
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier: GtIBA97AjRlZfSt9GJU1gAveTQ40RHlhP9FYwNYXi+I=
Subject key identifier: 5A:1A:C5:DE:D7:8B:E2:DF:EB:7D:A8:81:D6:97:42:C8:0B:25:54:04
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial: 88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number: 86
Signing time: Sun 01 Mar 2026 08:55:56 +0000
Manifest this update: Sun 01 Mar 2026 08:55:55 +0000
Manifest next update: Sun 08 Mar 2026 08:55:55 +0000
Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: GxQu6FJNCZacE1lHDKC663jv/7mN0SHiQtEp5ErHvIU=)
2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: 0tAJU23FvpmwHToSwKHDbcdyjTNi9HpIYl7MTwLrwkw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136 (0x88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Validity
Not Before: Mar 1 08:55:55 2026 GMT
Not After : Mar 8 08:55:55 2026 GMT
Subject: CN=69a3ff1b-0633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6d:42:ea:3b:80:52:5e:de:36:02:ad:09:5c:
a0:ff:b4:87:1e:0e:7a:f1:56:5a:03:ab:af:56:10:
5f:45:b0:e7:55:99:da:e6:92:d7:2a:e7:28:19:e1:
84:2e:f9:24:19:ec:c9:b6:7b:4f:1c:10:50:d3:c6:
3d:8d:a8:42:2a:cb:cc:31:e4:06:02:78:ad:f3:da:
54:3e:33:6d:60:94:f1:10:6f:3d:56:e6:62:e0:a8:
91:ed:02:e1:de:fc:63:e6:0e:d2:93:f6:5d:5d:00:
95:93:73:4b:8a:29:a3:b6:e8:c3:a5:53:2b:25:50:
cb:a6:d0:e7:d7:8c:d5:36:93:c7:e3:ba:8c:16:9d:
8f:14:f4:6f:bf:16:7a:51:b0:17:11:48:e7:df:ed:
76:de:08:84:b4:82:c2:4a:1b:9c:45:be:02:d9:0b:
16:48:57:73:cf:dc:46:97:5f:3b:9c:ca:15:87:7f:
e6:34:4b:77:a6:b0:e0:58:ff:2a:c6:66:30:1c:ae:
52:7d:ad:dd:93:82:9a:c1:56:c8:67:1c:e6:88:dc:
47:bd:ea:10:14:db:08:3c:05:89:5a:bb:24:32:f0:
78:09:c9:6e:ba:24:58:82:03:1a:e4:0a:56:98:fc:
b6:f9:14:db:04:01:cc:2c:80:f8:4f:6e:f5:38:1d:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:C5:DE:D7:8B:E2:DF:EB:7D:A8:81:D6:97:42:C8:0B:25:54:04
X509v3 Authority Key Identifier:
keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:40:34:96:75:73:6a:c6:6f:75:a6:25:43:a5:68:59:be:c7:
bf:d3:07:21:58:e4:56:0c:3c:e7:a8:d8:a9:07:cf:18:83:b4:
cc:0b:83:0c:e6:57:16:61:25:18:b2:cd:98:54:f1:6b:bd:b6:
23:87:be:a9:3e:49:b1:e1:ec:9b:f2:1e:2b:8c:86:c0:c6:e5:
2d:69:ee:57:dc:bd:10:91:ef:75:c8:a8:89:6e:1b:53:c9:e4:
93:62:46:18:e8:5e:b9:21:10:b1:61:ff:fb:da:1e:56:f4:2a:
82:4d:e4:d9:e8:6d:c7:f9:c5:7c:85:76:dc:83:69:09:17:c3:
4a:cf:d1:49:5e:cb:8a:c2:07:15:a0:6e:df:2c:f0:36:f9:a5:
13:34:49:ec:61:7e:b5:63:bd:00:1c:65:5c:b5:31:dc:9e:fb:
b3:fa:89:ef:6f:80:d9:7e:8a:da:98:ba:b3:ab:b0:08:df:a8:
9f:e4:40:3f:46:9b:a6:04:9f:ba:99:a4:10:88:a1:b0:b4:34:
13:00:d6:5e:d3:00:fb:1f:fb:4b:3b:d7:95:84:b4:76:12:32:
78:a2:74:be:3e:0e:c8:e7:17:0d:7a:f9:c6:b4:11:15:a4:5a:
83:fd:98:c4:9e:d1:35:18:ba:90:91:cf:aa:04:fd:6a:a0:a3:
e6:67:9e:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVDQTkxMTAvBgNVBAUTKDU1REQ2QzFCRjFDNDQ3REYzQ0M4NjQwRDExMTJBOTZB
Q0FFMUY4MEMwHhcNMjYwMzAxMDg1NTU1WhcNMjYwMzA4MDg1NTU1WjAYMRYwFAYD
VQQDEw02OWEzZmYxYi0wNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz21C6juAUl7eNgKtCVyg/7SHHg568VZaA6uvVhBfRbDnVZna5pLXKucoGeGE
LvkkGezJtntPHBBQ08Y9jahCKsvMMeQGAnit89pUPjNtYJTxEG89VuZi4KiR7QLh
3vxj5g7Sk/ZdXQCVk3NLiimjtujDpVMrJVDLptDn14zVNpPH47qMFp2PFPRvvxZ6
UbAXEUjn3+123giEtILCShucRb4C2QsWSFdzz9xGl187nMoVh3/mNEt3prDgWP8q
xmYwHK5Sfa3dk4KawVbIZxzmiNxHveoQFNsIPAWJWrskMvB4CcluuiRYggMa5ApW
mPy2+RTbBAHMLID4T271OB2LKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoaxd7X
i+Lf632ogdaXQsgLJVQEMB8GA1UdIwQYMBaAFFXdbBvxxEffPMhkDRESqWrK4fgM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUNBOS85NkQ2MTFEMDRC
MEExMUYwQUI1NDIwMUVDNEY5QUUwMi9WZDFzR19IRVI5ODh5R1FORVJLcGFzcmgt
QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZkMXNHX0hFUjk4OHlHUU5FUktwYXNyaC1Bdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NUNBOS85NkQ2MTFEMDRCMEExMUYwQUI1NDIwMUVDNEY5QUUwMi9WZDFzR19IRVI5
ODh5R1FORVJLcGFzcmgtQXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAWEA0lnVzasZvdaYlQ6VoWb7Hv9MHIVjkVgw856jYqQfPGIO0zAuDDOZXFmEl
GLLNmFTxa722I4e+qT5JseHsm/IeK4yGwMblLWnuV9y9EJHvdcioiW4bU8nkk2JG
GOheuSEQsWH/+9oeVvQqgk3k2ehtx/nFfIV23INpCRfDSs/RSV7LisIHFaBu3yzw
NvmlEzRJ7GF+tWO9ABxlXLUx3J77s/qJ72+A2X6K2pi6s6uwCN+on+RAP0abpgSf
upmkEIihsLQ0EwDWXtMA+x/7SzvXlYS0dhIyeKJ0vj4OyOcXDXr5xrQRFaRag/2Y
xJ7RNRi6kJHPqgT9aqCj5meeqw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:27:23 2026 by rpki-client