
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json)
Hash identifier: Xc7wbEB0+k+P450hKQ7+Ac3kttpFiXvjswETaMm+hb4=
Subject key identifier: 56:98:26:53:71:D6:CD:71:62:F4:CF:A6:FB:25:CE:CE:10:4D:FA:88
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial: 94
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
Manifest number: 91
Signing time: Wed 15 Apr 2026 07:05:54 +0000
Manifest this update: Wed 15 Apr 2026 07:05:54 +0000
Manifest next update: Wed 22 Apr 2026 07:05:54 +0000
Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: mmG/s+vOIuJzgTtjfwUDUZBX838wvQ8b6Va8BouLobc=)
2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 07:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148 (0x94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Validity
Not Before: Apr 15 07:05:54 2026 GMT
Not After : Apr 22 07:05:54 2026 GMT
Subject: CN=69df38d2-0dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:83:0f:29:b3:28:3d:71:ae:bc:e3:02:03:
67:47:99:03:d6:ba:13:63:7f:9c:1f:75:37:dd:64:
e3:eb:7b:30:03:84:79:a2:7e:81:42:7c:06:52:13:
9c:73:a6:27:c8:b0:47:75:2e:55:9e:ab:49:d9:45:
bf:d8:36:c4:f6:b2:85:90:af:0f:71:8d:6a:fc:b1:
ac:21:66:24:52:02:98:9f:08:3f:b3:69:24:5b:3f:
fb:8d:c0:3a:1f:27:bd:48:08:4b:d4:e6:df:3d:4b:
63:c7:21:47:42:1d:68:40:3e:df:f8:bf:f5:52:4f:
d7:5f:d0:e6:4a:0f:35:2f:be:f9:1b:85:1e:a0:a0:
0a:6c:95:bf:c8:45:0f:44:84:36:8b:99:36:b6:e3:
be:1f:24:c9:b3:d0:59:9e:e3:78:ca:84:bd:23:a1:
62:47:9e:3c:6f:6b:06:da:31:22:5e:2e:b5:7c:fa:
07:ac:6a:cf:fa:cb:e5:21:e7:db:3c:7d:5e:22:fa:
d9:a5:de:2a:41:97:08:69:ec:7c:49:5a:21:39:e7:
2d:fb:b2:32:58:65:ee:b6:18:8f:a3:3c:fd:d1:43:
e5:dc:9c:f2:34:54:e5:77:ec:b8:c1:14:35:7c:da:
12:39:e5:fe:3c:bf:b0:e2:d9:87:91:5b:7b:d4:f3:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:98:26:53:71:D6:CD:71:62:F4:CF:A6:FB:25:CE:CE:10:4D:FA:88
X509v3 Authority Key Identifier:
keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:aa:63:78:50:8d:16:4e:66:9e:2e:47:e9:2d:08:9a:df:
17:a8:2d:1c:44:f2:71:c8:1e:a2:b1:a5:82:e5:60:a4:8a:d6:
d7:6f:9f:c8:30:15:0b:40:87:60:ae:de:08:1a:34:bd:91:3c:
42:e6:e3:bc:b7:28:f3:af:be:41:52:84:49:d0:e4:1b:21:65:
a6:f6:31:f9:a0:3c:ae:05:25:31:5d:83:96:21:2c:83:cc:20:
82:1b:cd:46:b8:98:39:67:53:e7:fd:a2:88:41:45:08:a4:d7:
a3:d6:f1:27:ba:f6:18:6c:e8:f7:d2:49:44:fb:c3:28:ac:45:
5a:06:f6:1f:c9:10:e9:5c:80:26:28:81:9a:ba:a8:63:4e:46:
5c:ab:8a:b9:a0:04:0d:38:2c:c2:07:a2:ed:c5:29:24:f7:5a:
9c:6e:d3:69:0a:76:a7:7c:33:4e:4d:4a:11:4d:be:b3:1e:3b:
6e:70:bd:dc:86:ab:e5:36:08:f9:fa:2f:aa:9e:b6:cd:7e:9c:
f8:f1:3b:a7:49:87:c9:74:65:d2:c4:f3:83:e0:aa:d2:ec:d5:
e7:75:5e:98:df:a9:09:1d:c7:82:76:25:60:04:f2:a4:6a:7c:
2f:7e:13:61:6f:4e:d1:ab:91:7a:3a:8e:dd:a1:59:79:3e:4f:
8e:81:66:a6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjQzRjIxMTAvBgNVBAUTKDU1Nzg5QTM0MTZFN0VGNTE1Q0UwOEYwNUEzNkYxREVE
ODM0NDRDMDkwHhcNMjYwNDE1MDcwNTU0WhcNMjYwNDIyMDcwNTU0WjAYMRYwFAYD
VQQDEw02OWRmMzhkMi0wZGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkWDDymzKD1xrrzjAgNnR5kD1roTY3+cH3U33WTj63swA4R5on6BQnwGUhOc
c6YnyLBHdS5VnqtJ2UW/2DbE9rKFkK8PcY1q/LGsIWYkUgKYnwg/s2kkWz/7jcA6
Hye9SAhL1ObfPUtjxyFHQh1oQD7f+L/1Uk/XX9DmSg81L775G4UeoKAKbJW/yEUP
RIQ2i5k2tuO+HyTJs9BZnuN4yoS9I6FiR548b2sG2jEiXi61fPoHrGrP+svlIefb
PH1eIvrZpd4qQZcIaex8SVohOect+7IyWGXuthiPozz90UPl3JzyNFTld+y4wRQ1
fNoSOeX+PL+w4tmHkVt71PO7+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaYJlNx
1s1xYvTPpvslzs4QTfqIMB8GA1UdIwQYMBaAFFV4mjQW5+9RXOCPBaNvHe2DREwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDNGMi80MTgwNTA5NDYw
QzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcxRmM0SThGbzI4ZDdZTkVU
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NDNGMi80MTgwNTA5NDYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9WWGlhTkJibjcx
RmM0SThGbzI4ZDdZTkVUQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEABU6qY3hQjRZOZp4uR+ktCJrfF6gtHETyccgeorGlguVgpIrW12+fyDAVC0CH
YK7eCBo0vZE8QubjvLco86++QVKESdDkGyFlpvYx+aA8rgUlMV2DliEsg8wgghvN
RriYOWdT5/2iiEFFCKTXo9bxJ7r2GGzo99JJRPvDKKxFWgb2H8kQ6VyAJiiBmrqo
Y05GXKuKuaAEDTgswgei7cUpJPdanG7TaQp2p3wzTk1KEU2+sx47bnC93Iar5TYI
+fovqp62zX6c+PE7p0mHyXRl0sTzg+Cq0uzV53VemN+pCR3HgnYlYATypGp8L34T
YW9O0auRejqO3aFZeT5PjoFmpg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:54:21 2026 by rpki-client