0MTU0NzE2WjAYMRYwFAYD
VQQDEw02YTY4Y2YwNC1kOTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArt3O00rtysPyvV+ayMSDzZumKlBhD1mMqK7kIb1IuJ35s0Lq7+DvaQQlz/DN
GxLSTfZUFBv1EhHg8CmDMgZI4u9waPuIKgzXfgPyLB54JeW7xpVpFj6rfAjLgYGh
N4sqbPTprWA05jnqY9qv/DuYicGFgq6hCbZTqzNch6gQoWxdejIX90OHQFI/20If
9fQ5XQARRlL50Up2SgfkhniSj7gqtWuEyHiwOdJpYpDcsRFKoGv6HOExBc22I8UX
kZNJxGwCCGibkQpu8kAPEM30YSzEW52eZzBDWldvmY06Tcm+Q/EqpF9NnmPZj8vz
hQpxLg+UDL/xuOIFE/gxaiWWXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALtGprr
lxXh+jhV/8ri3JK1GgVvMB8GA1UdIwQYMBaAFFbNMtE/jK4ekvnJfzlfGiOrucb3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUI0Ni9CQTBCODQzMDAy
ODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJoNlMtY2xfT1Y4YUk2dTV4
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZzMHkwVC1Ncmg2Uy1jbF9PVjhhSTZ1NXh2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUI0Ni9CQTBCODQzMDAyODgxMUU1QUUxRTQ3NjFDNEY5QUUwMi9WczB5MFQtTXJo
NlMtY2xfT1Y4YUk2dTV4dmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAghUOENxgPzZskA2XsQIAbMhTici2wCA+XzDDOmP2gr+D7PCIA5ts4aa7vaU6
2O7AutTcroC9hThm/4xPWqm042BwRekcdAEJ0gUvJ7EzGl4u0j148n6smVPBlfAz
40nFWseCas2JhoXBxJHqnP3WwL5uGJdKrDFnjJzzveZeXZo8uns9L+lv8yIlsiE7
rF8D9sxOctPgX4no0eX8dMGyB6RiiGVgZOgL1znV6UBoDH87PybfhH/WZQeRDsmZ
0jr9/oaFwXFcBl2EnNVPRy+tROL/CJe08pymO3zxfdKLO08e3Jazy0ueHTQqGiYz
sHA4XV4Xm2BgmjajSak3WwCxkA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:52 2026 by rpki-client