
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
File: VSG7pLlnmYQnwoK61rZvfm22twc.mft (raw, json)
Hash identifier: DqzSIu74btJOLrmGd03bLLlngA3rMDLkSswLqAhc8G8=
Subject key identifier: 63:71:FB:68:A2:23:EF:33:BB:8F:B4:48:3A:41:18:58:29:D9:A6:07
Authority key identifier: 55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
Certificate issuer: /CN=A91C7836/serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Certificate serial: 32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
Manifest number: 31
Signing time: Tue 13 Oct 2026 09:27:14 +0000
Manifest this update: Tue 13 Oct 2026 09:27:14 +0000
Manifest next update: Tue 20 Oct 2026 09:27:14 +0000
Files and hashes: 1: VSG7pLlnmYQnwoK61rZvfm22twc.crl (hash: ooNV84JlCENihSto8dl4tVZv7NyjZCj9v48Dv9xKlrY=)
2: 33A082DA948D11F1A5BE36406611F970.roa (hash: Zrbzfz5Z2TeRzK/kWg662lvjXfu9AESyGMfzdvdsjVE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 09:27:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7836, serialNumber=5521BBA4B967998427C282BAD6B66F7E6DB6B707
Validity
Not Before: Oct 13 09:27:14 2026 GMT
Not After : Oct 20 09:27:14 2026 GMT
Subject: CN=6acdf972-11ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:bd:01:a4:a1:c7:f2:f2:8f:8c:fe:c9:04:
20:3c:ce:17:8e:f3:f6:68:9a:3a:6a:2c:0f:ae:31:
9e:37:c7:4e:6c:a3:18:f5:22:c6:0d:09:26:8d:67:
91:1a:25:f1:0d:ec:43:75:4e:f2:5c:54:68:a0:01:
31:a1:75:d6:a1:08:a8:c7:d6:68:ee:07:9d:52:a7:
56:85:8a:a8:fd:14:f2:10:52:b9:5c:3b:22:ab:8a:
45:88:75:4e:da:be:90:a5:0a:81:86:18:a4:00:57:
4d:62:a6:36:b5:11:9b:a6:9b:88:fb:30:ca:16:27:
d3:ea:06:9e:7a:d8:42:8a:c9:aa:64:b1:bb:07:a9:
ea:8d:a5:6e:3d:34:02:c9:9e:e0:9c:64:16:88:13:
b7:53:1d:5e:90:7c:b0:08:96:0e:56:86:ff:8b:82:
21:59:5f:87:a2:88:b7:38:6e:8d:84:c2:cf:44:6c:
fb:9d:9e:78:b9:b4:96:f2:f8:a7:2f:e8:a4:a5:33:
fb:7d:85:07:6a:d5:cb:2b:de:6a:d9:f1:c1:ac:d3:
d1:52:54:d5:28:24:44:3d:b1:64:f2:d3:e3:6d:7f:
f9:21:96:e7:9a:c4:8f:9b:41:d4:c8:67:a2:ec:e5:
ee:f2:3e:fe:18:d7:92:f1:1b:81:b8:be:d4:19:22:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:71:FB:68:A2:23:EF:33:BB:8F:B4:48:3A:41:18:58:29:D9:A6:07
X509v3 Authority Key Identifier:
keyid:55:21:BB:A4:B9:67:99:84:27:C2:82:BA:D6:B6:6F:7E:6D:B6:B7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VSG7pLlnmYQnwoK61rZvfm22twc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7836/074F396E801611F18A76BD785BA30FBC/VSG7pLlnmYQnwoK61rZvfm22twc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:1d:56:27:c0:06:b1:fc:a0:cc:97:47:1b:46:bf:85:72:
5d:c6:8a:3f:7a:2e:06:c4:5a:d8:9a:4a:79:a6:f4:58:6a:a1:
51:48:1a:e1:c3:df:cc:92:18:ae:c4:d0:01:e5:7f:49:7d:28:
ef:08:79:7a:d1:b0:27:48:c2:79:01:2b:51:15:70:1c:34:58:
a3:fb:1d:62:ef:c9:dc:e2:9c:73:66:1b:44:48:41:84:e0:3f:
b1:54:e9:87:5c:a4:b0:cb:76:ad:e9:f4:67:c8:b6:06:46:8f:
16:e0:3a:1a:f1:c0:f9:bb:a3:3b:59:7e:e6:33:74:2d:cc:73:
fa:a1:14:68:4f:3b:b7:61:62:82:4a:3b:46:27:ad:21:b9:2c:
08:32:22:fd:ee:8b:35:97:69:2a:9c:72:d7:46:e1:8d:a2:b7:
7d:bc:28:38:fa:16:d8:34:c2:f4:ac:65:91:01:bd:2b:bd:e7:
67:00:1e:df:c3:fd:0b:b1:e1:9f:6a:2e:7e:34:79:82:8c:d9:
73:aa:f8:ad:e9:bb:b7:1e:aa:8d:95:ea:26:b5:31:36:19:57:
89:f0:7e:67:50:92:35:59:59:94:99:3f:c3:c5:56:62:dc:1a:
ab:5b:66:7c:eb:d4:73:ee:ff:ac:9a:be:87:99:f8:9d:61:d9:
32:46:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:38:32 2026 by rpki-client