
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json)
Hash identifier: xHBHdIQ4BQaYl4/gGUBEFrp2GNTZjPhp7AkIuXEro4Y=
Subject key identifier: 1E:18:75:BA:D3:8C:FB:F5:CA:EF:E8:20:BC:AA:03:12:D6:F9:92:11
Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Certificate serial: 07F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
Manifest number: 07E1
Signing time: Sat 28 Feb 2026 21:49:41 +0000
Manifest this update: Sat 28 Feb 2026 21:49:40 +0000
Manifest next update: Sat 07 Mar 2026 21:49:40 +0000
Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: senk0CQptU75MGnCxM1wmhLltvRZkKscOqwulX3uyF0=)
2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: TcpChTsBYQR53TAci1Cu49H66zJAUKzrxZhCpAIeCNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 21:49:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2038 (0x7f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Validity
Not Before: Feb 28 21:49:40 2026 GMT
Not After : Mar 7 21:49:40 2026 GMT
Subject: CN=69a362f5-321b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:47:bf:ba:b2:2a:a0:c9:58:e1:08:54:ca:
49:5e:4c:f6:7c:a6:b5:b3:02:b7:08:36:55:77:db:
4f:64:0a:20:76:9c:69:74:11:20:70:7d:92:33:da:
4a:b4:ec:cc:80:75:0c:19:bf:da:93:18:44:c8:95:
4b:1f:7a:34:a3:22:3f:a7:f2:83:03:0d:fb:65:d2:
84:eb:6e:2a:39:78:7c:aa:09:fc:4d:7e:36:e3:ca:
0b:93:f0:fa:88:93:ad:d9:e3:20:1e:93:1d:92:27:
f0:e2:f9:c5:1c:81:a4:5b:88:a4:b2:60:e4:bc:d0:
d5:90:84:70:c7:3e:23:09:41:bc:cb:e1:4f:87:83:
27:4a:99:23:d9:10:e3:f3:d6:97:d0:ff:59:57:98:
6f:5c:27:20:b9:d1:1d:60:bc:52:e4:8b:60:fe:c3:
8d:03:ad:4b:96:2b:cc:25:2e:14:fb:02:fd:ae:b3:
7e:e8:c8:03:a9:74:e7:a6:df:e9:17:15:e7:a6:4b:
fc:cb:07:e8:80:77:3a:1b:5c:75:74:1f:eb:80:da:
23:07:60:2e:fa:a4:3c:5d:ef:59:0f:15:7c:18:e3:
a0:32:45:30:04:bc:11:97:5d:c3:bb:1c:e1:f9:76:
0a:86:57:80:9b:51:3e:49:ec:62:cb:15:53:f4:b1:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:18:75:BA:D3:8C:FB:F5:CA:EF:E8:20:BC:AA:03:12:D6:F9:92:11
X509v3 Authority Key Identifier:
keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:1f:66:c0:ca:cd:47:10:36:16:a5:d3:ce:c7:7c:e8:1f:41:
90:3b:a6:7d:4b:30:31:cc:e9:96:16:a4:5c:3c:c8:4f:a2:bb:
1d:a2:65:4d:e6:8d:66:de:5b:4f:14:7c:1b:c1:45:c1:29:9a:
ba:4b:ae:39:59:95:eb:c4:e4:78:a5:e0:2b:79:c0:92:9b:57:
bb:f8:51:9f:fd:f8:3d:e7:72:64:ed:93:9e:e5:95:72:1c:53:
bd:f9:b5:32:56:59:3f:8c:a0:b3:e0:f5:4b:2d:bb:6b:53:7c:
ce:06:e8:73:b9:77:9b:44:35:cb:72:e0:80:84:f0:62:77:fb:
16:a8:1b:db:b2:31:05:96:22:b3:1e:07:b1:60:39:e8:1c:99:
ed:8c:4e:86:83:ec:02:51:77:88:1a:ab:8e:1b:3a:1e:a4:5e:
20:2c:6d:7b:4a:c3:29:65:2a:d9:10:11:cf:0a:8d:5c:98:f0:
aa:be:d6:d0:5e:b3:77:6e:c2:74:ee:41:de:4a:fb:ac:3d:5c:
3e:02:0b:00:25:78:96:67:b8:8a:4f:0f:95:07:82:b7:ca:f3:
69:91:62:47:d9:ea:8e:2d:34:5e:8c:1e:30:c0:6a:ca:f4:c4:
8c:63:0b:b9:93:43:6b:f5:ef:bb:2e:13:03:da:af:2a:9e:f7:
37:5e:82:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:21 2026 by rpki-client