
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
File: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft (raw, json)
Hash identifier: eFV2uX353xcu0X1AsW7dKj9v0STH8JcyWqjeMqbRN40=
Subject key identifier: 57:27:44:A6:7C:A1:59:83:4E:CC:DC:F4:9B:3F:85:82:EB:5A:E7:0B
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Certificate issuer: /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial: 064C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
Manifest number: 0639
Signing time: Sun 20 Sep 2026 22:35:42 +0000
Manifest this update: Sun 20 Sep 2026 22:35:41 +0000
Manifest next update: Sun 27 Sep 2026 22:35:41 +0000
Files and hashes: 1: vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl (hash: SlPoriQuaI3SjwOcr+DV/RIEPdg/5RXLZPeTfFB11D4=)
2: 7FBF284EF5B211EB8419A23AC4F9AE02.roa (hash: FSmvi+jzzyKKXWhskSUQbtgE3xdZ8BhML9W9RQn3tuA=)
3: 0EF4DA3A38D011EC936A8C4FC4F9AE02.roa (hash: +ojUNJ+0LXpRUq2YvOJC2a3HW9his1KdABhw/922pzI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1612 (0x64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Validity
Not Before: Sep 20 22:35:41 2026 GMT
Not After : Sep 27 22:35:41 2026 GMT
Subject: CN=6ab05fbe-13a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:2a:4d:37:fc:14:88:61:15:29:ca:a3:5a:
93:f7:5e:0a:76:f3:a3:53:84:cc:54:7e:60:b2:a1:
a1:7b:a9:1c:60:49:b7:e8:c1:af:4f:9f:7d:55:3d:
ff:89:77:a4:63:71:85:87:25:4c:23:3f:90:08:88:
95:49:89:43:5d:44:69:c4:84:ab:76:6a:e2:fa:8f:
fd:6e:32:40:33:ad:2f:a3:90:dd:a3:84:69:b3:99:
23:9b:4b:8c:f6:c2:0d:f7:19:c4:4b:d3:95:e5:3a:
fc:20:e2:05:40:81:84:1a:74:1b:68:86:29:85:fd:
86:ff:98:24:12:ce:f5:40:68:75:cd:b7:69:9a:49:
49:11:cf:b7:cd:19:6b:01:3a:ab:b1:75:22:d3:a5:
f9:47:48:98:21:2e:31:f4:21:cd:28:37:7a:9d:38:
c5:df:62:e7:5e:59:2b:72:8d:01:8f:6f:c5:b0:0f:
6e:88:49:19:09:b9:59:2a:71:d9:58:cc:9d:f2:f6:
4a:1b:ce:f7:76:93:7b:d5:95:be:82:45:97:1a:e8:
bc:30:46:56:75:00:23:7c:79:b9:0f:e5:b1:ae:8e:
d9:9b:e0:59:b7:9c:3b:07:92:93:84:d3:ea:00:49:
55:82:a7:b6:4d:35:a1:85:d8:e3:ce:07:b8:f5:d6:
40:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:44:A6:7C:A1:59:83:4E:CC:DC:F4:9B:3F:85:82:EB:5A:E7:0B
X509v3 Authority Key Identifier:
keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a4:f6:ae:73:bd:99:a2:f9:95:72:ed:c9:31:99:b0:26:0d:
16:61:b3:e1:fd:0e:b4:7d:8f:c1:11:b9:b0:a0:4d:0a:f5:a5:
76:9c:08:6f:73:fc:f2:98:ef:a7:b3:78:58:30:8b:bf:cb:95:
75:66:20:0e:c6:07:b0:47:5f:1f:e1:99:51:76:1c:56:91:09:
9e:b2:f2:1a:a3:ae:7d:ac:ea:94:55:2d:6f:2d:bc:8a:a2:8f:
ab:7c:56:3a:db:e0:3f:ae:db:38:ee:82:87:59:40:0c:0d:e5:
65:15:58:99:46:d1:5d:5d:9c:86:53:8f:49:b1:a2:9a:2e:4f:
8d:43:1b:2f:6d:69:2f:67:b0:14:ea:48:ec:d2:09:ba:a2:0e:
f8:72:30:74:97:92:2f:cd:12:b7:68:a0:24:b6:ab:26:8e:78:
03:7c:95:12:0b:b6:98:f4:71:cb:2a:8d:e1:97:3f:d4:23:ee:
cf:1a:a0:fa:41:a9:54:96:e6:17:ee:f4:a0:95:7a:5d:78:dd:
6a:a7:72:f3:4a:08:f2:8a:79:1d:de:2e:d7:9d:67:4f:6c:af:
4d:86:a3:76:81:2d:33:6a:d6:62:8e:90:ac:ab:b7:8f:61:a9:
4b:81:27:92:eb:c7:ff:fe:99:32:ea:61:1b:86:32:47:18:3d:
ca:9f:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:13:56 2026 by rpki-client