
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
File: vGOOV8p7khRPunE61ttk5tCtSZE.mft (raw, json)
Hash identifier: wUjCVmu+faJ3S85Ku3BM3zu74HiC0dsq7v3ykqyA8uM=
Subject key identifier: 6D:68:E6:49:AC:11:D0:BB:FE:C1:E0:AB:F9:83:DB:EE:77:5A:6F:A0
Authority key identifier: BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91
Certificate issuer: /CN=A91D31B0/serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991
Certificate serial: 0348
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
Manifest number: 0340
Signing time: Fri 17 Apr 2026 00:53:06 +0000
Manifest this update: Fri 17 Apr 2026 00:53:06 +0000
Manifest next update: Fri 24 Apr 2026 00:53:06 +0000
Files and hashes: 1: vGOOV8p7khRPunE61ttk5tCtSZE.crl (hash: kw5PY7vt0hB+t6Df3JTOsyYE6mdQ5XeqCzuaqNc/p8s=)
2: 7BB181E201BA11EDA4103D0DC4F9AE02.roa (hash: NnBviFT4TY6Qwr2zsDo63Z5Jckcd6G9/6LCOasbnkg8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl
rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D31B0, serialNumber=BC638E57CA7B92144FBA713AD6DB64E6D0AD4991
Validity
Not Before: Apr 17 00:53:06 2026 GMT
Not After : Apr 24 00:53:06 2026 GMT
Subject: CN=69e18472-45e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:42:53:cf:41:bb:37:fb:96:d1:54:a7:15:
e8:84:d3:80:e6:31:64:b5:b4:3f:53:81:66:40:a7:
fa:9c:cb:86:08:95:1e:24:ac:83:ce:6f:9f:05:d4:
56:16:bc:4c:13:72:e0:2d:37:35:f5:00:5f:69:db:
dd:db:c4:cc:15:81:a4:da:5b:f0:e8:de:52:d7:80:
45:33:b6:93:07:ef:bc:cc:d7:95:6d:26:4c:57:81:
32:ed:cc:37:97:92:0f:76:55:28:19:b5:c6:26:66:
39:cd:5a:95:4e:74:1c:0c:2e:d1:79:d2:6b:f2:ad:
3f:1b:17:1e:da:33:f6:f8:40:76:cb:7c:ba:0e:b0:
41:28:4c:59:96:76:94:c7:9f:84:42:e0:94:16:cd:
5e:2f:da:6b:5f:66:17:e9:44:cc:39:f8:19:70:a0:
f5:b1:17:b2:98:79:ed:7c:16:51:c0:cb:38:4a:e2:
b0:06:24:ec:1b:ee:79:ba:37:1c:ee:24:56:30:22:
f2:6c:5d:05:80:26:a0:19:df:19:e7:ae:63:0a:ea:
9b:b7:6b:00:3e:ad:e0:50:1b:39:97:37:a6:f1:ef:
d2:85:4b:a6:4a:3f:d4:4e:8f:9c:08:41:a8:9b:f6:
44:00:d8:8c:21:71:df:cd:00:3d:dc:51:1e:62:32:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:68:E6:49:AC:11:D0:BB:FE:C1:E0:AB:F9:83:DB:EE:77:5A:6F:A0
X509v3 Authority Key Identifier:
keyid:BC:63:8E:57:CA:7B:92:14:4F:BA:71:3A:D6:DB:64:E6:D0:AD:49:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vGOOV8p7khRPunE61ttk5tCtSZE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D31B0/15CF5A8801B611EDB1A4D282C4F9AE02/vGOOV8p7khRPunE61ttk5tCtSZE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:c7:55:b2:ab:25:29:36:6a:2a:af:62:85:2c:99:a9:52:56:
4a:74:0f:d2:19:92:40:37:57:93:f1:b9:39:ba:00:5f:98:a7:
62:f2:ef:c4:72:23:18:75:cb:a3:8c:e2:d9:0c:0f:95:ae:e1:
93:a3:fc:44:d3:49:d1:78:dc:0b:ca:a9:c5:b8:eb:1d:59:33:
01:8a:f7:58:b8:42:84:35:3b:1b:c3:dd:17:3f:57:7a:3c:ce:
d7:df:23:53:24:93:d8:50:78:d6:44:47:e1:a0:36:46:63:aa:
65:18:ef:6e:d1:0a:e6:f7:fc:b9:13:09:54:f2:9c:1b:eb:10:
e2:98:b3:91:48:0a:08:7f:75:68:68:a4:99:f3:c0:29:f8:ff:
c2:67:1d:d1:6b:f7:f1:b2:8a:d4:59:7d:5d:17:51:bc:fe:b7:
e9:52:ec:78:15:a3:3c:86:6c:46:1c:80:ef:6b:fd:a3:13:48:
b9:8c:57:9a:63:b3:3c:26:54:45:87:0e:7a:f5:c5:66:60:13:
6f:a4:28:34:38:97:9a:04:aa:55:b9:b7:5d:79:7c:12:13:c4:
c0:5f:2c:9d:df:52:f0:1e:07:bf:64:6a:3f:a7:c4:53:38:c3:
a2:f0:7c:83:f4:26:ca:19:50:93:a8:ab:65:8d:15:63:0f:e7:
3e:cd:35:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:23 2026 by rpki-client