
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
File: VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft (raw, json)
Hash identifier: o2R40B0aosedVSWi3NatV311cXbp7g1zk6EYie4YVCg=
Subject key identifier: DF:CF:07:2B:44:5B:9F:E8:01:37:15:1F:22:D6:70:ED:A4:32:81:A3
Authority key identifier: 56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
Certificate issuer: /CN=A91DB782/serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Certificate serial: 01A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
Manifest number: 01A1
Signing time: Sun 01 Mar 2026 04:59:18 +0000
Manifest this update: Sun 01 Mar 2026 04:59:17 +0000
Manifest next update: Sun 08 Mar 2026 04:59:17 +0000
Files and hashes: 1: VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl (hash: 6E8dKRW3kmhXXYxqTjLQX9h2Bm2cRX3GSEbDGJfnJ/o=)
2: F4DE3470979B11EE901E210BC4F9AE02.roa (hash: fdTip7KBE0W3pKG2131dWHPNYEedkvXm8McPxmdQVeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DB782, serialNumber=56B65B809F5DAB3A5AB157CA0579FD8E16EDCFB3
Validity
Not Before: Mar 1 04:59:17 2026 GMT
Not After : Mar 8 04:59:17 2026 GMT
Subject: CN=69a3c7a5-801e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:34:c5:67:2b:f7:76:89:1f:70:54:2e:31:cf:
94:53:34:d5:77:32:c5:ff:a2:fd:e1:db:eb:ee:9d:
f0:07:63:cf:47:0d:b4:cc:7b:b6:97:11:d5:c2:cd:
da:e4:f1:a4:b6:68:91:33:40:b8:32:78:b6:db:7f:
40:62:c5:b0:bd:85:04:d1:41:7a:40:8c:c5:b2:2f:
d7:9a:b4:e6:30:92:ba:93:a4:69:98:fc:19:ba:30:
87:4c:b6:14:fa:e8:65:60:f5:af:fb:cf:dc:2c:65:
a4:26:06:42:3c:99:62:d7:43:b4:82:b2:75:7b:12:
e7:d0:da:55:03:0e:0c:bb:68:ad:5c:5c:e2:7f:6b:
30:08:e4:c6:98:dc:a6:f4:5b:bc:67:5d:d4:ed:42:
dc:7b:66:dc:37:bf:53:e1:d9:2b:9d:96:3a:76:5e:
c8:bc:d3:04:3f:45:e7:cc:12:ea:b5:8c:b7:f6:32:
90:65:8f:43:93:59:fc:e0:66:9e:ee:c8:d8:76:9b:
1b:c4:37:f1:28:b5:5a:6e:95:22:bd:c6:f0:30:80:
ec:01:f3:b9:43:ad:dc:c7:9d:bf:1b:bf:bd:b0:97:
a0:0a:7b:64:5b:97:47:fe:a8:fc:d0:e4:cb:4b:ab:
05:1e:48:05:d8:5b:c6:7f:48:40:9d:08:d9:54:9b:
2c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CF:07:2B:44:5B:9F:E8:01:37:15:1F:22:D6:70:ED:A4:32:81:A3
X509v3 Authority Key Identifier:
keyid:56:B6:5B:80:9F:5D:AB:3A:5A:B1:57:CA:05:79:FD:8E:16:ED:CF:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrZbgJ9dqzpasVfKBXn9jhbtz7M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB782/9FEDCF5C979B11EE989E600AC4F9AE02/VrZbgJ9dqzpasVfKBXn9jhbtz7M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1a:61:07:3a:5e:02:6f:8c:60:01:80:90:67:c3:24:96:34:
57:4c:0a:75:fd:95:d0:50:0f:f8:08:a4:93:fd:6e:8c:9b:c8:
ca:b8:75:09:8a:fc:1f:d0:95:be:dd:03:b8:f1:06:12:91:d5:
f0:42:43:74:5f:53:90:8f:06:41:65:0f:a1:25:33:88:07:08:
34:b4:10:79:7a:55:4b:21:7f:e6:7d:4f:49:f4:15:87:70:84:
55:8f:8d:9a:9c:d4:6a:14:11:98:31:b4:b1:02:91:ad:94:e1:
53:9d:18:9e:21:d7:7a:40:24:98:91:e5:13:5d:f0:60:fd:1d:
38:5e:87:7d:2f:30:ac:e2:a0:26:6f:46:83:fa:25:2e:01:24:
01:c7:34:16:76:65:3d:52:85:2a:78:71:31:12:82:eb:d8:a1:
fd:49:83:31:99:c2:f7:c2:4b:38:58:4e:45:d4:eb:77:cd:96:
70:a7:31:b9:d2:1b:a6:ab:d7:c5:7e:3a:f7:02:91:30:47:b4:
a5:9b:9f:6f:32:e2:99:8c:c8:de:3a:2b:b2:ec:f6:ef:d2:c5:
22:d3:15:40:24:0c:36:85:66:d8:e0:36:38:b0:21:93:27:58:
97:c0:a5:59:3e:1b:de:ec:de:65:0c:62:4a:fa:30:cc:b3:e2:
0f:63:b7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:44 2026 by rpki-client