
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
File: vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft (raw, json)
Hash identifier: kPNvB/Z+4++hh8z/Rju1oZwXG1x4zcFjwRiV/dDzgKw=
Subject key identifier: BF:B3:30:57:DB:97:6D:E5:7D:78:F6:AD:2E:62:4C:DF:AE:91:57:7D
Authority key identifier: BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
Certificate issuer: /CN=A91FEB89/serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Certificate serial: 02F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
Manifest number: 02E7
Signing time: Fri 17 Apr 2026 01:13:30 +0000
Manifest this update: Fri 17 Apr 2026 01:13:29 +0000
Manifest next update: Fri 24 Apr 2026 01:13:29 +0000
Files and hashes: 1: vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl (hash: tqnZQ5HN/V2mKlwCCEKDW1S2dYOt8etDASKzR2xp5tM=)
2: 5706BF6024F111ED84831E21C4F9AE02.roa (hash: /BvQ6kvIEgBffI02nHSKZcn99+fjwqt27ykwaYqA3zc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:13:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 753 (0x2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FEB89, serialNumber=BD16B56432AE5F43025C4DA1134537F704EB4096
Validity
Not Before: Apr 17 01:13:29 2026 GMT
Not After : Apr 24 01:13:29 2026 GMT
Subject: CN=69e1893a-ff76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b3:e9:17:31:0f:45:e0:03:34:cd:15:f6:4c:
ad:1c:30:ad:8a:6d:0c:ce:1b:f2:f8:97:8d:c6:b5:
4b:87:3b:a1:7d:09:ad:06:90:2b:09:59:b4:bf:41:
59:b3:e2:93:cb:11:56:12:5f:c9:28:ad:59:db:54:
70:b5:9e:c3:16:63:06:02:e9:96:82:9a:fe:62:bb:
b8:09:74:eb:73:78:ae:50:d6:1f:45:bc:d4:f2:f8:
44:92:c6:7a:f1:98:e4:ea:7b:70:d8:3f:84:db:63:
97:7c:de:5f:fe:72:e3:b2:47:08:9f:e2:5c:c3:b6:
32:24:a5:b2:45:20:c2:0f:5d:4d:de:d4:d0:bb:d8:
ad:f2:56:e2:03:ac:71:76:31:31:20:de:fe:2c:a0:
3d:95:e1:89:20:4c:fc:ff:e4:6f:dd:de:3b:09:72:
07:66:21:50:c9:1c:4c:03:a3:da:97:f0:56:22:aa:
ea:40:58:4b:ac:bb:b2:c4:37:28:79:3a:17:62:a8:
dc:a5:7f:01:f9:28:17:0c:32:b9:61:11:c7:f1:e5:
88:0d:ad:3d:a8:32:fd:41:30:a9:95:dc:46:94:94:
f7:84:6b:92:29:8c:ea:98:ed:66:18:a8:82:85:ff:
1d:d8:9e:f0:b8:4c:c4:26:0b:f7:33:18:aa:fc:3d:
81:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:30:57:DB:97:6D:E5:7D:78:F6:AD:2E:62:4C:DF:AE:91:57:7D
X509v3 Authority Key Identifier:
keyid:BD:16:B5:64:32:AE:5F:43:02:5C:4D:A1:13:45:37:F7:04:EB:40:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRa1ZDKuX0MCXE2hE0U39wTrQJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB89/96D3BA5C24ED11EDB8676118C4F9AE02/vRa1ZDKuX0MCXE2hE0U39wTrQJY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:bc:50:10:7c:59:d0:db:61:01:3f:3e:34:c8:12:3e:9a:54:
63:c7:9b:df:20:81:81:8c:09:30:2c:fe:d1:92:6a:c3:f3:2d:
57:80:15:34:a9:bc:f9:91:72:24:42:b5:7b:c0:6c:d6:ee:f4:
73:5e:28:c2:a6:31:2c:31:41:01:11:6a:33:15:76:ea:93:f3:
36:ae:a4:2d:ef:13:ce:3f:72:57:bf:d8:d8:71:98:a1:f4:ef:
b8:df:5f:dc:bf:66:fe:80:50:5d:ea:57:52:40:2e:1e:8c:e9:
1b:f3:11:d5:c8:be:d3:30:40:9e:c9:94:28:80:0d:98:41:6f:
33:9e:59:39:a5:64:8e:1c:c7:1c:29:28:ee:97:58:5f:e1:99:
62:f2:65:09:7e:a6:38:c9:f8:a9:13:e0:f6:07:04:ec:ae:b1:
f1:da:7d:f1:9c:72:10:57:69:8b:d0:5d:83:e4:29:33:01:bf:
f5:79:88:e5:61:b1:f1:a7:f4:95:e4:fa:61:73:c6:21:34:a8:
a7:95:5f:ce:ba:7e:db:2d:e3:10:5a:89:de:3e:23:9a:8f:4d:
33:4d:2b:ba:6b:df:b5:72:8c:94:df:43:cc:28:97:ee:2a:67:
fc:13:6e:37:a9:85:17:9e:77:a6:0e:c9:65:ac:7a:1a:6b:29:
12:84:4a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:28:00 2026 by rpki-client