
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
File: VzWraqwyeVRCT5_oyoUzQpnde8I.mft (raw, json)
Hash identifier: i2mkK5B26sEqFoAfcwy1nGNtTv0Uv8eEFjlh9PoZY10=
Subject key identifier: 1F:36:5D:1C:BB:69:78:7B:89:D1:B1:5A:AA:0D:23:67:3F:90:D1:F0
Authority key identifier: 57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
Certificate issuer: /CN=A91CE392/serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Certificate serial: 1006
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
Manifest number: 0FF8
Signing time: Sat 18 Apr 2026 17:22:41 +0000
Manifest this update: Sat 18 Apr 2026 17:22:40 +0000
Manifest next update: Sat 25 Apr 2026 17:22:40 +0000
Files and hashes: 1: VzWraqwyeVRCT5_oyoUzQpnde8I.crl (hash: 0VrDi2EzZKiQL9UpT1bQQIDhM9HvuB+8Vsxf3icDRMQ=)
2: F27C04B8779E11E997C0204AC4F9AE02.roa (hash: gcXkSl5BDm7BPmptXZao6xrfNU8xKrBthGWtRyIpA9Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 17:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4102 (0x1006)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE392, serialNumber=5735AB6AAC327954424F9FE8CA85334299DD7BC2
Validity
Not Before: Apr 18 17:22:40 2026 GMT
Not After : Apr 25 17:22:40 2026 GMT
Subject: CN=69e3bde0-e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:e8:78:ea:da:cc:df:6d:b0:32:1c:0a:4b:
13:d8:24:ca:82:54:1a:1d:71:23:2a:45:fb:0f:30:
0b:6f:74:2e:12:85:c1:8c:61:ab:7a:d8:2d:f6:a5:
58:da:53:99:e5:9a:9f:23:3b:40:ca:8a:a8:69:b4:
95:6b:f5:5f:76:56:f4:a1:8f:a5:db:f9:a9:0b:57:
6e:07:8a:a4:31:13:e0:27:e1:9f:94:6d:b8:17:49:
11:7b:f3:a8:b0:02:4d:dd:35:f8:b6:98:a9:7d:52:
b3:ad:c6:8f:88:75:33:4c:e5:9a:64:cf:9b:2b:1a:
9b:b2:57:19:12:23:25:8d:1c:c5:d2:41:c1:15:8f:
04:db:6c:58:cd:28:7d:47:ed:88:0f:22:4c:26:c3:
ee:8e:f4:fd:8a:d0:de:15:7e:ef:39:19:70:6e:d7:
0c:a0:1d:96:97:b4:4d:db:3b:12:db:be:25:d7:01:
9f:7b:37:5e:76:8f:c5:ea:45:e0:4d:72:9c:59:77:
5b:71:8c:17:26:82:44:92:76:7c:df:d0:0a:79:4d:
80:4e:39:b5:e8:7b:78:3e:57:a1:15:3d:95:26:9d:
6e:58:fd:22:ed:4d:7a:73:34:be:51:c4:c3:89:30:
6c:5a:9b:4b:d2:b9:16:8c:7b:e6:e5:55:e7:2e:4f:
09:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:5D:1C:BB:69:78:7B:89:D1:B1:5A:AA:0D:23:67:3F:90:D1:F0
X509v3 Authority Key Identifier:
keyid:57:35:AB:6A:AC:32:79:54:42:4F:9F:E8:CA:85:33:42:99:DD:7B:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VzWraqwyeVRCT5_oyoUzQpnde8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE392/6D6A2A286CD811E9B99FE329C4F9AE02/VzWraqwyeVRCT5_oyoUzQpnde8I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:0d:c0:9f:40:ad:97:34:09:4e:47:16:2a:10:59:3e:6a:56:
a9:63:1f:f7:0f:ed:5e:1e:45:f1:bd:a9:38:a0:d8:a5:b4:a0:
3c:df:8b:1b:fd:a3:f2:a4:7f:c6:c3:aa:8b:22:9d:25:ef:1d:
94:bf:d2:42:24:b6:9c:cf:1f:f6:69:c8:f8:6e:5c:8e:f0:09:
d1:d6:fd:42:51:f1:59:30:65:9b:b3:0f:2c:c2:ee:3c:1c:93:
00:a3:20:6f:7f:3a:83:8d:90:5a:e4:4a:62:95:89:29:aa:fe:
5e:ff:25:df:23:63:42:93:7f:17:02:1a:60:02:8c:22:93:e0:
73:c6:27:c4:88:16:95:24:cc:cf:b6:8d:a6:a0:87:80:bf:32:
be:28:cf:52:50:a0:49:ca:5e:6e:6c:a7:41:c2:3b:8c:5b:43:
4f:67:55:60:ed:a3:ac:05:05:da:84:af:55:02:d9:67:a3:4b:
99:a0:13:b2:87:e9:e4:a3:a3:94:6e:dd:cc:39:35:37:42:00:
e7:62:33:34:50:42:09:f4:7f:0e:cb:cc:c0:89:1f:fa:11:34:
60:df:6c:6f:bc:08:ba:51:39:26:c0:2f:3d:07:3c:b2:d9:74:
5c:8d:18:50:53:57:11:9d:4a:0f:86:93:ba:c2:a8:af:45:47:
dd:74:4f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:13 2026 by rpki-client