
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier: 4w2EKnVaiQubWBmTeXcWsF8s//gMu55d6xDTVhlACuQ=
Subject key identifier: 5E:8A:22:9F:AB:0D:D7:D4:1D:D1:F8:88:24:45:E7:DB:6F:8D:12:8D
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 050C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number: 04E8
Signing time: Fri 12 Jun 2026 23:54:00 +0000
Manifest this update: Fri 12 Jun 2026 23:54:00 +0000
Manifest next update: Fri 19 Jun 2026 23:54:00 +0000
Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: kl01o2rvj1zhaW0CZtuF89dA/mueQKKjnjNhvMg4B9I=)
2: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=)
3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=)
4: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: w3nvVMhda5IjTFdk4xKF64GrdrXfq8VER05dtIUgZTc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1292 (0x50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Jun 12 23:54:00 2026 GMT
Not After : Jun 19 23:54:00 2026 GMT
Subject: CN=6a2c9c18-5efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:18:6b:3b:af:c0:0d:7a:cf:05:d2:2d:f8:
69:6e:f2:1f:bf:d7:91:25:3c:9c:da:0f:e5:fa:7d:
06:4e:f3:80:db:ae:f8:37:9d:8f:d1:20:3f:61:d9:
6e:13:eb:e3:36:3f:22:0a:4a:16:dc:cb:ca:f1:26:
92:2e:0d:55:3f:aa:89:96:11:7c:5d:f0:ab:07:a1:
92:76:3d:e7:60:d3:e3:ed:f5:80:54:ee:68:c6:f0:
54:2d:fd:de:fc:6f:07:36:cc:c5:8f:3f:46:f6:08:
6b:80:cb:be:f8:a4:0f:f1:f9:e4:7e:b8:95:22:71:
cd:33:7d:eb:ef:96:11:76:80:e2:74:75:0a:dc:07:
c6:17:72:24:96:99:85:6d:00:8a:4e:2d:f5:92:45:
d0:a8:2e:6a:bc:cb:12:d3:68:08:cf:ac:02:d3:04:
20:41:76:fa:19:03:26:6f:43:3d:34:93:72:21:ce:
79:69:26:4a:92:77:f2:43:de:51:67:2f:98:0e:b9:
07:48:06:91:d2:1c:4f:47:c9:f2:c1:7d:e5:c0:44:
42:71:8f:84:c0:e3:eb:e2:1b:d8:7d:8d:30:26:32:
0f:c2:92:bf:98:08:40:3b:5c:f8:7e:ef:13:b4:17:
31:ab:9e:07:d4:a5:b5:e9:15:4f:f4:a1:e4:17:84:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8A:22:9F:AB:0D:D7:D4:1D:D1:F8:88:24:45:E7:DB:6F:8D:12:8D
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:70:64:9b:7b:4c:c1:28:69:23:66:95:76:a5:da:78:96:85:
ae:df:22:e0:29:ea:0d:b1:eb:96:36:42:53:03:11:c1:74:f4:
b7:3e:fb:1d:67:ec:dd:0f:42:df:2d:6c:9c:ce:98:19:07:c2:
08:1e:cd:9e:6f:ec:99:53:1c:ab:60:a5:91:58:98:55:91:0d:
4f:b4:51:9e:79:be:92:b9:de:e3:47:43:b7:9a:3e:96:bf:4f:
fa:91:38:cb:06:9c:01:80:dd:05:58:a3:78:e0:9f:a9:6a:7e:
ad:16:4e:bb:6a:47:91:94:9d:2f:08:86:a0:46:a2:25:38:2b:
fe:5b:d8:bb:b1:a9:2f:49:0f:bd:0f:e6:0a:37:8e:46:f9:72:
a4:93:3e:14:c5:81:fa:74:62:6a:04:22:07:23:e2:05:57:8f:
88:44:14:5a:4c:a7:5d:3d:10:69:03:1a:59:62:1f:00:a7:fe:
6f:c8:b1:ba:09:0f:89:d2:85:4f:83:cd:2e:1a:0d:f6:a0:a3:
a9:b8:15:98:93:1f:8c:5a:1b:ca:66:0c:71:54:c6:0c:15:a4:
00:8e:c8:e9:b1:f0:ec:ff:a6:a6:a5:53:5e:f1:ef:f7:87:60:
db:b7:f1:2b:b7:05:87:c2:31:79:17:a7:0c:44:4d:55:7c:13:
7a:1f:ea:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:11 2026 by rpki-client