
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier: u90pW0yUqjNE/uHNgLKfiurrcO0IPafqaqob8Yia1/I=
Subject key identifier: A2:26:FA:2A:7B:31:B2:E7:6D:96:0F:D4:75:CA:1A:53:B2:C6:5B:83
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial: 0112
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number: 0102
Signing time: Sat 13 Jun 2026 06:23:35 +0000
Manifest this update: Sat 13 Jun 2026 06:23:34 +0000
Manifest next update: Sat 20 Jun 2026 06:23:34 +0000
Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: 287VUidXJS9ppTWPJHPBLp8hqtALTNnEmBYc8NMEcGU=)
2: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=)
3: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 06:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 274 (0x112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Validity
Not Before: Jun 13 06:23:34 2026 GMT
Not After : Jun 20 06:23:34 2026 GMT
Subject: CN=6a2cf767-d8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:4a:be:0a:e8:4c:c6:7a:e2:76:14:8d:3a:
eb:8a:5c:22:0a:13:84:12:e5:1e:61:91:06:b9:17:
42:e6:6c:47:11:ae:c5:8d:f4:23:ed:64:b5:4f:45:
8c:99:90:73:e4:ed:fb:5d:b3:d9:0e:6a:7d:8b:1a:
29:42:1f:54:08:6c:d5:70:50:7d:09:0d:bb:15:7b:
9d:69:10:39:c7:27:aa:39:78:64:9d:ee:8f:7e:fc:
95:09:49:a7:47:63:57:ef:97:1a:ae:e9:0f:87:35:
62:d2:8a:76:9c:a7:4a:ad:32:4f:73:a5:43:45:48:
1b:90:d8:b4:ca:25:ea:1b:24:05:bd:d6:56:4b:c9:
c1:79:7c:66:87:89:cc:cf:0c:d5:60:4e:cb:ab:d4:
ab:44:51:2e:6d:ef:c1:5e:17:c0:3f:18:b2:05:14:
14:11:8d:fc:6d:56:05:0f:da:77:e0:6a:19:0b:d4:
15:3f:4c:81:c9:64:40:ce:b7:4c:76:83:63:2c:c7:
c0:c5:b6:58:6f:1f:01:a5:5c:cb:d0:ca:dd:4c:6c:
d6:3b:75:22:94:0c:84:30:7c:1b:17:79:21:d6:cb:
4e:66:2c:b3:ca:c6:61:76:0d:0e:b1:8b:69:6e:1c:
68:e7:d5:75:a5:04:a7:da:36:08:c0:cb:2f:ea:5f:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:26:FA:2A:7B:31:B2:E7:6D:96:0F:D4:75:CA:1A:53:B2:C6:5B:83
X509v3 Authority Key Identifier:
keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d7:73:38:0c:92:1a:50:2c:5d:7b:d8:72:66:e3:30:83:3f:
7a:0c:dc:dd:a5:3b:21:c1:dc:3c:a1:a9:af:96:25:1a:b6:cb:
0b:21:8e:9c:c5:94:f2:cf:58:49:eb:e9:15:84:85:6d:fb:85:
53:33:4b:92:8c:13:29:fa:4f:8b:cc:83:0c:57:b1:97:70:22:
83:b7:c3:f6:79:51:90:79:b7:c8:d0:ec:5b:7a:dd:d3:f2:9d:
7c:10:5f:c4:bb:68:4c:57:b9:d6:09:f1:93:5f:bc:01:a6:f9:
5d:da:52:ab:20:2c:81:fe:7e:e9:00:0b:85:78:4f:56:fc:c8:
77:d3:86:b5:75:8f:de:3e:b3:11:98:a6:b4:96:a9:1a:04:4e:
5f:c5:c1:a3:60:c1:7a:7b:13:a6:af:f5:28:99:d3:c1:f2:e1:
98:88:80:bb:c7:d7:80:d2:a0:92:51:31:6e:45:49:73:52:6a:
df:6b:d2:f9:d4:36:6d:fb:fb:b5:98:12:c2:3d:66:bc:77:43:
e8:de:c6:55:44:b4:94:14:c2:0c:0f:9b:e1:3b:9b:a1:5a:e3:
e9:71:b7:65:9c:5f:ba:dc:bd:4a:6f:ff:d1:b6:fd:d8:4c:31:
d2:ef:cc:4d:1f:4a:91:3c:bf:fb:b3:ba:c7:8c:f4:58:be:ce:
93:1b:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:50 2026 by rpki-client