
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
File: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft (raw, json)
Hash identifier: Stjtnjsij4DVQa8TibCuj1w5oi4R7gyDNhvcExwqREU=
Subject key identifier: F4:AC:3D:87:20:22:E3:D8:E4:AE:1C:07:87:F6:8B:8A:FC:3D:B1:A4
Authority key identifier: 56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
Certificate issuer: /CN=A91C5B46/serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Certificate serial: 2671
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
Manifest number: 265C
Signing time: Mon 02 Mar 2026 01:11:58 +0000
Manifest this update: Mon 02 Mar 2026 01:11:57 +0000
Manifest next update: Mon 09 Mar 2026 01:11:57 +0000
Files and hashes: 1: Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl (hash: 6FbZZ0fkjCogdokIFY1vXJkcbUxJsUYdGWM35ANyypg=)
2: E21E1C6CF3EE11ECBAE10054C4F9AE02.roa (hash: EvkQZGsOKLPT6GJTtv/2h1/nVqPHeYBdzQ6KyMthrv0=)
3: E14BDC8EF3EE11ECBAE10054C4F9AE02.roa (hash: P5XBkAaQ6fg9N1Lc1Gm+eFkx/RrDfV8ArxGwal3XB8c=)
4: E2E360EEF3EE11ECBAE10054C4F9AE02.roa (hash: 10jn5VS1WlcXWyZZmMs98e8B9rmn7hYi6vRDRkzaWL4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9841 (0x2671)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5B46, serialNumber=56CD32D13F8CAE1E92F9C97F395F1A23ABB9C6F7
Validity
Not Before: Mar 2 01:11:57 2026 GMT
Not After : Mar 9 01:11:57 2026 GMT
Subject: CN=69a4e3de-a360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:33:27:3c:61:a9:ad:39:c1:c4:da:4b:a6:
9a:78:17:46:f8:61:9d:a8:a6:2b:5b:00:32:65:68:
56:4f:c1:05:70:53:3e:34:71:5f:77:25:d8:9b:09:
aa:96:fb:60:eb:f2:39:e2:d2:d7:8a:ca:94:9f:0f:
dd:56:96:be:3e:e1:1c:9d:85:9a:3c:c2:f5:69:21:
dc:3e:66:c0:c8:98:45:6b:0a:51:43:8c:83:83:b7:
54:62:a6:f3:ac:78:bf:70:57:d5:42:6a:4f:c3:b2:
68:4b:79:ce:b7:b3:2f:6e:55:86:27:46:7f:81:56:
38:e0:f2:51:21:a3:ef:7d:82:e0:82:fb:bc:c7:d5:
21:5b:10:33:a2:20:29:d6:cd:d9:77:2a:00:0d:7e:
a7:68:45:62:d3:9a:0a:82:90:47:71:c3:29:40:6d:
17:b2:5b:3c:6d:18:36:b9:d9:30:77:0f:d0:02:11:
60:03:75:65:50:c7:0c:d4:79:00:09:70:ed:28:69:
b2:34:7f:18:69:39:d8:32:0c:3a:a7:ac:44:2c:8f:
f0:9a:1d:93:74:ed:95:54:3a:ce:f4:e6:df:b5:28:
b3:6d:f9:f6:8b:dd:76:c0:17:47:7f:c8:eb:85:ac:
70:0c:66:84:42:8b:17:13:d7:60:4a:d2:d6:55:0c:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AC:3D:87:20:22:E3:D8:E4:AE:1C:07:87:F6:8B:8A:FC:3D:B1:A4
X509v3 Authority Key Identifier:
keyid:56:CD:32:D1:3F:8C:AE:1E:92:F9:C9:7F:39:5F:1A:23:AB:B9:C6:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5B46/BA0B8430028811E5AE1E4761C4F9AE02/Vs0y0T-Mrh6S-cl_OV8aI6u5xvc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:19:16:48:64:9a:c0:44:ab:08:58:42:32:51:97:64:e0:c8:
dd:cb:b0:67:46:43:10:0e:88:70:7b:4e:d3:50:bf:da:c5:08:
e1:8f:7c:d0:8b:74:6c:df:ca:b3:ad:9a:81:22:62:b3:ea:d2:
19:b7:8b:fb:71:8f:4e:e9:9c:35:ff:40:2e:5a:16:e8:e7:54:
ae:2c:15:82:9e:ea:0b:b8:31:04:9b:02:a0:0c:92:77:06:09:
9a:c8:00:bc:7d:e4:0b:0c:2a:41:95:ff:28:f9:f3:d8:06:97:
56:0c:90:88:9a:a6:76:c5:ed:58:61:23:ae:59:92:6c:a0:4c:
37:48:db:a5:35:1d:f0:94:a8:8c:ea:2b:21:89:76:29:0b:62:
fa:29:74:9e:76:0f:19:65:e5:56:e2:6f:23:1d:ab:a2:f5:91:
21:12:89:ac:b8:12:b4:86:ba:f4:fa:b9:05:2b:a9:d9:7a:0c:
13:f5:90:36:80:d6:9d:a8:d9:44:ce:2f:d3:18:28:08:5d:c9:
c4:f4:bd:da:5d:d7:41:98:f6:b6:9b:4f:a6:cf:95:31:08:e0:
4f:4a:33:e9:9a:f4:89:0c:4b:a5:af:4e:68:b8:c7:c2:e0:0e:
96:91:cd:8d:e2:c5:1f:eb:78:b9:be:40:14:9f:af:4e:16:10:
ba:21:78:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:50:06 2026 by rpki-client