
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
File: VGTkn1YOwQ1JdvbilhE7ryKoz18.mft (raw, json)
Hash identifier: Elj0INECxyl7FqoG2dhRaZuHf2XyiPrVHwdsIZz4kjk=
Subject key identifier: B4:F5:8C:6A:53:1D:EC:E0:D6:E3:BF:68:86:39:B1:6E:E2:D5:89:C4
Authority key identifier: 54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
Certificate issuer: /CN=A91E3F3C/serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Certificate serial: 021B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
Manifest number: 0215
Signing time: Mon 27 Jul 2026 04:30:39 +0000
Manifest this update: Mon 27 Jul 2026 04:30:39 +0000
Manifest next update: Mon 03 Aug 2026 04:30:39 +0000
Files and hashes: 1: VGTkn1YOwQ1JdvbilhE7ryKoz18.crl (hash: uFZH5hBHp2A9CvugRJs4Qp5tq5B/2NkEHjV3thADWuU=)
2: 7148438E5DC211EE954BE21DC4F9AE02.roa (hash: WP8HegPa5EokTKx706o1KpMqrQcLXlZh4ZkoerJ4FaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3F3C, serialNumber=5464E49F560EC10D4976F6E296113BAF22A8CF5F
Validity
Not Before: Jul 27 04:30:39 2026 GMT
Not After : Aug 3 04:30:39 2026 GMT
Subject: CN=6a66deef-5c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7f:73:48:b3:d4:b2:13:89:4b:c5:01:72:4d:
57:84:59:61:36:82:b7:43:2a:83:17:e1:62:60:65:
f1:da:ef:75:b9:51:3d:bd:08:d7:6e:b2:67:5a:3f:
e0:6a:a3:7c:f2:91:6b:a6:99:71:4c:b2:00:57:0e:
f9:5b:b2:e5:c6:50:3a:15:a2:fa:84:8b:38:9f:8d:
13:f0:fb:ee:c1:8c:2c:27:f7:8e:c3:1e:7b:3d:cf:
15:0e:6a:a7:5c:24:0a:e1:16:b3:38:9a:78:a7:c7:
e2:42:b6:da:d9:5a:2e:34:99:c6:bd:d7:b7:fa:50:
6d:33:d8:3f:f4:b2:03:5e:06:4e:e8:bf:fa:1d:83:
80:2f:cb:3a:84:c6:b1:42:9e:b8:08:8b:d5:96:3f:
00:78:35:91:eb:69:d0:bd:62:b4:00:d0:f2:6d:a2:
b7:7d:22:76:e4:d3:15:8f:32:53:4b:6e:94:64:98:
56:ac:be:44:2a:b4:e1:56:6d:cf:74:a0:fd:14:dd:
47:94:ad:e1:e4:a8:20:7f:e2:01:1b:a3:bb:51:4b:
f5:73:44:88:67:2d:a4:62:0f:2d:c8:87:84:4c:12:
24:7f:6a:73:2b:7b:25:02:ae:55:8f:b5:b6:4d:79:
d0:0e:a0:2c:65:e6:e8:32:0e:5f:ed:23:6b:65:a6:
98:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:8C:6A:53:1D:EC:E0:D6:E3:BF:68:86:39:B1:6E:E2:D5:89:C4
X509v3 Authority Key Identifier:
keyid:54:64:E4:9F:56:0E:C1:0D:49:76:F6:E2:96:11:3B:AF:22:A8:CF:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VGTkn1YOwQ1JdvbilhE7ryKoz18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/95513BA65DC111EE9894991CC4F9AE02/VGTkn1YOwQ1JdvbilhE7ryKoz18.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0c:a9:2a:76:3c:38:bd:62:04:77:e6:24:0e:08:03:17:31:
36:44:95:4f:71:75:d7:b2:cb:82:d7:a3:21:f7:1a:3f:1a:1e:
b2:1b:ce:24:70:98:dc:85:d1:a3:3d:85:99:63:33:b6:8c:76:
24:7c:f3:73:0e:a4:8f:29:cb:07:60:0d:4c:1f:a8:bb:45:df:
a6:8f:36:77:68:15:60:5f:30:c5:a8:c5:9e:7c:71:ce:05:93:
e3:cd:79:bf:07:f6:c7:8a:48:88:34:9c:e9:ec:6f:a1:aa:f9:
7a:e1:5d:0e:cf:32:c2:5c:4e:33:e5:79:32:a9:59:1e:e0:74:
75:ef:fa:e9:03:01:6d:39:12:ba:17:21:52:84:fd:e4:79:01:
e8:dc:6c:cc:90:8c:6e:06:05:37:8a:44:8d:3d:62:08:ff:e8:
38:b4:18:43:d6:2a:92:85:c3:63:c5:37:1a:1c:9b:22:9c:e5:
01:90:70:da:e2:5c:4c:21:89:b7:07:fd:d8:d2:f2:7d:70:39:
e7:75:a8:ef:5f:18:3b:aa:a5:cb:0c:c6:ba:3d:91:79:39:5c:
78:12:bc:4d:a8:56:7b:e1:b1:8e:31:fa:89:01:08:de:cb:bd:
24:2e:ef:47:f2:7e:8b:15:d0:40:68:d6:b9:6a:37:23:35:04:
39:4f:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:27 2026 by rpki-client