
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
File: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft (raw, json)
Hash identifier: aeKAFAVRxjwrHqvDXsWVa0B8ZM7gPvJY0GADEUF23E0=
Subject key identifier: C2:6F:9C:74:CE:1F:71:87:80:EF:0E:6C:47:A6:C1:7C:C5:E9:17:44
Authority key identifier: 57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
Certificate issuer: /CN=A91E331D/serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
Certificate serial: 04E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
Manifest number: 04DD
Signing time: Thu 16 Apr 2026 23:43:31 +0000
Manifest this update: Thu 16 Apr 2026 23:43:30 +0000
Manifest next update: Thu 23 Apr 2026 23:43:30 +0000
Files and hashes: 1: Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl (hash: WQfzNN52cIsZoxbMY2nQg1oNjYYUgm6MFNCCHT4lP9U=)
2: DBE8B4205F0F11ECA6315D2AC4F9AE02.roa (hash: l0NUWEUPjisvKhFGpflwXULabo5GNsblx0h91Os9bCo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl
rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1252 (0x4e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E331D, serialNumber=572E760DBCE6D65553098B017EFC32ECB1CECAE1
Validity
Not Before: Apr 16 23:43:30 2026 GMT
Not After : Apr 23 23:43:30 2026 GMT
Subject: CN=69e17423-d68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:fa:2a:6f:b6:fd:72:28:f7:6a:f3:71:51:
95:1f:65:52:f1:6d:62:72:d9:3c:c7:e3:31:68:2e:
f6:ad:3a:c1:b7:22:1c:77:1c:06:f1:06:44:94:d1:
ad:d8:ec:ed:f1:a6:04:68:48:a1:0e:94:8e:da:18:
54:5f:a8:25:48:d5:02:7f:26:95:bf:20:61:2e:03:
51:e0:40:1b:dd:a3:3f:4f:79:98:84:88:c3:1b:6e:
fc:b5:0f:db:28:4d:c8:21:f4:cf:6a:e3:27:e0:da:
4d:29:da:a5:e2:ed:07:c6:eb:96:5b:2b:ed:ef:5a:
a7:4e:76:61:9e:36:83:6a:e4:65:d3:92:aa:4b:62:
b9:db:68:69:8d:e0:0f:e2:c4:3c:bb:50:5a:2f:9b:
0b:91:71:d1:d1:f2:37:fa:4f:88:0f:c4:7b:aa:53:
f1:d7:13:e7:48:5a:ae:68:b2:a7:64:3e:b8:a9:c1:
69:3c:1a:3f:28:56:42:94:05:2f:3a:e3:cc:5e:37:
f6:61:87:ea:1c:0c:c4:aa:1b:1b:63:6c:45:41:56:
44:7a:fa:71:58:30:3e:ff:9a:8b:bb:8e:b7:0b:f6:
f5:32:1d:de:de:51:31:e4:67:58:ca:f3:5c:0c:eb:
1b:f5:ad:fb:cb:d2:ca:12:3b:24:a8:50:5a:48:1f:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:9C:74:CE:1F:71:87:80:EF:0E:6C:47:A6:C1:7C:C5:E9:17:44
X509v3 Authority Key Identifier:
keyid:57:2E:76:0D:BC:E6:D6:55:53:09:8B:01:7E:FC:32:EC:B1:CE:CA:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E331D/E7610CCE5F0C11ECA9144426C4F9AE02/Vy52Dbzm1lVTCYsBfvwy7LHOyuE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:db:fd:2f:a4:b4:36:32:5a:ef:77:eb:12:5a:f4:fe:7e:ab:
e7:7a:6b:47:1c:fc:ed:40:9b:59:4b:b3:9e:f3:16:41:35:77:
54:bb:e2:16:b7:00:68:b0:70:ef:38:83:48:5e:1e:d5:5d:1e:
c7:b5:cf:a2:62:d7:b7:f7:91:62:3a:6d:ed:8e:d7:ef:7f:c5:
eb:3a:40:2e:94:2b:6d:fc:2f:8e:dc:76:d7:40:23:ea:cd:38:
3a:e0:9b:6a:97:b4:45:dc:8a:44:23:39:6f:ec:8e:4b:01:2f:
a8:7e:09:0f:60:d1:5c:54:ff:1c:2c:30:10:95:a6:f7:87:fa:
d8:8f:9b:b9:1a:43:b8:bf:c9:ff:99:39:6a:f6:87:45:83:c6:
a8:6b:d8:8f:f9:54:e2:9e:5f:ed:41:22:95:7a:f5:23:bd:ac:
94:9c:47:b5:53:48:6f:05:2c:64:68:04:f3:91:e3:b0:09:23:
d1:a4:09:7b:a9:fe:6f:31:1c:b7:3a:3d:b6:5f:22:da:05:0a:
60:18:3e:8c:23:42:87:c6:0e:ce:5c:33:fc:6d:a6:3b:50:32:
0c:5a:75:04:12:5d:ad:69:ef:a6:9e:aa:49:de:50:d5:5d:e0:
92:91:06:b8:13:20:81:d7:df:29:99:5b:94:21:9c:1e:50:9b:
d1:01:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:42:28 2026 by rpki-client