
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier: iPSVq8a2B+1ljoAUPHpXX6TGMIVkN6dOR9FmGywCGWo=
Subject key identifier: 50:D3:04:52:DC:E6:BB:9C:C3:88:DA:A8:F3:87:5D:CB:0C:5E:09:56
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number: F2
Signing time: Mon 11 May 2026 06:27:57 +0000
Manifest this update: Mon 11 May 2026 06:27:56 +0000
Manifest next update: Mon 18 May 2026 06:27:56 +0000
Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: lC4YKV/m3Xe6aP8984/tvhqRXyh1reAyuwa0TKBw2ZA=)
2: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
3: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:27:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Validity
Not Before: May 11 06:27:56 2026 GMT
Not After : May 18 06:27:56 2026 GMT
Subject: CN=6a0176ed-a48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:51:6f:34:3e:23:4d:60:92:97:c4:25:97:55:
f3:08:b9:e2:72:05:45:d0:1c:7f:e8:30:f8:e2:77:
ab:25:e6:e9:05:f2:f0:4e:3b:44:d0:ad:ab:64:f1:
53:58:20:f6:38:28:4b:42:9d:3b:a5:64:0f:04:b7:
65:1a:75:22:74:20:4d:bf:ee:31:5d:5b:a3:2e:65:
16:09:41:b3:54:fd:1a:07:97:9a:a0:3f:26:51:c3:
c1:b6:0d:3f:16:55:35:25:52:83:61:de:00:34:8a:
b8:44:91:65:8d:e3:58:8f:09:54:47:88:76:03:1c:
e3:b6:20:90:e8:3b:2d:61:bb:bb:2c:17:e0:7e:7e:
2a:42:fc:b2:24:cd:89:03:06:57:a2:a8:88:bd:3e:
71:e1:6d:c2:9d:54:a8:24:57:8b:c7:a4:79:84:7f:
2f:c1:11:db:e6:c1:70:06:0d:00:f3:c6:2d:db:64:
11:4e:11:be:b6:72:7d:a5:d5:10:7b:5e:42:01:d1:
40:90:b6:1c:fe:f2:f9:a8:c1:e9:79:e1:63:a4:86:
9e:27:67:56:92:46:5e:f0:ed:76:e6:9c:26:8b:50:
df:4b:43:67:bd:89:3f:36:0d:ad:02:e0:2b:c1:c3:
25:07:a2:78:79:46:89:93:aa:9a:82:79:77:c6:f9:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D3:04:52:DC:E6:BB:9C:C3:88:DA:A8:F3:87:5D:CB:0C:5E:09:56
X509v3 Authority Key Identifier:
keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:f1:f8:21:72:0b:b7:6c:51:95:22:28:4a:ab:6c:ce:82:
4a:a6:ff:4f:0e:40:71:3a:46:92:52:09:6b:14:68:eb:8e:36:
b4:e8:ee:d7:ba:a1:fe:0d:0d:e0:ab:c2:43:8d:69:20:17:ee:
31:fd:bd:38:1e:b9:13:e6:30:33:70:fa:be:a2:f3:bc:ab:79:
6c:07:8b:b1:52:25:bf:96:bd:c8:ca:bf:7b:81:73:73:3a:63:
dc:b2:7e:92:e3:ae:cb:48:72:95:aa:5e:89:68:c0:30:cf:9f:
0e:82:6d:f3:ba:07:72:12:97:5d:ba:d8:f0:21:ba:b0:3a:83:
22:f5:16:75:ac:ed:fa:34:00:f4:11:93:b8:4a:71:e2:be:54:
fc:49:2e:96:9c:d7:fe:dd:d6:76:e2:65:b1:d7:84:ee:c5:99:
80:6a:02:92:16:18:71:7b:dd:a7:9b:87:45:6b:17:e2:61:b0:
b8:64:e1:e5:0c:af:6b:5a:87:c7:8d:de:cf:d9:0c:20:fb:bb:
6f:0b:49:82:84:94:d1:21:7f:fa:48:72:78:31:fb:ec:ef:3b:
70:d0:de:90:20:c2:96:2c:f3:f1:90:c0:83:ea:d3:db:fb:1a:
43:0d:f9:1d:f9:ac:0c:d2:4c:3c:84:18:4c:68:9b:a0:36:75:
37:87:b2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:07:01 2026 by rpki-client