
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
File: vkY_wZGbQUKyOCgTgn-3FtbukoM.mft (raw, json)
Hash identifier: gpqOTEb5l+u1fsnLiP5ahG7+Kd8edG/mYOuKcXPSAQU=
Subject key identifier: 82:3F:3D:2F:05:67:DC:CC:FF:20:35:56:5E:08:31:2D:E0:F7:6C:F7
Authority key identifier: BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
Certificate issuer: /CN=A91D40BF/serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Certificate serial: 0811
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
Manifest number: 07F9
Signing time: Thu 16 Apr 2026 21:06:56 +0000
Manifest this update: Thu 16 Apr 2026 21:06:55 +0000
Manifest next update: Thu 23 Apr 2026 21:06:55 +0000
Files and hashes: 1: vkY_wZGbQUKyOCgTgn-3FtbukoM.crl (hash: RcggUv50wp+JKee1eSi24z7Z5QtD681/2CconZMWWic=)
2: ACEBC29CC5B911EBB41FAF2DC4F9AE02.roa (hash: hEvbM2TDCEqoCuZAHKQXjeGPqQdN31EzYyfXKDjCAtg=)
3: 28543AA0BABA11EB8A51C234C4F9AE02.roa (hash: MXT5jcze9muAxIxhhOptgI/97lbgIlxVB1859ZI8SAI=)
4: 2798B9A6BABA11EB8A51C234C4F9AE02.roa (hash: na85BHLSVJrfFZCA8hXSu9PL6apmvY8kB85ybE30XtQ=)
5: 58E4A6E8B60811F0AF40B71EC4F9AE02.roa (hash: NWtw2IjiZwHzr7Ei9IeYyzwE1/5bXF8AdCPLNALzVv4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2065 (0x811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D40BF, serialNumber=BE463FC1919B4142B2382813827FB716D6EE9283
Validity
Not Before: Apr 16 21:06:55 2026 GMT
Not After : Apr 23 21:06:55 2026 GMT
Subject: CN=69e14f70-d98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:3a:59:6b:55:9c:84:48:70:d2:ca:7c:96:
c4:88:a2:4e:13:98:61:f9:28:9b:a5:ac:fd:c2:b7:
a1:94:c8:83:b7:7b:9a:ba:82:78:b9:54:7d:fa:80:
bd:87:9e:66:dc:7d:01:1f:9b:49:82:fd:5b:a9:8d:
4d:0a:8e:68:09:86:12:5f:9a:05:c7:9a:c8:d9:bd:
ec:e9:38:3a:b6:77:f4:09:74:cb:ec:c2:7b:d6:ee:
49:9d:f1:89:dc:ad:20:d5:0a:43:41:1d:78:0e:25:
4d:2b:b6:92:60:ca:7e:fc:1a:4d:03:52:9f:79:21:
1c:5a:39:10:55:bb:40:1c:a1:4b:69:58:cc:95:88:
ab:8b:e5:25:b1:ce:22:74:20:60:cc:b7:da:71:2f:
d6:a9:b4:00:b0:69:cc:ab:7a:ba:c2:e3:12:86:18:
df:d3:a6:89:1e:39:7f:e3:ed:04:af:dc:35:ca:6b:
7e:6e:0b:17:a5:ea:c3:8f:32:d7:7b:ab:83:b6:e1:
4a:76:51:1e:67:e1:83:b4:06:d8:96:09:11:3e:08:
cb:f3:be:c4:8d:a2:fb:a1:9a:94:dc:ba:43:12:b9:
18:cc:74:26:1f:a8:20:62:c5:88:56:91:f8:2a:34:
08:4b:89:3d:a5:ba:0b:e4:e3:83:9d:8c:33:d2:a1:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:3D:2F:05:67:DC:CC:FF:20:35:56:5E:08:31:2D:E0:F7:6C:F7
X509v3 Authority Key Identifier:
keyid:BE:46:3F:C1:91:9B:41:42:B2:38:28:13:82:7F:B7:16:D6:EE:92:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkY_wZGbQUKyOCgTgn-3FtbukoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40BF/27B7A28424C011EBB62B4387C4F9AE02/vkY_wZGbQUKyOCgTgn-3FtbukoM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:7b:81:b0:a2:f4:e1:c5:6f:06:6b:91:03:68:67:87:78:0a:
e8:54:8e:f9:04:43:8e:88:1b:23:4e:03:2e:1d:fd:e8:a0:3f:
aa:d3:f5:4c:f7:9d:bf:6e:40:07:64:61:4e:2d:8a:9c:0a:7d:
c7:6c:71:59:25:e6:af:e9:78:81:93:33:be:79:0c:1b:4b:d8:
33:26:3f:c0:c9:2f:76:07:a9:b7:2b:0a:da:7e:f5:60:e8:40:
70:6c:51:b4:93:79:18:07:7e:3c:8f:7c:3e:64:e3:c4:35:c9:
e1:44:5e:21:30:dc:75:50:3f:da:6f:e3:a8:a1:e5:e9:8b:49:
67:f5:85:65:6b:0d:f0:64:69:ef:f8:57:76:d7:35:3b:ba:7f:
dd:c4:43:a8:62:9c:b5:2c:ca:67:8d:73:6a:12:60:33:99:e3:
bb:22:45:74:09:df:32:5e:0d:f5:66:8f:b9:99:62:d0:95:ab:
da:a8:9b:d4:8e:c0:3d:4f:0c:70:72:b3:48:c1:28:d4:69:ae:
53:0e:09:b7:4c:72:7c:eb:05:76:e1:2e:1e:7e:05:29:f7:2f:
cf:c6:1c:5a:92:26:58:a8:b0:a8:97:30:1f:62:71:8f:4c:7f:
11:1b:09:8a:ba:94:8f:36:9f:98:4f:40:f6:6e:7e:5e:ce:00:
fa:a3:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:08 2026 by rpki-client