
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
File: voUqizt-pcWsWlKqy4UqAaTN0II.mft (raw, json)
Hash identifier: G8FehpiHVcGadc8oAmd3Z/DU7b0gcCK4JrBkDEJMDpI=
Subject key identifier: A8:41:EB:67:3D:1A:C2:6A:C3:F7:64:AB:00:73:EE:7E:D4:CA:FE:47
Authority key identifier: BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
Certificate issuer: /CN=A91FF428/serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Certificate serial: 04FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
Manifest number: 04DB
Signing time: Sun 01 Mar 2026 22:44:39 +0000
Manifest this update: Sun 01 Mar 2026 22:44:39 +0000
Manifest next update: Sun 08 Mar 2026 22:44:39 +0000
Files and hashes: 1: voUqizt-pcWsWlKqy4UqAaTN0II.crl (hash: wH6HuuwxZRStAIFSXqW6HneuaEkKlv3Gg8AWDOQAyKw=)
2: D254B444679111EF8A2C9062C4F9AE02.roa (hash: GVjvFKgHSY78CpYCc98Qtcp6gxw2fNKpFQ7HCML9xSg=)
3: D717B9F0B7E511EFB5F63E6DC4F9AE02.roa (hash: KrKOHKApCfIlvSNW0s+tbRggHCf468HmTluYQjo8tCk=)
4: 14F55DEAB7E611EF9B9D9F6DC4F9AE02.roa (hash: WdNld5DHUPVbC8ourF5Ae6KnkYpsmFk/aie/RVL4jQw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:44:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF428, serialNumber=BE852A8B3B7EA5C5AC5A52AACB852A01A4CDD082
Validity
Not Before: Mar 1 22:44:39 2026 GMT
Not After : Mar 8 22:44:39 2026 GMT
Subject: CN=69a4c157-f162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:ab:23:be:81:80:cc:36:89:49:3a:9f:e7:
df:6d:90:88:c3:bf:79:d4:60:92:b4:33:9c:5a:c3:
d3:11:b2:cf:23:66:07:fc:34:c8:e7:03:17:2a:79:
0e:66:00:50:6b:16:3f:0b:24:6c:20:4f:3c:ca:3c:
f6:e3:86:47:cf:71:44:8b:96:14:24:60:d5:41:99:
8e:45:eb:80:a6:5f:81:8d:1b:01:fe:90:70:3f:f5:
1d:61:be:42:8b:76:e5:9d:b0:40:62:4c:8e:79:ab:
64:22:eb:01:c6:db:ac:a9:36:fc:24:17:7c:a9:f7:
9b:59:df:20:e8:f7:e7:80:15:ec:f0:c2:f2:7c:50:
2b:21:1c:53:34:73:09:cd:d8:ee:5a:ab:5b:75:ce:
5e:b7:80:aa:a1:f1:12:6f:21:73:fa:fb:13:79:83:
59:ab:cd:ae:76:93:71:87:cd:6b:da:50:b9:98:01:
2c:a7:63:5b:5d:af:d5:4c:b7:f3:c4:2f:cf:f4:46:
53:af:a9:6f:b7:26:cd:c6:6a:30:f6:e3:f6:07:c5:
74:af:da:77:e4:86:ee:88:d7:07:c0:f4:1c:aa:f3:
f2:e3:b9:f3:2d:1c:bc:00:d8:34:36:07:d2:3b:2e:
c4:7c:f0:2e:3a:b1:e5:42:df:f7:71:61:35:90:fd:
5a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:EB:67:3D:1A:C2:6A:C3:F7:64:AB:00:73:EE:7E:D4:CA:FE:47
X509v3 Authority Key Identifier:
keyid:BE:85:2A:8B:3B:7E:A5:C5:AC:5A:52:AA:CB:85:2A:01:A4:CD:D0:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/voUqizt-pcWsWlKqy4UqAaTN0II.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF428/35EB13485DD811ECB9B4D630C4F9AE02/voUqizt-pcWsWlKqy4UqAaTN0II.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:40:5a:66:ee:51:fb:c1:b2:04:9c:fa:4b:45:a8:dd:cc:d9:
ae:b7:fa:59:f1:b9:2b:24:6a:ce:82:13:9c:ad:f3:11:5c:81:
cc:42:9d:93:bb:5a:c8:d3:46:f8:7a:6b:ca:9c:0b:d7:60:ce:
05:1c:b2:ee:73:2d:63:d4:7b:d2:4d:18:d3:d4:35:69:bc:7b:
20:af:4d:47:5f:cc:4c:66:6d:e5:7c:47:12:81:6d:db:7e:48:
ac:a0:c2:1f:9a:ed:72:9f:7a:13:1a:c9:0f:ca:2e:9d:7d:1a:
17:77:ee:76:7a:4a:09:2c:c1:59:dc:36:e6:28:4c:90:32:17:
22:a9:9c:d8:4d:d2:37:64:c4:56:b9:d4:c6:47:62:82:66:74:
0f:f0:95:b8:10:43:31:2d:71:29:e9:eb:f3:69:42:08:08:bc:
9e:68:85:98:b9:04:1a:6d:d3:5a:7a:b3:9f:bd:27:43:9c:23:
ad:77:47:ba:19:34:fa:79:af:1b:a5:7b:ce:8f:c4:6f:0c:7c:
c5:e2:6b:9f:d6:07:de:2f:bc:a3:64:b2:46:fd:12:92:b4:85:
87:0f:ab:06:31:e1:1b:02:2b:71:9b:59:0f:e8:ff:e5:cb:bd:
ff:f8:68:24:a6:1c:af:5c:5e:94:92:97:1c:b6:e3:44:b7:05:
52:9d:d3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:38:50 2026 by rpki-client