
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
File: vvMhsD2CRd537IDdAzG_uo0IWdg.mft (raw, json)
Hash identifier: sOMZrK67Rz4XN15SdwritwwLUvrZG+570RfsgNEKoO8=
Subject key identifier: 25:CE:60:3F:E2:F5:D8:63:3F:62:90:E2:3E:06:B4:E0:01:B2:2B:C3
Authority key identifier: BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
Certificate issuer: /CN=A91EE8AC/serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
Manifest number: 03FC
Signing time: Fri 17 Apr 2026 01:48:03 +0000
Manifest this update: Fri 17 Apr 2026 01:48:03 +0000
Manifest next update: Fri 24 Apr 2026 01:48:03 +0000
Files and hashes: 1: vvMhsD2CRd537IDdAzG_uo0IWdg.crl (hash: M/07A+LfoyisxmZo3A1FyQwxBfHr+RmhJCbpNkxW7x8=)
2: 5F3C0F26EAEF11EE8CCDB375C4F9AE02.roa (hash: iqq89iXsMkjAcx6f+H8qgQsfKuzOgvixAUFvX+cUdpk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE8AC, serialNumber=BEF321B03D8245DE77EC80DD0331BFBA8D0859D8
Validity
Not Before: Apr 17 01:48:03 2026 GMT
Not After : Apr 24 01:48:03 2026 GMT
Subject: CN=69e19153-1bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:85:69:4b:60:ef:56:36:b2:66:40:21:9d:22:
e2:6b:fe:0b:df:9f:ea:32:da:79:a8:9e:01:49:8a:
6d:e8:a9:df:c7:a4:f7:59:97:f4:e3:0a:09:a5:9d:
41:40:e0:6d:28:3e:77:8e:17:dd:a9:99:06:ff:7d:
8a:99:52:9e:13:02:30:a1:14:a5:b3:9b:00:8a:c5:
33:0e:70:4d:cb:59:68:e2:60:59:8f:a6:b8:23:2e:
80:dc:c1:05:52:e0:9b:35:12:bb:a3:62:d6:8e:0d:
e6:b8:ce:f4:a8:07:83:6a:4b:57:a4:52:44:a5:b6:
78:9d:a2:e6:78:48:6d:a1:b9:20:02:88:48:9a:c2:
8d:1b:c8:ef:f5:2f:52:00:99:59:30:e1:7d:d5:27:
c1:73:ed:29:7f:f8:6b:72:53:5c:f1:85:d4:57:96:
52:d0:fd:ec:ac:78:b7:b1:9d:56:2f:98:a4:8f:44:
15:b9:fd:4e:45:a1:13:e6:3f:20:f3:79:e1:6c:3a:
36:ed:c7:6a:12:75:3f:0c:66:a6:68:1c:db:bc:8a:
7a:92:01:73:cb:43:cd:2b:2f:78:76:48:d3:f8:e2:
23:43:84:46:d2:7b:99:cc:67:8c:69:75:cf:76:1b:
41:84:f0:fa:28:ad:6a:32:bf:0a:24:70:79:5b:76:
6d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:60:3F:E2:F5:D8:63:3F:62:90:E2:3E:06:B4:E0:01:B2:2B:C3
X509v3 Authority Key Identifier:
keyid:BE:F3:21:B0:3D:82:45:DE:77:EC:80:DD:03:31:BF:BA:8D:08:59:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vvMhsD2CRd537IDdAzG_uo0IWdg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE8AC/5038EC8C7DEB11EDA7CA4A7EC4F9AE02/vvMhsD2CRd537IDdAzG_uo0IWdg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ab:db:e6:18:50:9f:24:0a:17:e6:6a:42:6c:e1:33:d9:57:
37:45:eb:a4:fc:47:fc:fd:0e:76:32:ff:51:f2:ba:9c:af:d4:
6d:3e:39:d8:3b:25:ce:70:e6:c6:93:76:10:f3:c7:e8:1f:d2:
f5:d4:a7:e8:46:b1:30:89:8a:e9:b2:83:4e:b9:74:e7:7f:47:
30:bd:c1:85:b0:e3:69:60:87:90:d0:71:61:cc:a2:d8:f5:fb:
ec:08:f0:7f:9a:a4:4c:9a:38:dd:20:00:de:16:5e:e1:ad:19:
f1:61:b1:cf:a6:de:5d:6b:22:fc:4a:73:c6:5f:71:a3:a7:af:
d2:64:93:55:ac:89:1c:b6:c2:74:4e:65:d6:eb:a8:7f:51:e7:
a5:92:c0:a8:25:b9:a2:58:62:3e:04:f1:20:0b:6a:85:7b:ed:
a6:a5:1d:65:e4:ed:91:a7:ec:1a:e6:0d:f2:d8:d8:7c:b8:bb:
09:e5:12:b1:49:09:0d:15:11:54:e3:46:cf:d7:93:69:13:6b:
25:94:49:69:27:2e:e8:a7:c9:01:35:5a:aa:7d:aa:77:43:53:
91:4b:11:87:ed:89:2d:a8:2e:5e:2b:79:14:88:96:ab:94:45:
53:65:c6:e3:95:cb:81:ae:a9:72:c3:21:b9:e1:37:ec:fb:89:
c9:cf:01:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:15:37 2026 by rpki-client