
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
File: vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft (raw, json)
Hash identifier: 1BHTSpkpyjMqVQsJqMYcRKVqXAyNTUVcYhZCjCiklpA=
Subject key identifier: 03:36:3B:2A:5E:3D:72:69:4C:39:89:F4:6D:B1:A0:67:D8:34:8B:5F
Authority key identifier: BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
Certificate issuer: /CN=A91CB816/serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Certificate serial: 07AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
Manifest number: 079F
Signing time: Mon 02 Mar 2026 00:16:02 +0000
Manifest this update: Mon 02 Mar 2026 00:16:00 +0000
Manifest next update: Mon 09 Mar 2026 00:16:00 +0000
Files and hashes: 1: vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl (hash: wmxwZdlZaKmlIMayQuTj5Sb9BB4vOejujpgbX/p7Pvg=)
2: 122052A03DD811EBAE99F45CC4F9AE02.roa (hash: mtoKEHPZWLoyi/r8N8V2JGeY1kwSeTuX6aCOjVwyle4=)
3: 7D8845C43DD911EB8DA0EE5FC4F9AE02.roa (hash: 4xgzK7PrNpZAnd72wXzvBuPzMZA+sokeDoeYoGYDtEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1967 (0x7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB816, serialNumber=BD06BDBF8B0EEDBC9F07395A65254FCB8583989D
Validity
Not Before: Mar 2 00:16:00 2026 GMT
Not After : Mar 9 00:16:00 2026 GMT
Subject: CN=69a4d6c1-21ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:70:74:e1:fd:ca:3a:58:da:b9:f6:b9:e6:
d7:3c:06:e1:1a:43:92:df:f1:14:df:e1:0d:f5:7b:
7c:74:78:ef:f2:fa:a1:49:fb:73:7e:81:55:cb:0d:
f5:f3:f8:a4:56:0d:22:c1:92:f7:34:e9:e9:c4:c5:
89:57:b0:04:06:59:a5:58:41:7e:7a:1e:ab:c6:1e:
04:3c:8c:7b:51:7d:90:c9:49:84:96:fb:3f:d1:a0:
f8:74:15:cc:df:ae:7c:bd:dc:bd:c2:a9:e0:a7:7e:
a6:c0:5e:a3:e3:2f:d3:e6:dc:16:42:b3:e2:3f:f0:
70:64:31:54:d7:98:c2:eb:73:b0:03:c2:c1:be:71:
95:41:43:25:20:ba:bc:a6:10:02:25:cd:19:ff:23:
4b:db:7e:c5:7b:47:51:ed:ee:25:66:1c:23:ef:ad:
e7:d2:31:59:c9:ab:06:24:d9:e8:b9:1e:55:0e:6d:
68:77:3c:e6:fa:6d:f9:da:5b:01:3c:ea:78:72:21:
ce:bc:83:6f:02:09:cb:29:78:b5:d7:36:0b:07:8e:
69:83:86:dd:10:9f:fb:4f:9c:82:c4:47:27:f6:2e:
70:d4:98:b5:0e:f4:61:b5:2c:1a:e7:c8:79:61:d6:
85:54:e5:fc:38:aa:ca:1a:76:e6:af:c1:e1:87:26:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:36:3B:2A:5E:3D:72:69:4C:39:89:F4:6D:B1:A0:67:D8:34:8B:5F
X509v3 Authority Key Identifier:
keyid:BD:06:BD:BF:8B:0E:ED:BC:9F:07:39:5A:65:25:4F:CB:85:83:98:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vQa9v4sO7byfBzlaZSVPy4WDmJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB816/610466103DD611EBA0602C5BC4F9AE02/vQa9v4sO7byfBzlaZSVPy4WDmJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f1:2c:52:20:85:8c:d4:43:fe:2b:41:5d:f1:77:d0:fd:f1:
d8:d6:26:fd:16:f2:88:08:54:89:d6:1e:38:8c:a1:8a:15:40:
1a:61:ff:55:48:68:0b:97:bc:50:d1:87:43:92:a8:51:e3:d0:
f5:07:c9:c2:c0:f9:ce:33:2b:69:c9:c5:53:f3:be:38:35:aa:
7a:11:a1:73:b4:72:93:92:4d:c0:c8:21:d7:8d:6a:54:27:0c:
d0:58:3a:c9:c0:c5:26:80:cd:31:98:52:e7:16:8c:d8:44:6f:
0b:b9:02:0e:f3:0e:f1:10:f9:30:ec:47:69:fb:2f:15:31:45:
77:9e:fa:d0:78:20:7d:5b:d7:d7:58:e0:20:5c:ef:15:b4:b7:
da:74:b0:a2:02:55:77:81:07:66:38:4d:db:d8:52:97:2c:a5:
5c:3b:b2:a8:66:8a:76:1a:29:c3:08:9e:bf:63:1e:b7:74:a6:
9a:45:a1:65:8d:a2:05:f3:3c:61:3d:18:6a:36:0e:b2:4a:83:
51:75:91:bf:e7:79:8f:2e:f5:77:37:38:dd:bd:af:16:8b:19:
fa:ff:92:a6:10:a5:7a:c6:4b:d1:97:aa:1d:3e:1f:26:a9:86:
b2:d6:08:4e:c0:b2:be:95:6b:fb:0e:30:2f:5f:fb:57:0c:f8:
82:dc:ea:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:24 2026 by rpki-client