
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
File: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft (raw, json)
Hash identifier: WpQt79F3KMRrH5ZIw8Y6Wa/6wnVZZwhvMYsPHZ7toko=
Subject key identifier: FA:01:67:8E:34:C8:7C:6A:AA:99:DA:14:D1:BC:24:A0:9C:F8:66:E8
Authority key identifier: 56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C
Certificate issuer: /CN=A91EEB51/serialNumber=562FB302A876783A084158038BD49EF7051A603C
Certificate serial: 0170
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
Manifest number: 016C
Signing time: Sun 01 Mar 2026 05:49:02 +0000
Manifest this update: Sun 01 Mar 2026 05:49:01 +0000
Manifest next update: Sun 08 Mar 2026 05:49:01 +0000
Files and hashes: 1: Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl (hash: ns4MJdfXpQP8q1d0zxN6/1v6ZbAWJOz83nHbfsafI2M=)
2: 748B00F4EA8A11EE9295672AC4F9AE02.roa (hash: qJGm5qR8q633zY7nmDna54y82nnbrcUnVg4BUe56QiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl
rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 368 (0x170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEB51, serialNumber=562FB302A876783A084158038BD49EF7051A603C
Validity
Not Before: Mar 1 05:49:01 2026 GMT
Not After : Mar 8 05:49:01 2026 GMT
Subject: CN=69a3d34e-33bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a3:78:d1:f2:2b:54:a9:3e:6f:0d:af:a8:4f:
94:fd:5b:62:e4:3d:2f:73:03:01:c2:01:53:c8:11:
0a:73:e0:92:17:8f:39:58:b9:aa:33:1f:c7:d4:52:
a5:61:2f:07:41:de:55:34:8a:89:ca:49:32:52:71:
4f:4c:6b:bc:7b:dc:78:26:b0:f4:83:a2:ed:81:a4:
e0:58:89:20:d2:6d:9f:f9:55:00:58:00:d4:8a:4d:
bb:eb:90:e1:82:3a:87:ff:db:43:19:d0:52:28:70:
2e:69:9e:2e:51:b2:62:1c:41:4f:4f:34:dd:94:f1:
df:60:7a:9f:83:65:70:40:0d:c5:7d:cb:81:18:df:
56:95:c5:f1:0f:1d:1f:b5:1e:85:bb:d0:a1:b4:59:
33:f9:98:4e:52:c7:ea:2d:a8:85:e0:7e:74:d9:49:
5e:0b:55:33:0b:fe:df:da:88:b3:d8:f4:29:40:c0:
37:f9:67:65:55:29:79:29:82:87:33:c4:83:5f:07:
4a:87:36:79:97:4e:37:3a:7a:de:c6:93:91:61:fc:
2a:cb:f1:73:7c:88:4d:0c:3e:92:46:d1:99:43:99:
ee:8a:8f:25:ab:7a:f9:68:d1:e8:02:20:f0:22:52:
43:20:c9:7d:a5:07:9f:8e:cc:c3:d1:79:6e:a8:e5:
f3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:67:8E:34:C8:7C:6A:AA:99:DA:14:D1:BC:24:A0:9C:F8:66:E8
X509v3 Authority Key Identifier:
keyid:56:2F:B3:02:A8:76:78:3A:08:41:58:03:8B:D4:9E:F7:05:1A:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEB51/37A534B8EA8311EE91801A76C4F9AE02/Vi-zAqh2eDoIQVgDi9Se9wUaYDw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e3:35:89:0f:9b:d2:b9:cc:e6:e1:2c:8b:ae:b7:29:81:2f:
0a:38:a7:32:4d:b6:b8:9c:64:86:63:24:6b:11:e5:38:43:08:
e3:c9:61:73:93:f9:1c:03:12:f7:25:79:d3:4f:d7:6e:e6:90:
f5:fa:98:a1:61:a1:a6:c1:f5:dc:ba:6a:90:90:79:d4:cc:72:
72:60:9d:e9:b6:1e:87:d7:34:a2:47:9b:9a:0f:f0:d1:b0:46:
51:c6:d5:3f:10:70:a7:2b:73:e7:68:13:11:82:1e:ce:1c:dc:
6b:88:f5:8f:bf:ee:ab:63:0d:33:bf:15:e4:c6:ba:31:2c:97:
10:75:3c:b2:c4:a9:60:c0:1b:c4:90:21:17:e5:c8:a5:2d:7b:
ac:ae:27:68:0e:43:bd:67:9b:39:22:40:78:74:a5:cf:b5:1f:
24:ee:e1:be:ae:80:7a:a5:ec:56:70:cb:4d:92:e1:20:e8:61:
dc:7b:d1:b6:83:e8:65:5a:8e:26:02:47:f4:e2:90:db:3e:8a:
f1:4c:55:a8:f2:da:6f:5e:f4:d8:7c:f7:a7:95:0d:70:18:46:
2a:95:e8:e5:88:c9:94:99:77:5d:02:fd:25:b7:19:c5:5c:f1:
8c:90:fb:ed:05:61:79:c9:61:3e:3a:08:33:dd:d1:ca:c1:37:
c7:4d:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:42:03 2026 by rpki-client