
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
File: RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft (raw, json)
Hash identifier: 2JLUfAhtdrYOf2S11Hl9x4KfFuvuW1CJa4NPfeOFDd8=
Subject key identifier: 06:72:2D:FF:A7:1D:04:D6:D4:9D:9F:68:B8:55:A2:D8:8C:E6:65:88
Authority key identifier: 44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
Certificate issuer: /CN=A91FF1CC/serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Certificate serial: 0128
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
Manifest number: 0118
Signing time: Mon 27 Jul 2026 08:04:38 +0000
Manifest this update: Mon 27 Jul 2026 08:04:37 +0000
Manifest next update: Mon 03 Aug 2026 08:04:37 +0000
Files and hashes: 1: RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl (hash: PjJqnWxRD3aw/LiW+HJBLeWMtD8PThm/Miz4870GRps=)
2: B7E221E4024311F0BD990F64C4F9AE02.roa (hash: DNVcT9vlOL5C+M5NWsx8rDKEeNWClzlTLjHUADJPF9Q=)
3: 1ED36EFC590C11F0913BCB35C4F9AE02.roa (hash: 1wBdfmz9ZOlgXA8cUT97W+oxh2g0aMueEhoUhmPC3Ic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 296 (0x128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF1CC, serialNumber=446FAF923BEBAF96357287FE250991C75491454D
Validity
Not Before: Jul 27 08:04:37 2026 GMT
Not After : Aug 3 08:04:37 2026 GMT
Subject: CN=6a671116-58a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:32:05:e2:0c:8d:ff:d0:33:f9:37:9a:43:
e0:db:52:f9:ba:45:59:80:f4:d7:0e:5e:e6:24:62:
5c:ae:21:eb:37:2d:6f:17:a1:dd:0e:09:16:14:33:
91:23:f0:10:78:c8:af:bb:c4:af:63:45:e0:5c:29:
46:2f:cf:d8:9e:e2:97:15:7d:a6:8e:6a:bf:ba:82:
bc:e2:e5:07:b0:56:66:c2:44:8c:55:87:d9:dd:d5:
4a:e6:ce:3e:7e:e6:a7:f4:d8:66:c7:44:a0:0a:c6:
26:0e:20:3d:b0:58:ec:d2:00:45:ba:ef:f3:af:67:
de:3e:d2:7d:7f:02:b7:29:fb:16:b6:e4:d9:85:d3:
90:7f:49:aa:f5:fe:f8:65:cc:47:d5:df:d3:f0:ac:
db:ee:cc:d3:33:3d:86:13:c0:9d:5d:ef:64:20:5b:
51:07:bc:76:06:e9:43:ad:ff:b3:d7:87:02:ed:e3:
d7:99:88:60:47:f1:ec:75:0c:ea:94:36:6d:41:80:
1b:6f:13:38:92:6c:7e:ea:70:6c:c7:4d:51:c1:77:
8a:7e:b9:1e:2d:72:96:bf:8b:71:d8:ae:51:76:7a:
73:1a:87:35:a2:cc:f5:e6:94:a5:97:ff:38:70:5d:
9a:f0:bb:d8:d7:4f:a9:52:f4:75:c2:59:40:47:0f:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:2D:FF:A7:1D:04:D6:D4:9D:9F:68:B8:55:A2:D8:8C:E6:65:88
X509v3 Authority Key Identifier:
keyid:44:6F:AF:92:3B:EB:AF:96:35:72:87:FE:25:09:91:C7:54:91:45:4D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RG-vkjvrr5Y1cof-JQmRx1SRRU0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/3AFC33E2EF6311EFBF64AB6AC4F9AE02/RG-vkjvrr5Y1cof-JQmRx1SRRU0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:50:1a:78:91:00:6e:f4:2b:68:77:18:79:7d:68:cb:17:
ca:a1:f5:2e:13:b3:ef:c5:69:02:54:f0:2b:a2:24:cf:7e:c5:
ca:d1:14:0c:f8:b1:46:9d:6c:06:30:f9:d4:d8:8e:23:b8:57:
f5:ef:1b:38:c7:5e:f6:63:5e:76:b0:4e:3c:4c:85:ca:10:9b:
94:8e:80:de:5e:4a:e3:87:ae:5d:d6:31:f8:25:93:d4:8d:32:
bb:d8:58:a1:34:db:8f:91:ee:e6:40:0b:ea:1c:0c:2b:72:d8:
88:4d:dd:54:1b:2f:ee:eb:4d:1c:07:5b:2c:21:ca:65:93:9a:
8b:2f:26:e7:47:af:48:ea:42:02:92:54:97:e7:18:29:0e:fb:
d8:a5:2f:f5:84:74:80:48:dc:24:0d:7e:56:6d:41:79:ab:f3:
95:92:a1:c1:cf:b5:51:69:9f:a8:64:e8:83:f4:33:ba:c8:0f:
c1:cc:77:02:cf:11:0a:85:3c:27:12:7d:c5:a0:3c:85:55:33:
f9:11:9c:a0:f9:47:c1:88:b7:be:1e:54:6b:9e:a8:05:53:b5:
61:59:56:86:03:81:ef:a2:6e:d4:9a:cb:ba:59:c9:89:45:2d:
56:d0:dc:e8:cb:bc:b4:01:e1:c9:94:65:e5:51:96:ef:9c:5a:
ba:df:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:40:24 2026 by rpki-client