
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
File: VA3axmjYtQyWYFcSGVqYihytnj8.mft (raw, json)
Hash identifier: qSR76mPLsOUZDELMb9uIUM4e9rU+TkbD1Ow9JdWGloo=
Subject key identifier: 3C:D6:72:E3:26:D6:77:FC:AB:A5:71:67:47:7E:D6:51:51:DA:F7:E4
Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
Manifest number: 0853
Signing time: Sat 26 Sep 2026 21:14:09 +0000
Manifest this update: Sat 26 Sep 2026 21:14:08 +0000
Manifest next update: Sat 03 Oct 2026 21:14:08 +0000
Files and hashes: 1: VA3axmjYtQyWYFcSGVqYihytnj8.crl (hash: ihBzTiaZl/mu2smE5GCBkNdBpxXpgZIEmzIGbF+4rEI=)
2: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (hash: zwaIVuRApbY9s1XyqtW/uqvzs4vi0AfgJgFNST/nhro=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:14:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F
Validity
Not Before: Sep 26 21:14:08 2026 GMT
Not After : Oct 3 21:14:08 2026 GMT
Subject: CN=6ab835a1-4204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:38:58:bf:24:7c:db:61:db:11:25:3d:91:10:
66:db:93:64:5c:6b:4e:dd:ce:a4:90:98:2b:bc:84:
7c:b8:8b:64:e2:be:c2:e9:ae:bd:40:64:75:82:af:
ed:67:e2:af:b9:e7:61:d5:62:8c:6a:2a:02:41:82:
4c:a2:4f:89:ec:d8:e3:81:c8:5d:b9:3a:24:e7:ef:
de:98:cd:ec:8f:09:24:00:3d:55:c1:7c:b0:11:ea:
7c:5f:58:9c:ff:88:a2:54:c7:54:53:40:8c:bd:5c:
9e:62:19:da:62:66:6b:9e:04:5f:dc:d9:21:ed:ff:
e3:f5:9c:6d:b6:c7:57:2c:f5:46:33:9e:e8:5a:ce:
ee:8d:f8:22:8a:63:53:0b:70:94:2a:2a:01:ea:d0:
98:96:eb:97:f2:03:7b:8b:e1:cb:d2:24:2d:a0:32:
22:8d:f7:f4:2a:7d:c7:fe:4b:25:52:23:31:b7:cf:
ae:66:ef:4d:7c:a4:da:57:c6:be:4b:47:45:b6:f9:
c0:77:94:0a:6e:bf:84:e7:5b:93:69:ff:cc:59:51:
f6:c3:5d:d3:47:a2:91:60:22:47:57:88:30:2a:4a:
a4:f2:f2:6b:68:bb:6a:e2:96:0e:dc:85:2e:54:df:
44:8a:37:05:d9:88:cc:4a:fc:4e:06:db:e1:d7:25:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D6:72:E3:26:D6:77:FC:AB:A5:71:67:47:7E:D6:51:51:DA:F7:E4
X509v3 Authority Key Identifier:
keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
28:6e:a3:fb:e8:d2:a4:c6:0e:a0:af:51:8d:f4:26:c4:d2:5d:
5a:9d:78:fe:cf:dd:9d:33:df:4a:e0:0e:01:8f:1f:d4:6b:c8:
e1:c1:9d:c0:be:97:f8:1a:30:7d:6d:8f:bc:09:f6:f2:ba:1a:
d9:4f:b6:79:b2:75:05:5e:0a:58:ae:fe:7c:90:54:fd:d9:5d:
72:30:04:c5:ba:cb:da:7f:ff:14:87:54:26:85:ea:72:6f:8f:
2b:53:13:4e:86:b2:12:76:03:e1:a0:06:b2:2f:4d:c1:2b:38:
1e:1c:59:fc:42:8e:e4:c8:ec:65:8e:a3:0e:ea:d0:7f:dc:72:
5e:89:50:2f:8d:76:e2:d2:33:d2:72:88:b8:c1:47:2b:81:01:
ee:0e:8e:9f:64:fc:90:9b:f9:46:eb:ad:ff:fb:8a:57:59:c3:
82:1d:0f:6a:c9:1b:cd:b6:bf:20:c3:ba:e0:5d:b1:b3:72:58:
45:13:47:60:33:b3:8b:0a:44:c7:5e:01:3a:39:02:61:1a:b7:
dd:e3:b2:af:46:1c:f9:93:5e:ed:ed:63:a3:4a:3f:aa:97:d9:
92:00:48:4b:72:bb:ef:61:1a:6f:07:00:8c:a9:48:1b:ec:d6:
ba:22:88:39:c9:60:81:9d:a0:67:0f:69:9b:d1:80:ad:f5:39:
0c:6b:cd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:30:50 2026 by rpki-client