
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
File: vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft (raw, json)
Hash identifier: UKYifvpHSYQntNHtveZxV7NTgINZw2+AihXDKxzl7vc=
Subject key identifier: D9:0F:4C:BA:B6:E3:9B:88:5E:61:7B:80:7F:25:AB:36:33:76:A0:3A
Authority key identifier: BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
Certificate issuer: /CN=A91E5770/serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Certificate serial: 22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
Manifest number: 1E
Signing time: Sat 13 Jun 2026 08:57:22 +0000
Manifest this update: Sat 13 Jun 2026 08:57:21 +0000
Manifest next update: Sat 20 Jun 2026 08:57:21 +0000
Files and hashes: 1: vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl (hash: RnnvrClA3fX9TXs8sIFT3wGhNG3Pkir4hXj3BqpPCOc=)
2: 3CE623883D6F11F196AFC17AB1833773.roa (hash: fccdVhP6r3lPUb+xE1JqxAMJGmzw9RyVmsJhCi+Yhl8=)
3: 352D320E3D6411F19E142980AD833773.roa (hash: b9pEmQYeXoEvXcUHQWi3fHnQxMX2lT2vWA6aVsvzLk8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:57:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5770, serialNumber=BD43603F4CA68391A73D667DF6650E52369B7854
Validity
Not Before: Jun 13 08:57:21 2026 GMT
Not After : Jun 20 08:57:21 2026 GMT
Subject: CN=6a2d1b71-844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:00:cc:44:b9:9d:99:8c:0f:eb:92:7c:b3:1f:
86:ac:cf:c2:d7:ee:58:b4:79:47:9f:fd:e4:e6:9c:
b0:a7:32:ff:6a:aa:a2:25:b9:e9:5f:37:db:6c:4b:
e3:02:6b:f1:9e:d0:45:55:b4:12:ca:e6:d7:54:b5:
3f:a9:57:75:ff:d5:b7:0c:3b:77:53:7b:7e:af:71:
29:ef:f2:83:4a:09:6e:2b:20:8a:60:38:be:e3:c3:
e5:0c:b9:90:14:7d:23:85:57:7f:26:bb:12:ce:f3:
6c:68:0c:28:a4:54:da:ae:dd:43:c3:bd:5a:f4:c7:
af:1d:3e:b2:a5:e3:c1:ae:39:71:f3:a7:37:31:b8:
6c:76:66:c9:e3:d4:68:cd:e5:c5:b2:2f:57:bf:63:
74:ad:e5:52:f5:3b:ff:04:fe:06:ba:58:58:ef:28:
92:3c:4c:99:29:1a:06:23:bf:25:15:74:c1:0e:ba:
ca:b3:e5:a9:5a:1e:ad:c5:4e:78:1f:69:24:f9:1d:
63:0f:c6:11:c9:65:8a:13:e3:23:01:9a:87:fd:25:
1e:ca:f6:9b:1d:47:65:db:97:77:59:43:5d:5e:bb:
56:26:65:23:3e:7d:66:d8:52:b8:e3:16:0a:5e:37:
6c:e0:a2:79:b5:66:1f:d5:c6:29:13:6a:ca:25:5e:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:4C:BA:B6:E3:9B:88:5E:61:7B:80:7F:25:AB:36:33:76:A0:3A
X509v3 Authority Key Identifier:
keyid:BD:43:60:3F:4C:A6:83:91:A7:3D:66:7D:F6:65:0E:52:36:9B:78:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUNgP0ymg5GnPWZ99mUOUjabeFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5770/92D58DF83D6311F1814CAA38AD833773/vUNgP0ymg5GnPWZ99mUOUjabeFQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:11:87:48:dc:ad:52:b6:62:2f:c6:7e:4e:21:08:33:3e:62:
71:c5:dc:9e:3a:05:dc:2e:a0:3c:87:cf:4a:9e:96:ad:19:b5:
b0:bd:d5:03:b6:7e:4c:7e:e2:a9:2e:62:50:91:44:d6:b6:ca:
d9:f5:bb:ee:0e:3c:28:dc:d4:ff:41:9c:e1:a3:5f:37:ec:58:
fb:41:5e:e8:79:50:63:b9:00:72:5d:cb:92:e8:01:b8:eb:85:
8c:75:6b:d5:5e:23:29:40:2e:c6:86:af:31:37:86:71:2f:15:
89:59:6c:aa:a5:ba:84:81:5e:0d:c5:82:86:b4:03:f9:d4:66:
80:9a:49:ab:28:e2:f4:d4:a8:75:4c:72:21:67:d8:f0:ef:17:
a3:98:94:35:d0:7a:ee:10:eb:ff:50:09:8b:23:4b:56:52:33:
6f:d3:c4:38:d4:09:c2:ee:b6:c5:97:0c:1d:99:f7:e2:a8:3a:
ee:c4:bd:e5:e8:f1:c1:c1:1b:c0:15:fb:9f:da:8d:39:5c:29:
fa:f4:3a:96:8f:59:85:11:80:9e:b0:60:5a:79:b4:0a:55:d7:
ec:a6:24:08:3b:a2:a3:3a:7d:02:97:86:14:26:df:63:75:04:
a4:63:5f:44:61:5d:dc:4d:f4:a3:61:fe:34:73:3b:e1:74:21:
67:dd:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:54:20 2026 by rpki-client