
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
File: VU9dfGbsUOhKiru6mWgXfkcp02Y.mft (raw, json)
Hash identifier: IyInulvcearHypssdHSAtHg1bU2FEgCSgdONsxf870E=
Subject key identifier: A8:AE:04:9B:17:3D:BB:1E:2D:1A:68:72:D4:39:2C:E2:60:93:A7:24
Authority key identifier: 55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
Certificate issuer: /CN=A91E8BE3/serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Certificate serial: 0133
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
Manifest number: 012F
Signing time: Mon 27 Jul 2026 07:37:44 +0000
Manifest this update: Mon 27 Jul 2026 07:37:44 +0000
Manifest next update: Mon 03 Aug 2026 07:37:44 +0000
Files and hashes: 1: VU9dfGbsUOhKiru6mWgXfkcp02Y.crl (hash: kg4XiHb7p5qxhIDy2Tb2gOra1Fg13NCHatBP6TMPsbI=)
2: 0AC098846EDA11F08D404571C4F9AE02.roa (hash: MQmdIDvcYM844/1uv1UkwZ4FyyfbWMvsu3GOUFQnx9w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8BE3, serialNumber=554F5D7C66EC50E84A8ABBBA9968177E4729D366
Validity
Not Before: Jul 27 07:37:44 2026 GMT
Not After : Aug 3 07:37:44 2026 GMT
Subject: CN=6a670ac8-ca10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:ea:f6:40:d8:58:54:0b:c2:fc:6e:03:66:
dd:f9:d6:74:f0:7b:c3:e7:ee:2d:ad:37:5b:ac:55:
77:58:fd:fb:f7:5e:4b:96:db:76:f0:6b:53:22:d6:
17:95:c1:42:d1:03:28:f2:65:5c:7a:d5:c9:d6:bf:
b8:02:c2:97:84:7e:4f:12:3a:c5:53:8d:49:ec:e9:
cb:7c:56:f1:2a:08:c0:cd:5b:3a:6a:39:fc:c5:7d:
cf:30:83:53:85:13:80:8c:6f:fe:c4:2b:ab:bc:b1:
42:5d:dd:89:3d:53:c7:69:bf:02:26:c1:fa:6e:88:
03:8b:ea:6b:6e:94:29:94:a1:19:b8:24:dc:08:12:
31:5a:50:62:2d:d6:fe:e5:b1:70:a4:8f:93:77:ad:
bb:0a:63:8a:f8:a4:22:f0:39:d3:69:27:c3:24:6d:
17:10:44:69:af:53:7e:0b:b2:2b:af:b5:44:60:51:
39:ac:9a:20:48:98:b7:dd:fb:39:21:4e:f9:14:24:
5e:c1:98:83:1a:c9:a2:cf:79:cb:ad:9d:cd:68:bb:
40:b4:cb:83:3a:f0:5d:84:20:22:5b:29:7e:84:c1:
73:54:22:38:c8:a9:15:b2:f4:a1:43:07:c1:54:69:
6c:03:57:ab:db:f9:6a:16:a7:3f:3f:73:b9:f2:19:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AE:04:9B:17:3D:BB:1E:2D:1A:68:72:D4:39:2C:E2:60:93:A7:24
X509v3 Authority Key Identifier:
keyid:55:4F:5D:7C:66:EC:50:E8:4A:8A:BB:BA:99:68:17:7E:47:29:D3:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VU9dfGbsUOhKiru6mWgXfkcp02Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/EEEF7FEABF9C11EF9DA88282C4F9AE02/VU9dfGbsUOhKiru6mWgXfkcp02Y.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:43:0f:4d:3c:ec:5a:8a:79:6d:d4:02:db:30:b4:4b:f3:3c:
db:10:85:b2:c6:d9:f0:33:75:35:88:35:19:e7:1a:70:57:88:
33:4c:c0:85:b2:cd:c1:af:8c:19:3d:c5:13:fc:31:a9:0e:c0:
50:00:64:cb:68:95:90:ac:62:2e:a2:16:4a:78:22:16:d0:31:
91:91:50:cd:97:e5:e9:69:2d:de:0b:fe:43:43:3e:41:96:e5:
f0:d9:20:84:bc:a1:6e:dd:f3:77:32:e7:b1:b6:ba:33:3d:12:
5f:57:38:df:ee:5c:de:6b:e8:7a:f2:3c:76:30:40:2c:26:f4:
5e:07:84:47:39:23:f4:ca:f3:cc:d2:92:6a:af:5a:db:b3:14:
c9:38:5a:6d:d5:a1:23:7a:11:11:30:5b:17:39:55:24:c3:49:
29:40:31:6b:70:b4:f7:71:fc:77:78:d0:75:68:fc:a4:43:6c:
48:cd:fd:2e:ea:22:0c:b3:dd:ea:9b:53:99:5a:ad:a3:cc:08:
68:57:0c:07:16:e0:ac:b3:db:a2:ea:bb:48:42:11:6e:6c:9c:
b0:35:b7:2c:41:71:67:44:2b:70:d8:fa:ea:28:f3:56:5a:e5:
e2:9c:e3:bc:ba:d8:6f:a4:bf:0d:2f:81:79:81:c4:2a:b2:1a:
09:6f:85:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:05:51 2026 by rpki-client