
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json)
Hash identifier: SMQ0UmG9jxx0We6vVaK3RWDLe+7R+LWNc6DIePuXBME=
Subject key identifier: D3:DC:D2:58:56:F5:01:7D:70:9A:6A:BC:40:BE:C8:89:3A:3A:5A:D6
Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Certificate serial: 44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
Manifest number: 42
Signing time: Fri 17 Apr 2026 08:11:01 +0000
Manifest this update: Fri 17 Apr 2026 08:11:00 +0000
Manifest next update: Fri 24 Apr 2026 08:11:00 +0000
Files and hashes: 1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: 9rb7Mww82Z/D5M4T5fqK7Z7IKKMdJnSwon4TVX80P84=)
2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: tby1fxG8dty2Idd5oP0UTbPf2lfAkyvFDEToKB0Y640=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 07:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Validity
Not Before: Apr 17 08:11:00 2026 GMT
Not After : Apr 24 08:11:00 2026 GMT
Subject: CN=69e1eb15-d1fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:60:54:91:a0:94:8c:84:54:18:fe:00:c1:17:
b0:33:73:ea:64:04:f4:74:df:f6:68:d2:cf:96:88:
dc:f2:99:fe:92:04:be:9c:4a:93:a7:07:92:82:bb:
fa:b2:f5:67:a7:3b:42:5d:3c:83:fc:51:1c:92:37:
fb:23:5a:af:f1:9d:e5:b8:27:13:d4:35:d9:29:92:
b5:be:94:a9:dd:58:6f:c7:24:25:d6:ad:a5:fe:63:
f7:11:eb:b6:95:db:8e:ee:aa:f0:88:66:97:d0:86:
87:c7:05:a4:34:fe:fb:90:3f:f6:2d:bf:85:53:1f:
0b:7a:fd:0b:fd:05:0d:68:26:c7:e6:d0:6b:e6:2f:
79:3c:88:b2:9e:d1:91:d9:97:05:54:56:4e:30:15:
53:12:b9:9b:2b:7a:d7:d0:ca:9c:85:20:40:4f:48:
77:56:44:a5:63:13:44:71:ee:42:e9:36:13:44:bc:
f1:a0:3e:cb:d5:cd:d8:27:14:89:31:63:33:cd:1f:
35:43:45:7d:02:c2:ce:6e:4e:b2:d0:20:65:57:79:
52:83:ee:f9:95:48:53:16:0a:d1:50:1f:16:b4:16:
22:67:c2:d5:da:7e:bc:0c:2a:f4:44:02:84:6f:42:
cc:26:f7:50:c2:49:be:30:57:fd:3f:00:b2:e3:d5:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DC:D2:58:56:F5:01:7D:70:9A:6A:BC:40:BE:C8:89:3A:3A:5A:D6
X509v3 Authority Key Identifier:
keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:43:a2:10:61:00:44:84:80:45:51:a7:d2:62:d7:33:55:86:
0a:23:1b:b9:bd:74:d5:5e:5b:a4:93:04:c9:4e:50:3c:73:6f:
f2:bf:c3:79:7d:e5:61:89:e3:73:f5:cd:e7:f3:3b:f0:d8:4f:
58:5b:01:11:84:05:30:96:be:7a:9d:26:fe:09:e5:24:6d:f5:
79:8f:d8:a6:a6:85:cf:de:13:a8:60:2c:b5:01:0f:22:6b:27:
f4:81:e6:f5:0d:4d:29:a6:bf:04:4b:96:68:e3:4f:c4:f5:a1:
e9:e0:ab:d6:37:55:d0:89:e4:6d:9b:0b:4c:d8:44:6c:35:22:
79:90:f6:cc:93:c7:39:2e:15:0b:db:de:12:7e:a1:0f:91:23:
21:66:c4:d8:d6:8d:b1:7a:e8:ff:e7:cd:34:df:9e:b6:db:4e:
fd:6a:0f:3f:8e:f6:66:82:f4:ae:8b:76:c9:07:46:01:8c:59:
5f:34:93:04:bb:5e:98:ec:e3:78:c3:0b:ca:ef:16:45:e4:09:
05:a8:89:d0:ef:98:af:78:05:a0:8e:b3:8a:36:ea:c3:a5:bb:
21:ba:b7:45:29:c0:eb:fd:81:01:ab:8f:f8:3a:01:21:ef:15:
e2:85:c4:ba:23:16:d5:fc:66:f7:77:27:88:cc:8f:77:ae:4b:
d9:a7:d6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:13:27 2026 by rpki-client