
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json)
Hash identifier: gC0Cwtp5AnrtvT1VTtYN/3Xj/cxkOye0M4pYgQcFy0c=
Subject key identifier: E9:E1:B4:28:75:9F:0F:CD:2C:DE:E6:9A:57:98:BF:B4:61:99:A1:6D
Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Certificate serial: CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
Manifest number: 28CE
Signing time: Fri 24 Jul 2026 16:24:28 +0000
Manifest this update: Fri 24 Jul 2026 16:24:28 +0000
Manifest next update: Fri 31 Jul 2026 16:24:28 +0000
Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: +T52oRb0Et3uEggLEBVzSuRgpk1qVnEIdFBrH13/Tlw=)
2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: 29h4sav8XLlbEtuBhOtdUbdYfYw0of12Y7UKNdoTihA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 16:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Validity
Not Before: Jul 24 16:24:28 2026 GMT
Not After : Jul 31 16:24:28 2026 GMT
Subject: CN=6a6391bc-5e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:af:32:26:36:34:5e:8f:32:d8:2e:ab:42:
d3:f3:3f:4c:17:e2:76:31:89:d0:cb:81:0f:d2:4d:
ee:c8:15:58:26:44:ce:59:46:b4:53:a5:02:61:20:
94:6c:8c:22:09:c3:64:6c:49:e4:fc:1d:2f:69:38:
30:f1:4b:d8:cf:72:76:94:a1:36:d2:e1:15:1e:e5:
66:fd:21:6f:67:66:cd:fc:3c:14:66:ea:26:e3:7c:
d2:fe:19:08:c0:20:24:15:ad:d1:df:38:1b:74:79:
5c:94:2a:bd:54:f4:56:1f:02:13:5a:27:21:4b:59:
57:7b:87:23:eb:92:35:73:30:e8:63:67:1a:c1:e2:
cf:22:80:01:aa:9e:2a:fc:57:bc:bf:28:62:49:3c:
7e:fa:6e:1b:cc:75:2a:c0:50:f2:4d:b9:6f:22:8d:
92:fb:5b:21:8c:a4:12:b4:08:90:78:df:0f:15:28:
5a:28:76:de:45:c8:13:8e:9f:49:8e:f4:77:fb:53:
05:28:7e:1c:98:de:be:4d:0e:22:5c:f3:09:73:5e:
35:8b:50:99:36:a0:d7:3c:d2:ca:f5:91:5c:a3:ac:
16:6a:48:5c:71:db:95:e9:35:bd:e5:18:4f:16:21:
b1:0f:87:8b:73:6a:01:89:4b:f2:fb:3d:03:06:2d:
1d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E1:B4:28:75:9F:0F:CD:2C:DE:E6:9A:57:98:BF:B4:61:99:A1:6D
X509v3 Authority Key Identifier:
keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:35:ef:90:df:36:38:c5:73:63:f8:6c:2b:8c:19:68:b2:1a:
13:cc:47:30:ed:8d:a3:8d:42:8d:a6:dd:64:45:39:5b:c4:87:
e6:c3:43:14:ea:9f:55:6b:e9:fa:50:08:30:38:cc:34:ee:9d:
75:ad:25:b0:61:54:7a:c2:83:c6:69:ee:b0:ba:ac:44:64:0a:
17:bd:ff:9f:78:f0:9b:59:75:c3:c8:79:d4:16:fb:d3:55:78:
97:09:18:e2:95:db:83:a7:4c:87:99:4b:d8:ac:81:9a:8a:16:
e8:4f:e1:22:77:05:9e:0b:84:50:e5:b5:47:e7:aa:c9:ae:12:
11:c0:db:d0:bd:e8:fc:8d:cc:6d:dc:17:33:86:e4:06:e1:71:
95:9b:40:20:03:c7:92:c7:70:3d:c5:32:d2:3f:8a:b5:d4:70:
0c:72:4b:cd:aa:3f:af:15:5e:6b:2c:d6:f6:8e:ec:a5:9a:fd:
db:60:4d:3c:a6:dd:7f:4a:ce:2d:f9:eb:bf:1a:cc:ca:ed:32:
3f:a7:6c:73:24:17:af:c8:d0:e7:64:21:34:63:de:8f:57:fd:
89:74:b6:6d:68:af:b4:c3:f9:b4:46:05:c9:e9:79:ab:11:21:
26:ca:eb:9b:1d:bd:a7:20:7a:6e:ab:4e:6e:c6:58:51:05:b5:
1c:6f:48:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:59 2026 by rpki-client