
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
File: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft (raw, json)
Hash identifier: jCwALKKpX9mmPZNAebwUb7Z0m3edYQO+ghcVY9Zxlx0=
Subject key identifier: 6A:5D:21:B8:83:C2:81:38:C8:33:2E:65:BA:48:DB:48:DE:1C:60:1E
Authority key identifier: BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
Certificate issuer: /CN=A91E4EEF/serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
Manifest number: 27
Signing time: Sun 01 Mar 2026 10:15:15 +0000
Manifest this update: Sun 01 Mar 2026 10:15:15 +0000
Manifest next update: Sun 08 Mar 2026 10:15:15 +0000
Files and hashes: 1: vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl (hash: 5C0TSfwCHjCZUa1iVmTLffIzxcT7g4WgbbkVo+eqHNU=)
2: 8C5382D6DEF511F0A9861D4A586F56BC.roa (hash: vjfsamXqkXFmxfFh/f0yvWlnKb+B5x6VvVnf5hM9bVM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 10:15:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4EEF, serialNumber=BCEA9114DF936CDE894FC084F808CFD09E14F4B4
Validity
Not Before: Mar 1 10:15:15 2026 GMT
Not After : Mar 8 10:15:15 2026 GMT
Subject: CN=69a411b3-fd9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:5b:94:5b:0d:00:d5:b5:40:00:e5:e6:6a:
d9:6e:d5:ae:70:2f:1c:3d:bb:bd:63:84:5d:ff:9c:
79:de:eb:32:1f:6d:a9:92:ef:0a:9c:01:9a:61:59:
d7:1f:51:bd:ef:b3:27:17:0a:25:c9:be:9f:d7:2b:
ea:86:75:6c:9b:af:3a:13:50:e2:f5:d4:4f:4b:02:
34:18:b2:b9:3b:8b:7a:63:83:28:a3:b9:2d:e7:63:
34:dc:d9:b7:d8:ae:0c:70:96:db:7e:44:19:aa:e2:
cd:00:32:07:95:ef:94:55:af:11:1c:55:76:4b:d5:
41:8e:ff:8b:4d:66:9d:ea:db:6d:b5:ba:b6:36:f7:
9a:d6:09:f0:5e:02:1c:5c:72:cf:f2:7b:9a:f0:e5:
94:d1:51:78:7b:75:fa:85:21:44:c0:fc:51:e1:5e:
fc:eb:4d:a0:00:44:c0:14:ad:a6:1f:cc:95:ca:49:
8f:8d:91:7b:ab:79:6a:79:9c:b0:22:62:65:d8:6b:
02:9a:9a:a7:1d:3b:b3:45:6a:3b:3a:83:84:0c:1f:
34:36:87:1a:69:80:ad:5a:56:12:c8:2e:95:90:9e:
6d:85:1b:ef:a7:cc:87:5a:8f:02:cb:f1:60:31:87:
7e:0e:a0:c2:b0:9a:ba:90:18:fd:b7:11:89:08:db:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:21:B8:83:C2:81:38:C8:33:2E:65:BA:48:DB:48:DE:1C:60:1E
X509v3 Authority Key Identifier:
keyid:BC:EA:91:14:DF:93:6C:DE:89:4F:C0:84:F8:08:CF:D0:9E:14:F4:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/D7105BB6DEF311F09ED41296576F56BC/vOqRFN-TbN6JT8CE-AjP0J4U9LQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a1:91:eb:b1:63:6a:62:c9:6a:2e:eb:a1:51:73:87:74:f6:
3f:41:b5:12:6f:74:b2:96:00:1f:2c:83:af:c2:09:ec:f3:2f:
b9:d4:36:b5:76:43:81:f0:14:78:b7:37:98:bd:d2:0e:b5:93:
2b:3a:ef:f3:1a:d3:4e:7b:a0:91:3e:0e:48:0a:a0:26:12:63:
d2:02:05:57:fc:d6:54:3f:a8:ed:77:c4:57:3d:85:4f:5b:04:
aa:6e:7c:61:91:c4:e7:49:44:4d:7f:d7:78:4a:6c:40:67:39:
b9:49:6c:7a:b9:3b:6d:5a:26:b9:32:0f:7e:06:39:23:08:c7:
17:6d:0e:df:f8:23:8f:a2:a5:e4:61:f9:25:be:a8:d0:13:18:
02:91:46:6e:c6:71:7a:8d:07:3c:32:20:93:30:ea:1c:15:8b:
c8:8f:08:df:0d:36:b7:76:dc:fd:30:eb:c3:53:24:fb:f2:48:
cc:1d:50:c1:67:22:9a:cb:c6:7c:2d:d6:c9:8b:20:4a:4f:83:
26:05:12:c8:f9:7d:87:c2:fa:2a:63:66:9a:6e:11:37:c0:a9:
1a:40:a3:15:ff:18:eb:20:fd:50:c2:53:3d:63:99:d7:f1:c7:
80:5d:2e:c0:09:17:97:97:10:45:48:ed:94:0a:89:2b:7d:fe:
a1:5c:1e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:53 2026 by rpki-client