
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
File: vm13JvnXOebsmvk0fs7LQhevej8.mft (raw, json)
Hash identifier: fUE4jn3Ayl+qVacROBKjzxiEeDvCibu5gjK1pNOXVeE=
Subject key identifier: 34:E9:A2:E6:41:2A:22:E5:F6:76:E3:32:7A:70:10:43:CC:FB:11:A7
Authority key identifier: BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
Certificate issuer: /CN=A91ED35E/serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Certificate serial: 0207
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
Manifest number: 0201
Signing time: Wed 23 Sep 2026 03:02:06 +0000
Manifest this update: Wed 23 Sep 2026 03:02:05 +0000
Manifest next update: Wed 30 Sep 2026 03:02:05 +0000
Files and hashes: 1: vm13JvnXOebsmvk0fs7LQhevej8.crl (hash: QYz0l3K7EHZ0NZCTXZIJUzWG68iR/4q9Cpl3irc4R08=)
2: 3AE10060B0F111EE9727201AC4F9AE02.roa (hash: C6Cummg9Sl6RCDS2LtUiMc8wWWKvQYCjdXXfFdueSWs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 519 (0x207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED35E, serialNumber=BE6D7726F9D739E6EC9AF9347ECECB4217AF7A3F
Validity
Not Before: Sep 23 03:02:05 2026 GMT
Not After : Sep 30 03:02:05 2026 GMT
Subject: CN=6ab3412e-3894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:f0:e1:6f:43:dc:68:59:5f:6e:24:b1:dd:
07:0f:70:30:29:3d:72:60:34:d0:4b:4b:a1:9e:75:
ec:fe:0d:06:2b:81:4c:7e:83:38:9a:3d:21:8f:ee:
a8:d1:8a:f5:aa:1b:e5:fa:71:3d:b3:67:bb:1e:85:
7e:e0:ae:fb:db:b1:29:84:9b:c5:24:39:de:d4:bc:
74:9c:e6:a9:8b:75:28:71:a5:2d:76:4a:ad:5d:6e:
d9:63:d3:f8:12:dd:cb:10:98:26:59:15:34:6d:24:
56:dd:a6:58:d6:26:97:61:56:2d:36:36:79:d6:fc:
26:62:f2:ba:1c:4b:15:d7:1f:89:a7:07:d4:10:59:
d5:d6:ad:1e:ee:62:92:c4:ad:cd:2e:ba:52:f8:47:
63:33:53:52:24:ad:5f:95:50:a8:fd:0d:81:74:41:
be:14:1e:61:93:00:15:15:10:04:c1:c4:d4:14:57:
21:bd:b6:e2:de:9f:33:35:7b:12:ec:1d:84:8e:65:
c2:84:a4:56:4b:29:1a:e3:19:0a:f0:e2:1a:d9:cf:
4a:87:11:b8:cb:81:aa:df:63:9b:2d:13:e8:22:4a:
10:56:f5:1d:bb:2b:30:b5:cc:b1:1a:ed:c6:e2:a8:
60:46:af:cf:a1:24:9c:f9:bc:de:d0:b5:10:0d:53:
12:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E9:A2:E6:41:2A:22:E5:F6:76:E3:32:7A:70:10:43:CC:FB:11:A7
X509v3 Authority Key Identifier:
keyid:BE:6D:77:26:F9:D7:39:E6:EC:9A:F9:34:7E:CE:CB:42:17:AF:7A:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vm13JvnXOebsmvk0fs7LQhevej8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED35E/208DFC36AC4111EEBEE2A132C4F9AE02/vm13JvnXOebsmvk0fs7LQhevej8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f4:8d:7a:22:c3:10:b0:35:c9:c1:a6:8c:39:13:9a:c0:39:
7c:79:02:82:27:3f:01:d1:be:50:11:93:61:5d:41:61:aa:fe:
a7:dc:bb:c9:01:e8:12:07:fc:20:fd:40:e5:a3:2b:1e:05:9d:
ef:79:36:ab:56:15:e8:ce:e3:e1:68:c6:81:b1:59:75:26:41:
d4:a3:39:08:6b:84:05:85:18:0d:0d:6c:c5:26:67:2a:6b:af:
1a:c8:3a:22:0f:6a:5f:a7:d8:1c:19:f5:41:29:d5:c1:ea:73:
6c:36:c9:43:0a:7a:e7:c9:7a:16:a6:fd:ab:84:49:c5:6f:dd:
bf:36:06:0b:c6:7e:31:5a:e6:ed:f4:69:04:7b:ba:95:c9:09:
fb:b6:1f:05:89:c3:ec:0e:e3:3d:62:00:23:a3:15:66:f8:3b:
42:35:2c:3f:8d:44:ea:f3:1e:ec:66:5f:d7:05:b9:8b:cb:14:
1d:8a:fe:1a:11:02:bf:ae:a3:1e:20:84:e0:34:34:6d:24:89:
43:31:e6:9f:4d:2f:1e:41:00:e9:32:ea:0a:f3:53:0e:01:f7:
77:85:6c:41:c8:58:b1:4e:96:f6:99:21:eb:99:46:48:4c:2c:
6c:4f:87:73:c9:93:da:23:eb:7e:1e:fd:88:ef:59:83:ed:57:
91:05:ca:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:34:59 2026 by rpki-client