
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier: 6ykZmaFPo+RkQgyfKgooej+Nimx9RHePWYCIespXybA=
Subject key identifier: 95:D9:E5:30:8B:8A:26:E5:3A:29:6D:9C:61:70:47:06:44:69:70:61
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial: 0178
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number: 03CC
Signing time: Mon 02 Mar 2026 00:21:24 +0000
Manifest this update: Mon 02 Mar 2026 00:21:23 +0000
Manifest next update: Mon 09 Mar 2026 00:21:23 +0000
Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: SllFSytYzejRV+2UOavw6mfVxJPGs9JQaLrJIXMG2HI=)
2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: iqq89iXsMkjAcx6f+H8qgQsfKuzOgvixAUFvX+cUdpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:21:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 376 (0x178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Validity
Not Before: Mar 2 00:21:23 2026 GMT
Not After : Mar 9 00:21:23 2026 GMT
Subject: CN=69a4d804-fe04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:8b:33:a8:9e:8b:e1:1b:59:76:44:a3:fc:
4e:02:ed:36:15:53:42:41:f0:85:22:98:eb:a6:63:
b6:f8:1f:57:10:80:80:0f:89:42:6d:6a:b7:4c:6c:
f7:af:2d:ba:63:d9:1e:ea:fc:ae:d9:b5:b2:3a:ab:
29:38:b2:a8:cb:bc:aa:d6:82:a5:aa:26:7b:41:5c:
38:99:c2:ad:51:98:12:13:a8:ef:bd:08:6d:2e:6e:
4f:13:7e:87:e2:91:3c:c1:08:7d:d8:96:60:b7:7e:
64:8d:19:21:d1:a8:8a:99:f2:55:c6:39:61:90:c3:
67:01:b4:20:a7:0c:00:b6:91:29:49:d8:a2:be:63:
c1:f7:87:b1:18:0d:91:55:73:1d:a7:a9:39:3c:73:
5b:31:35:5b:fc:82:4f:ab:40:81:2c:33:99:65:0c:
fb:89:83:c1:ac:5e:ca:14:e9:7a:f1:c8:fb:74:b6:
0d:77:ee:f3:91:cf:dd:2b:86:c6:61:5b:12:0e:e0:
54:b7:95:7b:61:f9:5d:19:42:b9:ac:2a:4e:88:f7:
ab:1e:38:82:8d:8d:c7:36:9d:88:9a:3c:b2:93:24:
b1:9b:73:24:b3:e1:83:c7:a5:49:b4:06:2f:31:6b:
c7:9b:3a:b1:7f:78:e8:a8:15:e7:9b:fd:cf:13:d1:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D9:E5:30:8B:8A:26:E5:3A:29:6D:9C:61:70:47:06:44:69:70:61
X509v3 Authority Key Identifier:
keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:54:8c:a9:7a:30:4f:6f:6d:f3:dd:8f:1b:e5:22:84:9c:5d:
32:64:49:f9:61:c4:2c:1c:e8:26:26:a2:a0:b5:c8:da:38:48:
bd:ea:a6:c0:86:82:99:56:47:2a:96:e5:15:ae:a5:5f:b5:8b:
65:68:db:9f:9c:34:5a:be:0c:23:f8:c7:e4:2e:a3:66:45:27:
fb:f1:09:cf:cf:dc:cb:63:08:2b:2a:20:55:54:4d:a8:db:4f:
11:e6:ad:b6:e4:12:01:bb:10:76:d2:68:8e:86:ff:ca:7e:62:
78:62:ad:e5:93:bf:70:7f:ea:ca:31:3a:48:7e:87:63:9a:a5:
13:ae:66:51:fc:4a:3c:58:e4:91:3f:ae:92:75:74:ea:d2:03:
f9:86:c4:4c:03:d3:40:e6:7c:49:dc:5e:19:3b:cd:e8:37:de:
53:0f:86:0f:e9:ba:f4:44:2c:55:9e:a3:de:82:25:a1:ca:35:
5e:f9:ed:ac:3a:53:71:f1:ca:04:bc:ec:08:e1:30:94:30:44:
81:9e:ce:26:02:7a:65:ae:62:56:49:a6:95:50:af:35:30:fe:
9e:bf:f0:73:20:ce:b2:2c:72:3d:a3:88:31:b7:b8:82:a5:92:
c6:f0:1c:fc:e7:c8:02:bb:a1:eb:20:c9:d3:4e:34:cd:a6:b8:
1e:29:5f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:06:22 2026 by rpki-client