
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier: wgypROqQqJARc90JDjY2JwqKsA+yuAnlPKNoGno9H4E=
Subject key identifier: 05:FF:CB:71:C9:1D:C6:D3:8B:A1:D0:6B:26:03:96:09:49:C7:DA:03
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 3602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number: 35C7
Signing time: Tue 22 Sep 2026 14:56:57 +0000
Manifest this update: Tue 22 Sep 2026 14:56:57 +0000
Manifest next update: Tue 29 Sep 2026 14:56:57 +0000
Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: C3OCvzZ9fL7TmoxtODOPF8AU8nG4a79XRHmzd5pmfRs=)
2: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
3: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
4: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
5: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: id2mRaIy2h7nVg/sc/ikSWNLePF2FrfpCr04A5Jbft8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 14:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13826 (0x3602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Sep 22 14:56:57 2026 GMT
Not After : Sep 29 14:56:57 2026 GMT
Subject: CN=6ab29739-abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:17:c1:fd:83:35:84:09:4a:54:92:43:27:da:
94:e9:87:7e:03:3a:fe:7b:c2:86:f9:6e:f8:49:0d:
fd:a4:e6:97:b2:db:e6:aa:5a:9e:ab:79:d7:90:d5:
98:72:02:93:13:5c:d8:57:9c:50:60:be:65:6c:a2:
a2:0a:56:a4:07:01:ef:09:86:70:03:cb:fe:a0:bb:
45:e6:78:40:66:8d:39:f2:35:86:a2:ab:e1:39:70:
e3:f9:20:65:a6:83:0b:f2:37:d1:4b:b7:45:f7:b6:
8f:c7:ff:cc:70:6a:66:ec:3b:1a:4f:51:20:fe:1a:
82:10:7a:df:79:b2:fd:e0:94:4a:88:bd:63:df:1d:
cf:72:27:a8:20:40:38:1e:6c:99:1f:ac:65:99:e9:
fb:84:11:25:fb:99:ec:61:ea:20:34:7a:9b:22:0e:
67:64:0c:b1:d6:7c:01:19:e2:b0:1a:5f:a7:87:63:
7a:67:b3:4a:9b:4d:48:5c:c1:ae:7c:8a:c0:9e:f3:
83:21:1a:c2:ab:59:87:0b:a1:96:91:6d:95:1d:ce:
a7:db:3f:d6:3d:70:2f:89:df:10:67:de:0a:e4:0f:
54:e2:0a:ce:d1:5d:22:d2:1f:d0:37:55:c6:d4:ba:
60:bf:31:c2:ab:2f:54:a1:37:a4:ab:c1:67:70:c8:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:CB:71:C9:1D:C6:D3:8B:A1:D0:6B:26:03:96:09:49:C7:DA:03
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c6:b6:5a:9f:5c:39:e2:3e:11:b5:f9:f7:f1:1e:99:1a:75:
58:e9:da:f4:34:35:1d:2b:4f:28:a0:f9:c8:92:6e:e7:69:e6:
0f:93:5e:88:dd:62:b9:9f:b4:f2:5c:53:76:fc:a1:70:6f:18:
26:04:cd:3f:e2:d5:97:63:de:e1:bb:4e:26:44:ff:c5:ac:31:
48:ff:7e:77:ad:5a:d9:0f:1d:dd:13:60:b5:73:d6:e4:f9:fc:
21:1f:e3:50:d2:00:14:a6:b7:37:e6:a2:4f:34:8e:9c:36:83:
69:4f:1d:18:d8:6f:1a:8f:49:34:53:5a:d1:f9:ae:80:e6:83:
0d:f7:4b:8e:fb:2f:69:20:ca:d3:74:c9:15:86:80:a2:f4:b3:
9d:6e:b1:db:a3:7d:bd:ae:20:42:13:8b:b0:6e:7a:80:d2:d9:
51:4e:57:89:45:3b:b4:05:51:d4:69:d0:20:73:53:1d:95:c6:
d3:8e:94:6e:66:7b:94:43:7c:83:18:73:fc:41:26:84:6b:05:
5e:4a:b1:1a:e3:04:95:ef:5d:a6:d2:e2:94:4b:fc:55:d9:cb:
19:1c:41:f5:81:77:e5:0f:1f:0e:f0:9b:1b:dd:1c:44:be:cf:
af:a7:4f:fb:09:ad:03:04:4d:fd:70:5c:a7:41:2a:d3:12:76:
59:ae:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:02:19 2026 by rpki-client