
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier: kFgbr2cV6VfWuZj2Rxt4SvE49+cFWWo+wr7FxeRViSk=
Subject key identifier: CA:A5:FF:88:86:1E:5F:2C:5D:17:04:AC:28:30:CF:D4:8A:ED:B0:8D
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial: 0867
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number: 084F
Signing time: Fri 02 Oct 2026 21:16:52 +0000
Manifest this update: Fri 02 Oct 2026 21:16:52 +0000
Manifest next update: Fri 09 Oct 2026 21:16:52 +0000
Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: BC4jRYRmF41WeB5Qcgphw1vPKJV7n0gIPzfwcOW5RN0=)
2: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: hEvbM2TDCEqoCuZAHKQXjeGPqQdN31EzYyfXKDjCAtg=)
3: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: NWtw2IjiZwHzr7Ei9IeYyzwE1/5bXF8AdCPLNALzVv4=)
4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: na85BHLSVJrfFZCA8hXSu9PL6apmvY8kB85ybE30XtQ=)
5: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: MXT5jcze9muAxIxhhOptgI/97lbgIlxVB1859ZI8SAI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 21:16:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151 (0x867)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Validity
Not Before: Oct 2 21:16:52 2026 GMT
Not After : Oct 9 21:16:52 2026 GMT
Subject: CN=6ac01f44-418f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:7c:6c:6b:0d:f0:45:70:03:8e:30:ba:96:
bc:e5:83:72:08:d8:0e:56:7e:a5:42:a6:bb:70:f6:
88:74:b2:e3:6d:57:af:30:cd:08:ea:0e:09:74:3e:
dd:88:9f:4f:0a:f6:e1:fd:20:71:59:5c:19:7a:8c:
f9:18:f8:48:ad:28:57:99:a3:31:af:56:20:81:cf:
8d:81:5c:42:05:18:96:fc:e5:59:33:ca:f6:fd:ab:
04:47:ab:8e:11:b1:9a:ee:dc:f6:4b:cd:b6:6d:68:
e1:08:df:69:30:f4:b7:28:bd:ca:86:5e:55:b4:92:
0e:f5:06:e1:56:5b:91:15:f1:8d:7f:67:2f:21:9d:
b7:e6:bf:e1:51:01:b9:6c:cf:c9:c4:01:15:8b:24:
fe:09:40:a2:11:08:47:2e:99:61:14:0f:56:e9:f1:
15:9d:8c:16:52:16:b8:20:51:97:f8:b0:50:23:7e:
21:cf:4d:08:44:a4:be:a8:76:9b:e0:6b:50:c6:f2:
f7:d2:3a:a3:f4:51:75:dc:f6:20:c4:ac:07:a2:2d:
8f:ca:5b:82:be:bd:a3:22:e9:28:0e:1d:11:3b:08:
03:c6:67:89:a6:68:6f:38:7c:e0:ef:92:e6:5c:d8:
06:58:d7:7b:c1:5a:71:43:de:62:8c:94:46:59:0d:
44:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A5:FF:88:86:1E:5F:2C:5D:17:04:AC:28:30:CF:D4:8A:ED:B0:8D
X509v3 Authority Key Identifier:
keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:9d:6b:7e:3f:12:9e:fe:42:d7:3b:8f:a6:88:5d:f5:6a:31:
7b:5a:43:59:75:ee:03:96:e1:5a:56:e7:4b:31:41:1d:2e:2e:
83:16:84:bf:8e:2b:1d:b9:a6:e2:7f:3b:76:e9:c8:1f:6f:70:
35:de:7b:9f:f7:7b:54:51:2f:0a:19:37:90:c7:b1:8e:09:70:
c7:cb:24:28:5a:5b:cf:f6:f0:5c:e2:21:cd:72:cf:5c:2d:bc:
7b:e6:64:ff:79:79:ce:b7:1a:e5:c2:38:2f:51:ce:80:ec:ba:
a6:d3:1d:e4:c0:92:a7:fd:c5:eb:8c:67:04:46:77:dc:47:5a:
c0:cd:e1:f6:1c:86:12:05:ab:b1:bb:5d:65:fe:47:1e:a0:ee:
d0:84:4d:c1:62:cd:2b:80:5e:46:8d:a6:eb:94:f5:45:d3:b2:
51:c1:88:70:25:a4:c7:11:96:19:ff:34:25:d9:17:c8:91:64:
22:46:4e:27:75:f2:c4:b6:b3:4c:b8:d8:48:5b:ea:9f:89:58:
ef:3f:52:5d:4a:86:a0:3d:33:c3:55:0d:d8:a1:e8:e2:0b:dc:
a3:a4:dd:77:b8:1f:9a:ea:1c:23:70:9b:0c:51:c3:a2:49:58:
19:38:06:b6:c6:9e:0a:a6:cd:c2:6b:a8:21:f6:5c:11:78:3e:
f1:f5:ec:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:29:20 2026 by rpki-client