
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
File: VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft (raw, json)
Hash identifier: iiiHk+b6gtfgQq2T0hgzaemfO+2LpVQnSyEV5tO3htI=
Subject key identifier: 3B:14:14:74:C4:11:77:A3:A2:28:D7:DB:E5:94:C5:06:26:3A:BC:13
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Certificate issuer: /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial: 055A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
Manifest number: 0535
Signing time: Sun 08 Nov 2026 23:25:46 +0000
Manifest this update: Sun 08 Nov 2026 23:25:46 +0000
Manifest next update: Sun 15 Nov 2026 23:25:46 +0000
Files and hashes: 1: VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl (hash: YOAT85UIJ1oClyFh6HILsVAw2hcQPfHfJdtaQP2sn5c=)
2: 616435103F3E11EE81024074C4F9AE02.roa (hash: msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=)
3: B25FEE6E85EB11F088AFC15EC4F9AE02.roa (hash: ntcwoV1FlqdSazMhHJzfJk8O3vDdO9y+sIu2JKAWmdo=)
4: DDDB9EB80D7111F1B25D59101F3D8C67.roa (hash: K83IKFLML+Jk6Jw49wCe5WcA13zCA410o8mlpFwO+Jw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 23:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1370 (0x55a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Validity
Not Before: Nov 8 23:25:46 2026 GMT
Not After : Nov 15 23:25:46 2026 GMT
Subject: CN=6af104fa-28f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:e3:4b:98:77:3e:1f:35:1e:ae:5a:70:42:
2f:d1:0d:27:0e:6d:71:72:44:52:6a:0b:46:61:f0:
aa:ed:6d:ab:b3:67:10:9a:dc:59:d7:dd:71:1c:bd:
21:c0:a6:48:6b:01:16:72:6a:56:6e:71:3c:83:cd:
39:0c:02:32:92:fe:df:b2:67:85:b6:e0:b9:87:84:
cd:b7:23:d0:24:bd:ef:c4:61:87:b0:ae:35:31:a6:
dd:ce:a7:7b:f9:a7:43:53:a4:89:ca:ae:f2:00:1e:
e2:e1:73:fa:79:35:15:a0:a6:f6:07:30:35:5d:ae:
bb:6e:ae:30:ac:cb:e5:82:5e:97:cd:03:dd:6b:b3:
de:91:cb:15:bf:2d:e7:a4:46:97:c5:e5:66:ad:af:
08:46:3e:61:bc:b6:51:72:17:94:f4:af:88:ba:6c:
b4:67:9a:46:d0:8f:a1:32:da:d9:12:49:b8:03:87:
84:80:45:a9:f0:a0:88:b6:eb:e1:9e:26:cf:63:1c:
7d:a4:7c:73:a2:65:8a:47:ff:da:22:8e:82:73:f4:
85:01:32:a2:29:92:a6:69:55:3b:0a:0a:11:83:df:
f3:12:81:ea:67:03:9a:12:fb:62:93:cc:c4:d7:26:
ad:3e:9a:b5:0e:3b:52:0d:5c:cb:d7:2c:ee:98:63:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:14:14:74:C4:11:77:A3:A2:28:D7:DB:E5:94:C5:06:26:3A:BC:13
X509v3 Authority Key Identifier:
keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6b:7d:23:00:22:dd:8f:3e:6c:f9:78:de:6d:c9:ec:52:be:
cd:63:d5:d2:b3:31:d5:91:bc:cf:ca:bb:04:a6:be:1d:42:78:
6e:c6:19:17:b2:5f:54:ea:9e:98:16:0d:d1:94:d9:a1:3e:69:
49:99:00:e5:80:cd:1e:f0:4f:8c:0e:8a:4f:c8:fa:58:8f:70:
54:d5:1f:8f:4e:c6:8e:bf:27:ad:48:f4:23:22:00:d4:bf:dc:
21:8e:70:4c:d3:97:72:96:a2:fa:01:27:d9:99:42:8b:00:1a:
9f:13:e7:95:60:b8:1a:56:52:4d:31:b8:17:54:5e:30:7a:9a:
e7:25:6f:72:71:b1:78:b8:cf:ff:43:4b:95:c9:14:8a:fa:67:
fc:f5:16:69:2b:05:16:df:0c:23:86:f3:8e:1a:f1:0a:0b:9d:
7a:b5:c5:c9:00:5f:cf:a2:eb:9a:e1:a4:07:9a:96:91:09:65:
57:de:da:ca:79:05:4a:95:0c:99:db:52:ef:f8:4b:ec:d3:33:
33:5b:f6:75:95:f8:a1:07:ec:ff:0d:7d:bf:95:aa:d1:d2:80:
1e:38:a4:96:2f:99:40:76:e1:5c:3b:d6:e3:e2:bb:5a:74:8e:
4a:07:e2:2e:0d:97:31:47:63:47:69:52:27:02:f3:f6:0b:c2:
94:18:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:46:40 2026 by rpki-client