
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
File: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft (raw, json)
Hash identifier: 65LyQbRurYSSLJ91vnn9AL/BvfL4Nn16qGKsmBZqvHg=
Subject key identifier: 16:89:78:05:13:B3:AE:E2:D2:D7:EF:25:4A:84:04:44:97:05:31:44
Authority key identifier: BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
Certificate issuer: /CN=A91C612E/serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
Manifest number: 1487
Signing time: Mon 02 Mar 2026 02:12:20 +0000
Manifest this update: Mon 02 Mar 2026 02:12:19 +0000
Manifest next update: Mon 09 Mar 2026 02:12:19 +0000
Files and hashes: 1: vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl (hash: ivXUL9x+vWTX0wkwAnZkA+CN9Jz1wJH/I+wsl2sfjFg=)
2: 7C0FB3666B7F11F0A9B64752C4F9AE02.roa (hash: nHHzFrXJRcXIb2I9fczhxDS1jU+m1O4shauWLpm0dzk=)
3: CE9A1068FD0B11F0B45A79BF3A6F56BC.roa (hash: NKMZFolC9Hm7C/oEEm0Kbb0cMaxbYq9rJ+XoFzJAzo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C612E, serialNumber=BEA7E98C5A3FB5FBD830A4359441B4224727C72D
Validity
Not Before: Mar 2 02:12:19 2026 GMT
Not After : Mar 9 02:12:19 2026 GMT
Subject: CN=69a4f204-413e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:3d:0d:e8:f8:ed:b6:e1:e5:ea:80:f9:e1:
84:13:b7:99:4d:ae:ec:9d:63:e9:86:d5:7d:88:cd:
a2:7a:d8:a4:c6:6c:8e:19:a2:ed:0a:e4:21:db:7a:
89:d8:c8:8e:31:37:50:79:50:bd:4d:a6:78:01:22:
ed:7d:13:15:29:9a:f8:48:1c:2d:13:c0:d9:31:ba:
fb:44:41:81:c7:b0:a0:65:8f:de:d8:ab:f3:d1:25:
aa:96:99:2a:8a:1d:8b:1f:6f:9c:97:5a:93:2a:82:
83:1b:05:6c:8f:5f:9a:0b:d3:1b:74:e7:37:d4:5c:
12:65:a9:fc:47:f2:82:c8:e3:93:76:e8:98:80:18:
8b:44:ee:cd:f6:93:01:57:78:4c:fc:64:13:7a:2f:
e2:96:d3:81:c1:a6:fb:bf:af:b9:da:ba:a3:19:38:
c1:01:25:b9:ef:80:fb:dd:03:8c:27:d8:23:a9:3b:
e1:c4:6e:24:98:e5:5d:f1:57:79:e7:b8:aa:2b:35:
51:d0:1d:d1:5b:2d:b4:e8:7a:12:74:6d:2e:23:db:
dc:f1:56:33:87:37:73:fe:a1:c9:80:e8:c2:83:78:
fc:75:08:f5:0c:3a:36:9c:66:81:f0:1b:e9:97:f6:
90:54:1e:24:79:76:de:cf:5c:e7:36:fb:ed:82:4a:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:89:78:05:13:B3:AE:E2:D2:D7:EF:25:4A:84:04:44:97:05:31:44
X509v3 Authority Key Identifier:
keyid:BE:A7:E9:8C:5A:3F:B5:FB:D8:30:A4:35:94:41:B4:22:47:27:C7:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/vqfpjFo_tfvYMKQ1lEG0Ikcnxy0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:b4:a7:3e:f1:09:e3:ae:3c:86:ca:2c:34:29:60:95:5a:33:
54:ea:86:ed:85:d7:70:74:43:ff:cc:d8:82:1f:d4:33:6c:ea:
63:a5:06:7b:87:a6:6d:a3:d3:1a:ef:f2:dd:87:d0:df:e5:4b:
9c:ff:5c:dc:e3:73:c6:91:87:8b:be:91:32:8c:8d:55:a6:2e:
76:05:5e:03:c2:56:bf:dc:88:9d:22:0d:bb:7f:1d:48:b0:11:
ea:db:ca:49:68:8a:5c:16:9d:17:ad:f3:5e:3f:f3:86:1b:0f:
34:cd:ab:4d:f5:67:0d:72:b8:a3:a5:33:16:6e:15:eb:98:8d:
c5:33:12:a1:5a:16:2a:52:8c:6c:5c:73:85:c0:eb:ec:17:af:
5a:7a:c7:34:12:81:e2:18:a4:d6:a4:38:98:55:df:9c:66:cc:
d3:11:6b:b6:c7:ea:75:05:f9:39:d1:e5:80:31:03:da:98:37:
dc:f5:de:a0:2b:f0:b7:9e:c9:b1:e9:09:aa:e5:72:68:3f:23:
80:3f:b4:d9:2f:08:c0:e0:71:51:b7:9a:d8:f7:fe:13:25:37:
ac:68:33:df:26:cc:61:e8:fb:32:38:23:15:85:af:4f:5c:de:
e8:a4:a7:1a:00:50:79:db:e8:09:5b:fe:8c:d8:dd:25:a8:b1:
87:fa:57:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:00:51 2026 by rpki-client