
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
File: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft (raw, json)
Hash identifier: Ez/5KhAgFswkLsbqFouoCeZBh2MjyhKsrkRlDYdM3Go=
Subject key identifier: D9:8A:CE:DF:6B:A6:98:D3:55:41:3F:8E:94:1C:EA:8D:D5:2C:F3:09
Authority key identifier: BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
Certificate issuer: /CN=A91F9E9D/serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
Manifest number: 01D5
Signing time: Fri 17 Apr 2026 03:24:54 +0000
Manifest this update: Fri 17 Apr 2026 03:24:53 +0000
Manifest next update: Fri 24 Apr 2026 03:24:53 +0000
Files and hashes: 1: vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl (hash: gCIL8Ndc95JEFcKX17DNfOmrBBTP0Y4kw2BCUWsG7Yc=)
2: 3DA5441A070611F1ACA42273223D8C67.roa (hash: n+Kx5YLJVSW5gosUnIscCwbaC3lMeiZQn4J/zNSLjd4=)
3: 453686A272BA11F09A607433C4F9AE02.roa (hash: vxtVSqgO0tJzIWUXWRbBUws88DNS2So0GYHbthIwwJY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:24:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9E9D, serialNumber=BE019137A81D7E9CD9AF56CD91C587C2EF06E93B
Validity
Not Before: Apr 17 03:24:53 2026 GMT
Not After : Apr 24 03:24:53 2026 GMT
Subject: CN=69e1a806-1ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:c3:20:56:b9:0f:b5:93:f2:04:ee:a5:db:
2a:52:fa:77:c8:77:9a:94:df:7a:22:27:df:f1:32:
5b:8b:52:7a:a2:ed:a6:18:52:e7:62:2f:c0:fb:b4:
75:5e:fd:6a:6c:ee:94:81:42:ab:e5:c4:2e:8c:8f:
f5:c2:74:60:13:04:4c:01:31:4b:38:f2:f7:3f:5c:
5f:82:1d:64:5a:38:21:cf:c2:f3:40:ce:58:72:ee:
e6:c5:fb:a1:71:6f:a5:0f:e4:f1:26:ca:74:3e:cb:
ee:e6:c3:ee:93:12:85:28:a9:83:05:9a:9d:ee:67:
61:a7:7c:eb:4c:9a:c1:5f:ee:38:4d:9b:f1:6e:97:
6b:c8:ac:dc:b9:05:4f:1b:fc:ff:6a:4a:84:a1:6a:
a1:06:a8:a0:90:dd:54:ae:1b:c9:60:2e:e8:1e:1c:
7c:eb:be:80:1d:a3:35:70:7b:ab:19:ac:4f:9a:87:
e1:e4:35:b3:6d:19:37:7d:03:1c:d4:c7:cc:c2:f2:
c4:b3:87:25:78:0b:70:d5:88:98:7a:9e:3e:49:4f:
55:0c:28:fc:9f:f5:3e:28:d6:5d:e3:33:87:86:99:
67:0d:90:74:85:72:03:4a:10:d5:9e:d1:00:b9:f8:
22:09:d7:57:27:46:f2:74:e2:b0:da:81:b9:27:59:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8A:CE:DF:6B:A6:98:D3:55:41:3F:8E:94:1C:EA:8D:D5:2C:F3:09
X509v3 Authority Key Identifier:
keyid:BE:01:91:37:A8:1D:7E:9C:D9:AF:56:CD:91:C5:87:C2:EF:06:E9:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9E9D/52828B2A7B8711EEA840F21EC4F9AE02/vgGRN6gdfpzZr1bNkcWHwu8G6Ts.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a6:a4:26:8c:7d:e8:22:bc:f9:a5:65:82:3d:a3:d7:13:81:
73:a8:50:92:8a:08:9d:72:c5:22:79:c3:49:64:2c:06:2b:12:
43:f5:a2:c9:f5:08:a9:86:3b:90:1d:7d:ac:8f:ae:01:8d:c2:
d6:9e:48:53:2b:33:16:2d:ae:d3:51:8b:3f:bd:86:27:fc:64:
4a:8c:1c:0e:f0:a6:95:71:6a:3e:4a:01:30:78:9d:be:b7:4e:
01:fa:4b:94:99:54:e2:3c:0a:aa:31:74:82:07:17:37:d9:df:
28:7e:23:27:90:35:48:bc:34:a6:66:36:bd:98:ee:3f:43:17:
4a:d3:b4:a1:99:90:36:a8:b4:20:de:07:22:e5:67:29:04:64:
ec:e1:a8:36:70:45:bd:68:c3:5a:1c:e7:84:af:57:62:09:11:
69:17:92:05:97:b5:1b:37:df:86:44:98:01:0b:0b:e6:cf:74:
f8:1e:ff:2d:04:0f:51:06:93:60:d8:9c:90:86:39:ae:63:9c:
f5:9f:df:ea:e4:24:b4:28:cb:2e:3a:e4:9e:4b:45:55:6c:4f:
07:0c:10:04:8b:bf:3a:4e:0d:27:45:11:2b:24:40:3c:85:81:
fa:f1:49:c3:90:86:48:64:0a:16:63:e7:bd:9c:00:28:97:bc:
78:f4:95:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:33 2026 by rpki-client