
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
File: vZ1mh32GbnyQQVa-CMtDcargAb0.mft (raw, json)
Hash identifier: FQ1iHzqY/w8ZeJLpSSjLWeS6EjvC0FDUcXe9az+cQH8=
Subject key identifier: 0A:99:57:7D:59:D3:0B:E1:13:D3:09:CF:8F:D0:9F:97:B2:CE:E1:3D
Authority key identifier: BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
Certificate issuer: /CN=A91E5E8B/serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Certificate serial: 020E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
Manifest number: 01FB
Signing time: Fri 17 Apr 2026 03:09:38 +0000
Manifest this update: Fri 17 Apr 2026 03:09:37 +0000
Manifest next update: Fri 24 Apr 2026 03:09:37 +0000
Files and hashes: 1: vZ1mh32GbnyQQVa-CMtDcargAb0.crl (hash: Jam7fZ3X1KNg4R39IHptNvpy/qpIb1zYHbsbzlkHz70=)
2: AC9A49A6B79811EF9C8DF330C4F9AE02.roa (hash: TlPZUMDag0+nbHWC7VeEq/uQgXojgN3hKUwwE1rmyAE=)
3: 975A513293B011EF9203EA6BC4F9AE02.roa (hash: JQYmKsWXoSm0lfyUAQDHWsNMbQA1U6oOzIeZnxZREpc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:09:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5E8B, serialNumber=BD9D66877D866E7C904156BE08CB4371AAE001BD
Validity
Not Before: Apr 17 03:09:37 2026 GMT
Not After : Apr 24 03:09:37 2026 GMT
Subject: CN=69e1a472-ede3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:28:e1:f2:bd:f6:b1:ae:1d:0d:04:22:6c:
c6:76:db:aa:50:44:0d:22:81:2d:59:b5:2b:26:16:
9d:7d:77:46:be:7e:f1:e8:50:96:a6:94:91:87:db:
fa:ce:18:1d:1b:ad:ca:6a:a8:d5:d6:96:90:55:87:
b8:2e:37:73:1f:0b:30:9c:e4:fb:09:da:1d:95:fc:
c2:4d:43:0d:b7:15:ad:7f:02:9b:ba:bc:88:4d:f1:
d4:96:77:fd:c4:2c:66:c1:6a:8f:54:61:78:07:f8:
98:c3:6a:a3:8d:db:1f:ab:f8:61:76:e8:18:45:61:
83:57:96:63:39:2d:8b:e2:17:fd:14:ad:31:63:f3:
90:71:44:2a:22:ff:59:cf:e7:ef:98:7e:f6:ee:d3:
e7:11:46:7f:f8:ca:b0:14:d7:b2:dd:c9:55:82:60:
76:ab:71:ae:95:5a:fe:8b:0d:85:35:a8:ed:ea:cb:
59:b6:37:02:4a:61:76:d0:e6:46:96:17:6f:be:d1:
fd:2e:94:9c:f6:15:d0:92:ae:62:87:e8:ef:4c:cb:
02:60:18:71:2f:5d:eb:5a:de:7b:52:73:75:3f:a0:
a2:b3:fa:55:77:71:9d:1a:72:d0:04:7a:be:6d:30:
6a:20:9d:6d:98:ae:11:52:3d:bd:4e:28:c9:d3:49:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:99:57:7D:59:D3:0B:E1:13:D3:09:CF:8F:D0:9F:97:B2:CE:E1:3D
X509v3 Authority Key Identifier:
keyid:BD:9D:66:87:7D:86:6E:7C:90:41:56:BE:08:CB:43:71:AA:E0:01:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZ1mh32GbnyQQVa-CMtDcargAb0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5E8B/DEC3BD7C5AD311EEA92F9320C4F9AE02/vZ1mh32GbnyQQVa-CMtDcargAb0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:18:aa:9d:bd:b5:8c:69:eb:31:2f:71:d3:77:42:e2:61:d8:
de:1e:4c:fc:de:d8:ad:62:02:0a:97:63:ba:72:f8:ac:e1:45:
2f:e9:df:ce:9f:dd:fa:d8:9f:04:c5:4c:90:4c:b6:56:ca:6f:
5a:e0:b7:42:3f:3e:b4:18:cd:ec:a5:70:ac:9c:f4:dd:80:c3:
f5:b9:c6:31:6b:cc:7b:0a:9e:ff:9f:c5:63:4c:77:de:ca:60:
22:c2:75:67:a1:9d:94:4f:f0:e3:50:64:ac:f3:b2:92:15:1e:
e4:64:87:36:49:57:3a:9d:f3:76:cd:d8:5c:5f:bb:a0:e9:e4:
50:0b:22:83:76:e7:55:76:08:fb:09:f8:ff:08:a0:ba:01:20:
b9:c1:6b:10:bf:a9:91:20:63:1d:3a:ed:54:b7:f3:c9:62:bf:
13:4c:8d:38:e4:8f:da:77:a6:1b:42:d4:e6:d3:a4:20:09:c5:
9f:2e:c2:5b:98:81:1f:0f:78:38:e6:f1:12:f0:75:f9:3e:3c:
cf:8d:61:58:ec:b3:b4:85:b5:bc:14:81:e4:ca:1c:2b:0c:5b:
c7:fe:02:4d:26:d8:ab:a7:b8:90:b1:76:20:1a:0f:a4:ba:84:
3f:6e:8e:a9:5b:bf:1e:20:41:87:13:d1:07:8c:cf:c3:79:68:
be:66:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:05:17 2026 by rpki-client