
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json)
Hash identifier: PmPAYf2ybwVsGntt2sEHFxqtqfwtE+D0ZFDdN6uWg8k=
Subject key identifier: 1D:FC:E9:8A:C5:91:06:AC:A5:29:80:DE:7A:86:2C:19:10:C5:16:51
Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A
Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A
Certificate serial: 0CF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
Manifest number: 0CE7
Signing time: Wed 22 Jul 2026 18:41:18 +0000
Manifest this update: Wed 22 Jul 2026 18:41:18 +0000
Manifest next update: Wed 29 Jul 2026 18:41:18 +0000
Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: qvsfsW2JRGjrbtieU7nN2XVXauzvtI/hV7AsQTg2W2U=)
2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Fc0EoN7FBo1h+1UnkvkkpWbLnVe4ZgVu2lP55njdUjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl
rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 18:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3316 (0xcf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A
Validity
Not Before: Jul 22 18:41:18 2026 GMT
Not After : Jul 29 18:41:18 2026 GMT
Subject: CN=6a610ece-4021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:72:bb:08:8a:fa:c9:77:95:de:40:87:1f:
b2:94:a3:cd:54:5d:66:53:6a:e2:a3:5b:8a:d4:dc:
a7:ff:64:cf:5c:e3:35:46:51:55:5c:ea:e4:80:e1:
7e:bf:87:ec:4e:b0:95:2a:d9:1f:e1:14:de:24:55:
5d:e7:dd:cc:f1:88:8b:01:fe:23:d4:8e:3e:82:d3:
e0:70:6b:e8:8f:60:a4:92:40:a2:4c:4c:78:03:a3:
b4:55:36:ff:93:b6:4c:30:c2:3c:eb:b1:d7:5a:61:
03:2a:01:5a:c4:b1:05:1e:e2:8e:e4:69:4e:2d:1f:
1b:26:f1:07:7e:a3:57:8f:82:a7:15:74:12:5d:57:
75:01:7f:9d:31:af:86:9e:81:26:21:78:ff:a4:a0:
86:22:7c:0d:30:d8:a1:92:41:80:81:96:71:16:3b:
74:e4:40:e0:37:40:a5:6b:09:74:80:8d:64:b5:0b:
cf:f8:7a:e6:15:e0:ba:5e:29:f0:6a:33:f9:b7:8b:
86:a7:96:91:05:04:f5:20:d7:cc:f8:39:2f:ea:e6:
22:8a:40:55:1e:51:2b:84:7b:bf:8b:c4:3c:02:4d:
46:d4:b2:00:7b:06:7a:03:d8:9a:84:07:1c:1b:cc:
1e:69:d6:b9:53:54:1a:cb:cd:4e:27:7d:eb:fb:79:
f0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FC:E9:8A:C5:91:06:AC:A5:29:80:DE:7A:86:2C:19:10:C5:16:51
X509v3 Authority Key Identifier:
keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0f:d6:72:bf:d7:b3:22:52:18:31:b0:0d:e5:8d:5d:0f:f4:
3e:43:91:ca:f1:15:a1:bf:6d:dd:85:cd:ee:16:80:4b:72:c5:
85:8b:fb:86:65:3d:6e:5d:d7:c8:d0:10:5b:ec:a3:fc:21:7d:
59:82:6a:da:50:d2:83:f9:bc:e5:96:e1:32:5e:8d:db:f3:f4:
2f:76:97:35:3c:5d:51:a9:77:21:48:d3:d9:5b:09:e2:64:3b:
42:db:0d:d7:72:bc:e4:dc:a2:4c:af:b0:c9:04:25:c9:1f:51:
b8:f6:45:1e:18:c3:e0:32:7e:df:72:d8:f2:c3:62:bd:d6:15:
e5:de:0c:11:4c:41:df:4f:68:1c:d3:bd:ff:5e:0d:a8:d3:73:
ef:e9:74:ae:f2:b3:b9:d1:3c:6f:77:fb:1a:f2:bf:93:03:45:
df:ad:af:d4:4d:97:75:d6:9b:3b:ef:29:db:78:51:76:ed:24:
49:cf:46:22:a1:2f:bc:e6:78:27:91:8f:58:ee:0c:be:36:6c:
6c:8a:12:90:e0:ea:a0:14:82:21:ac:f5:21:46:39:cc:b6:48:
d1:5b:41:2a:7f:a9:a5:34:e8:6a:6c:84:fd:cc:7d:14:61:2b:
80:db:5e:1f:da:a1:6a:43:6b:9f:b8:b9:2e:7f:42:85:ae:2b:
e9:8c:92:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:19 2026 by rpki-client