
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier: N5LWucbqT5fXU76rPAnSWddv6TQ9DFONNt3ESIxY6WA=
Subject key identifier: D9:5D:40:08:88:2A:B9:34:CA:7F:93:D2:EB:BD:E7:2C:F3:C6:D5:50
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 04EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number: 04CB
Signing time: Thu 16 Apr 2026 23:51:41 +0000
Manifest this update: Thu 16 Apr 2026 23:51:41 +0000
Manifest next update: Thu 23 Apr 2026 23:51:41 +0000
Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: 86rijQmuDByWKc3UuFred7KvOwLGPautjxJ8hPzzEu0=)
2: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=)
3: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=)
4: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1263 (0x4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Apr 16 23:51:41 2026 GMT
Not After : Apr 23 23:51:41 2026 GMT
Subject: CN=69e1760d-2fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:8c:4b:2a:ae:f1:10:a4:9a:7a:de:fe:f1:
52:83:c8:bf:b6:33:0c:31:70:38:2d:42:19:9b:e9:
12:d2:fb:5b:44:56:48:5b:be:d4:18:61:56:a0:18:
b2:20:ad:d0:f5:f2:9a:33:ab:6f:2b:24:5d:10:ab:
56:12:89:08:5e:a6:76:16:93:50:02:49:dc:7f:5c:
a0:f3:19:59:8f:17:e5:ba:cb:63:8d:46:f5:dc:74:
29:15:58:30:3d:ed:0a:00:8b:0e:90:1d:45:4d:e2:
aa:f0:24:fa:1e:d4:fb:68:71:d2:5a:fb:84:ce:d6:
4c:54:71:88:cc:bf:49:27:42:dc:18:da:2d:5b:52:
60:58:1b:ea:9b:3b:c1:b6:87:6f:d6:a2:33:b1:15:
ff:8b:26:13:40:38:1a:27:0b:fe:14:b6:d9:26:14:
cd:07:2d:d8:f0:5c:4d:ce:e8:c8:46:6a:87:bf:a6:
42:00:38:42:07:56:34:3d:98:13:32:c2:09:8f:12:
01:bc:de:6e:bb:78:4f:c8:64:f4:f3:df:32:b8:57:
e0:21:c4:ae:18:14:34:f7:22:44:7e:91:ea:74:5a:
b7:df:9a:fe:93:4d:ef:05:73:6d:84:cf:64:6c:e0:
60:80:ec:df:9f:c4:d0:a8:69:a7:1b:a9:bd:62:22:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5D:40:08:88:2A:B9:34:CA:7F:93:D2:EB:BD:E7:2C:F3:C6:D5:50
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:59:e2:35:d9:3b:98:aa:53:8f:af:3e:02:07:9f:7b:1c:7d:
77:13:91:01:4c:ea:ef:c8:0e:e9:ce:b3:6e:96:e7:52:d6:7b:
92:8b:3f:01:25:c7:96:48:28:9a:b5:00:58:d6:1f:5f:97:39:
ca:03:a1:dc:8e:df:52:32:08:77:97:9f:88:82:2c:b9:e2:f6:
c2:3c:56:23:fe:d7:ef:dd:4e:18:29:6d:d1:26:94:ad:55:26:
78:d8:ef:a5:22:e4:35:43:a6:71:23:8d:6d:da:31:3f:79:7f:
bc:18:71:4b:68:f0:83:2f:f0:1b:8c:23:71:2e:c4:19:fe:f2:
97:85:71:83:33:c7:40:30:c8:27:38:8f:f4:02:16:72:53:1c:
72:a2:77:b7:07:53:3e:4f:dc:ac:fa:c2:ae:c7:c4:e5:fa:d4:
84:e2:be:96:50:04:89:1e:a1:d2:d5:6e:98:16:ab:9e:4b:01:
d2:87:56:40:60:2f:e6:d7:7d:2c:9b:e6:02:2a:bc:1c:2b:78:
e8:dc:cc:ae:40:11:32:50:33:02:9c:d8:2d:81:5c:bc:4c:ba:
6d:bd:56:6c:5c:db:71:9f:79:c1:51:30:e4:d3:31:5d:c5:2c:
80:b9:5e:77:77:18:d2:eb:8a:41:fa:68:00:be:b7:39:b0:e5:
d6:df:93:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:01 2026 by rpki-client