
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
File: VXiaNBbn71Fc4I8Fo28d7YNETAk.mft (raw, json)
Hash identifier: TdmAYh0aCXQ6hFdU2gPuxDRMCxUYoLPGp8bDTmvoG4I=
Subject key identifier: FD:FA:B3:3F:58:F2:CF:FD:E2:47:CF:B0:C6:CA:78:15:12:B6:42:0C
Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Certificate serial: C7
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
Manifest number: C4
Signing time: Mon 27 Jul 2026 09:02:59 +0000
Manifest this update: Mon 27 Jul 2026 09:02:59 +0000
Manifest next update: Mon 03 Aug 2026 09:02:59 +0000
Files and hashes: 1: VXiaNBbn71Fc4I8Fo28d7YNETAk.crl (hash: gf+HJdW5u6tDkuh03+2z3cMoxH0cCpXpolqzf7DZmTM=)
2: A19F973C60C011F0A28C7F2CC4F9AE02.roa (hash: 1+gWdAZ37YIBU2iFVY3fHe/eCmXpEhHdoc6OKpG9wTE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09
Validity
Not Before: Jul 27 09:02:59 2026 GMT
Not After : Aug 3 09:02:59 2026 GMT
Subject: CN=6a671ec3-6e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:ec:30:f8:54:b3:66:99:8a:d3:69:75:9c:
3f:93:a8:b8:31:ad:b5:9c:b5:f8:cc:cf:a0:50:af:
31:35:47:7f:a6:5d:da:fd:3a:27:fa:cb:0d:50:de:
a6:42:14:bf:c9:8d:31:a9:a9:13:a2:d8:f5:c0:92:
bc:25:e6:99:8e:99:9d:16:45:2a:9e:99:f0:76:b4:
87:8d:3c:8c:4f:a0:af:98:35:83:36:9a:90:c7:63:
53:5a:03:91:66:8f:96:fe:58:42:a8:cb:5a:1b:b5:
1b:2c:77:5a:9c:af:bf:cc:58:ac:78:8e:b2:30:cf:
18:8f:f9:56:fa:53:35:5f:de:28:66:0c:d0:5a:cd:
0a:43:f4:48:63:d4:12:21:74:05:22:2a:29:5e:a9:
49:54:34:f5:56:99:f6:bc:a2:d7:3a:a2:a3:51:34:
9d:bb:7d:f1:64:73:08:59:5c:ed:92:10:50:d9:45:
51:02:80:36:15:ac:dc:d2:c5:34:44:24:f8:02:7a:
87:b9:1a:ac:8d:08:b7:6d:67:e9:c7:46:ec:24:15:
bf:c1:1b:33:17:65:38:74:fe:51:96:c0:64:83:3a:
13:a3:8f:45:25:fb:29:a8:5f:2c:d1:41:54:72:38:
be:e6:b9:a5:3b:9c:c0:fc:13:7b:8d:a8:c7:1b:69:
02:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:B3:3F:58:F2:CF:FD:E2:47:CF:B0:C6:CA:78:15:12:B6:42:0C
X509v3 Authority Key Identifier:
keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:fe:58:72:21:6d:95:f6:3d:9a:73:5a:83:09:57:18:31:
a5:6a:b2:46:e4:5d:69:6a:a1:fe:fa:f9:76:c6:96:b9:72:a3:
0b:3c:c9:ec:72:22:eb:7b:11:e1:86:61:30:f4:2d:7e:2f:a8:
e1:fe:64:1c:c2:03:c2:1e:3c:d7:d0:69:00:17:0f:b4:5c:37:
1a:06:6b:26:d7:90:f1:20:d2:c8:d3:05:67:b5:40:2d:ad:c3:
61:df:32:66:e3:95:4b:50:65:51:6f:8a:2d:29:72:4c:ea:ef:
7f:e7:27:1d:4d:78:9c:5a:fa:8b:60:51:48:5c:f4:92:ce:58:
b2:c8:22:04:1a:1e:97:06:25:64:50:ed:f5:5e:dd:6d:89:c3:
b7:75:52:23:91:6c:63:7c:40:d4:83:25:b7:d9:ee:fa:8a:1c:
96:ff:3a:76:25:2c:e2:1b:c5:f5:8d:b4:6b:2e:05:1a:59:01:
e1:0a:e5:25:78:5f:71:41:f6:6a:00:b9:3c:f2:91:4b:07:aa:
a8:6b:29:87:38:77:c6:a9:61:f1:2d:a9:63:16:bd:3b:5d:e8:
18:f6:75:f2:b5:b5:24:c7:f9:ff:57:ed:43:9b:f4:7a:75:84:
7b:8c:7a:f5:c2:b1:75:d1:01:cb:f7:e1:55:d4:da:cc:ba:8f:
29:3c:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:47:51 2026 by rpki-client