
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
File: vz-8DaluLlE6qliBLGlLzQe43Xc.mft (raw, json)
Hash identifier: UQz472JXr+KVM4fJiAof47CPs5id27J/TkFrUq23HBE=
Subject key identifier: 99:C8:D1:41:73:DA:A6:D5:97:70:11:46:D4:BF:DF:61:10:B7:32:A5
Authority key identifier: BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
Certificate issuer: /CN=A91C7AC5/serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Certificate serial: 092D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
Manifest number: 091A
Signing time: Mon 02 Mar 2026 00:57:48 +0000
Manifest this update: Mon 02 Mar 2026 00:57:46 +0000
Manifest next update: Mon 09 Mar 2026 00:57:46 +0000
Files and hashes: 1: vz-8DaluLlE6qliBLGlLzQe43Xc.crl (hash: QGS3xtmRIZdSbeMpVXfg///DOuFs0mdCS4u9gLNEJeM=)
2: 5BC42F286E9F11EC90A66E2BC4F9AE02.roa (hash: Ra6aDzkRJ9CvQ2Xe9bv2r/5IA66OVXcErWzz8l4k4Jo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2349 (0x92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7AC5, serialNumber=BF3FBC0DA96E2E513AAA58812C694BCD07B8DD77
Validity
Not Before: Mar 2 00:57:46 2026 GMT
Not After : Mar 9 00:57:46 2026 GMT
Subject: CN=69a4e08b-9dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3d:a1:5c:95:16:56:29:96:13:78:de:79:ae:
31:19:66:4f:a4:3d:93:b3:c6:cc:27:af:e9:80:aa:
4e:08:13:f3:a6:72:f3:f4:d8:5d:27:47:5e:f8:ec:
17:9e:e9:06:c9:24:80:c6:4e:6f:5c:bb:db:be:d4:
7c:a7:3a:b2:8f:c2:ff:84:e8:8c:a4:6e:1e:b1:18:
6c:60:29:9c:70:2d:4a:73:cc:12:2e:e3:71:f6:1c:
40:9d:fe:a0:9c:72:39:e2:70:90:97:40:1f:92:f8:
a3:25:db:0c:30:ba:62:4f:51:e6:69:e4:70:ad:7f:
0b:36:12:8f:54:1d:e1:d8:66:34:ac:d2:2e:7e:9d:
2c:9e:3c:a3:82:74:73:ae:dd:6b:63:5c:5a:1f:f8:
9e:0b:e1:a5:f8:00:71:75:29:23:1d:f4:ce:d4:9f:
ef:35:34:b5:3d:68:7b:47:aa:5a:e4:c1:87:99:85:
51:32:85:a8:67:8a:37:9d:15:7f:c7:63:58:d7:d5:
2c:df:46:1b:d5:01:24:22:af:d0:67:be:5e:e7:65:
94:33:09:b8:62:cc:9f:7e:dd:2f:4e:2c:73:2e:d3:
7d:26:39:f9:18:a9:86:55:32:71:c7:7a:70:6d:af:
5b:8e:02:ff:37:6c:3b:20:b2:3f:39:5d:f5:53:95:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C8:D1:41:73:DA:A6:D5:97:70:11:46:D4:BF:DF:61:10:B7:32:A5
X509v3 Authority Key Identifier:
keyid:BF:3F:BC:0D:A9:6E:2E:51:3A:AA:58:81:2C:69:4B:CD:07:B8:DD:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vz-8DaluLlE6qliBLGlLzQe43Xc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AC5/A3EB5C00C0D511EA908C0178C4F9AE02/vz-8DaluLlE6qliBLGlLzQe43Xc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:e1:27:62:a7:9e:5a:4e:c3:ea:cf:05:75:f7:17:f7:a1:96:
0f:c7:ef:c8:4b:21:22:a5:e7:11:00:4b:2f:71:30:34:06:ff:
b5:83:ed:80:51:c0:a0:8a:b1:fd:90:5d:a3:2a:12:86:29:77:
10:05:e4:7d:84:f2:ac:3b:ba:e5:78:df:f4:35:ad:18:b9:42:
6c:54:35:bc:d9:0e:f4:c8:a6:0c:b3:cb:4e:b6:4f:ef:8a:64:
c1:29:b4:17:2a:16:fe:46:dc:93:7d:ea:c0:11:82:03:e1:7d:
c7:bc:23:df:ab:fd:52:b3:3e:1d:91:78:54:b2:39:9b:f7:2d:
1d:60:30:ac:03:af:4b:52:fd:6f:6e:20:a9:d1:90:12:b0:50:
be:1f:07:3f:a8:14:27:e6:a3:30:23:90:63:1a:92:51:f8:2e:
0f:50:35:d1:3b:af:0e:47:1e:28:70:35:62:0d:00:3f:d9:72:
1e:6b:37:24:c2:3a:11:5c:4d:77:d9:96:d2:5e:87:e1:e3:45:
b4:97:36:6a:6c:5a:ba:00:2a:b6:a4:3d:c6:f9:81:76:f0:74:
4d:d4:57:35:6a:81:b2:88:5d:ca:5c:94:ba:bc:76:3e:62:9f:
26:6b:72:0f:36:6c:0a:96:50:df:b4:fc:20:c5:43:cd:0c:db:
76:86:6a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:57 2026 by rpki-client