
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
File: Vd1sG_HER988yGQNERKpasrh-Aw.mft (raw, json)
Hash identifier: 2aov4F0L7zBIBVJdcPNfA6SK+K7NPLxEkF+WLR0OmDc=
Subject key identifier: 6D:79:64:03:CF:2B:5E:7F:E9:34:44:4F:E3:A9:BF:B6:C0:62:FC:74
Authority key identifier: 55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
Certificate issuer: /CN=A91C5CA9/serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Certificate serial: A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
Manifest number: A0
Signing time: Fri 17 Apr 2026 07:02:53 +0000
Manifest this update: Fri 17 Apr 2026 07:02:53 +0000
Manifest next update: Fri 24 Apr 2026 07:02:53 +0000
Files and hashes: 1: Vd1sG_HER988yGQNERKpasrh-Aw.crl (hash: 16gEdIreozaGph88SudF5qs1BXM4EZV/Nk63VqaLuZQ=)
2: 36B587404B0F11F0A2359B4EC4F9AE02.roa (hash: Np4RhG1xsJNFE2oTPHnRwfjk0sVMuj4yUU4qDWm5ytg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5CA9, serialNumber=55DD6C1BF1C447DF3CC8640D1112A96ACAE1F80C
Validity
Not Before: Apr 17 07:02:53 2026 GMT
Not After : Apr 24 07:02:53 2026 GMT
Subject: CN=69e1db1d-e8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7a:7a:23:31:9c:93:20:73:54:ef:c9:35:a8:
13:ec:0c:fe:cf:c5:64:95:1e:2a:08:6e:cb:8a:ca:
b4:c8:07:61:ae:b3:dc:da:67:4d:17:e8:05:6d:ea:
36:99:8c:18:ed:39:a6:dc:ff:c3:6a:f1:76:cc:b6:
33:13:ff:d6:e0:d0:11:5b:16:ef:80:dc:50:35:02:
4c:5b:25:2f:2c:38:ac:a6:6d:6d:36:6f:26:b6:de:
ef:ce:48:2f:d3:f8:8d:69:a8:07:b6:8e:07:15:0f:
f5:80:2b:e5:41:c6:3b:7d:2e:4f:30:7f:44:7d:50:
95:01:1a:44:6a:bd:63:c6:67:00:57:36:40:54:e6:
37:d9:d3:d7:62:d5:df:a5:82:c1:29:51:91:ff:0f:
8c:ef:d7:a0:cd:ba:77:40:85:55:a1:62:b7:89:94:
94:c8:11:7f:ec:f2:ac:49:4e:bf:30:41:89:48:f4:
65:47:94:83:67:12:1a:7b:82:e6:2c:37:92:16:4a:
45:84:fc:45:f3:5e:1a:82:4c:61:ed:ea:9f:b2:9d:
82:87:5e:db:ca:c2:f8:e7:cd:fb:12:f1:49:09:7d:
cb:2d:f2:45:11:af:1a:81:69:7f:18:de:24:2c:c5:
81:c0:b2:fc:7a:a6:5a:77:90:ab:3d:4f:06:57:b0:
47:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:79:64:03:CF:2B:5E:7F:E9:34:44:4F:E3:A9:BF:B6:C0:62:FC:74
X509v3 Authority Key Identifier:
keyid:55:DD:6C:1B:F1:C4:47:DF:3C:C8:64:0D:11:12:A9:6A:CA:E1:F8:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vd1sG_HER988yGQNERKpasrh-Aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5CA9/96D611D04B0A11F0AB54201EC4F9AE02/Vd1sG_HER988yGQNERKpasrh-Aw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:03:95:c7:2e:4a:43:6d:74:de:87:0a:b5:c7:cc:0a:a4:32:
03:e4:00:69:8e:15:0e:66:b2:5c:12:f8:14:62:d7:1e:38:ac:
77:90:ad:a7:60:cc:b5:44:ee:af:a1:53:71:18:53:e1:8a:a9:
11:1b:22:f7:ff:b6:3d:ff:48:ca:88:51:dc:0c:c9:e8:ab:03:
2d:a7:a8:89:4f:3a:f8:8f:b4:ed:86:8e:0a:e1:0d:bf:14:06:
c2:8e:ec:c2:4b:84:9f:d8:b2:b4:fd:af:71:12:19:fe:f7:1d:
19:4e:67:01:ef:23:69:be:b2:ff:b0:6a:6c:b8:c0:1a:a4:5b:
26:69:c6:ae:59:cd:30:ec:bc:dd:d4:9f:5a:cb:67:e4:13:3c:
75:bd:ad:60:83:a1:12:ab:0d:9f:34:e9:62:76:c6:06:ab:21:
5e:76:14:70:e3:4e:d5:e6:2e:09:41:ac:f2:30:b8:f8:4d:ea:
f8:f7:28:31:e9:e2:37:56:48:dc:3b:e9:90:f5:ff:f9:a7:6b:
cd:bd:38:bb:07:70:f6:21:0b:16:ce:08:77:23:cb:e5:6c:b8:
68:a7:73:6e:54:14:89:cc:47:39:d3:6f:2c:bc:a9:2b:c2:d8:
23:e3:88:19:e1:6a:31:55:be:e7:d6:e1:f6:e8:d1:a0:49:c8:
2c:6f:bd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:35:31 2026 by rpki-client