
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: SCNVlnzbXnfNXItIpwyU3bOrcvADdUOZNCVDnLbY1qk=
Subject key identifier: 53:CC:DE:9F:BB:FA:DF:02:4A:16:F1:9A:BB:08:73:39:28:37:83:F5
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0177
Signing time: Fri 25 Sep 2026 04:50:22 +0000
Manifest this update: Fri 25 Sep 2026 04:50:21 +0000
Manifest next update: Fri 02 Oct 2026 04:50:21 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: hFGP/F/FxYq+nmkZULtuMrYwNxUO0m9EyFgggcb+JjU=)
2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 04:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: Sep 25 04:50:21 2026 GMT
Not After : Oct 2 04:50:21 2026 GMT
Subject: CN=6ab5fd8e-ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:f5:d1:dc:c0:d0:5d:b1:38:8b:5b:be:cf:
25:01:45:9b:53:28:b2:a7:14:a7:c5:8a:b2:16:28:
b1:41:3a:08:14:bd:2d:b2:fc:12:aa:c6:7b:b0:19:
f1:28:43:bf:31:bc:91:7d:36:ab:af:02:ac:b1:b9:
b1:79:41:eb:13:c9:dd:a5:23:92:ba:cd:e1:50:41:
96:12:fb:c8:de:55:40:ff:7e:9c:9a:77:4c:86:c2:
e9:10:59:41:1b:ad:ed:85:ae:f2:7f:84:b7:de:bb:
b0:58:be:ba:e2:f3:d8:d5:fa:01:66:cc:60:9b:78:
8d:d7:ee:79:af:a7:10:66:1e:8d:76:d3:a5:00:21:
5c:10:7e:9b:77:bc:cb:36:eb:7c:3a:ac:93:09:60:
85:ba:1b:86:ac:6f:f4:2b:3f:37:6f:d5:8f:e1:fa:
c0:77:90:4e:5e:13:8a:12:b2:68:cd:34:0a:87:ac:
a4:40:97:f5:fc:8e:8c:eb:a4:7d:a1:a5:a7:0b:0e:
59:0e:15:3e:8f:ed:c5:49:1c:e8:25:34:93:69:7e:
2f:37:7d:1a:e4:b6:e6:0c:37:3d:cf:9d:3d:2e:8c:
ee:a8:2b:17:d8:b4:4d:1b:9b:bf:4f:b1:ff:16:b9:
9d:63:4f:96:bf:98:02:20:5a:e9:17:d9:13:c5:82:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CC:DE:9F:BB:FA:DF:02:4A:16:F1:9A:BB:08:73:39:28:37:83:F5
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f4:8d:41:f8:92:48:27:ce:25:b7:94:c4:16:5a:25:06:ba:
8f:03:ae:9c:38:8c:b5:7f:b9:49:01:b3:21:63:a3:0b:95:c5:
07:24:9a:79:f2:ee:a8:11:ef:b9:de:db:2a:d7:e1:bc:97:34:
a9:29:c3:46:d9:28:1f:ff:87:e6:41:96:83:63:b9:80:e6:9a:
48:58:81:c0:cf:fc:9b:bb:c4:98:f6:46:fd:f0:3f:d0:2b:ff:
4b:0a:0f:3f:00:ec:9e:d5:79:d6:2d:c5:7c:b5:3c:fe:80:2a:
a3:5f:3d:a4:54:d3:69:fa:dd:49:3d:4b:03:24:df:fc:98:1c:
8e:f9:e1:0d:6f:0e:78:32:92:6d:6a:b1:92:1f:61:4a:eb:79:
81:a4:93:e6:f0:20:b4:b1:33:9a:f5:77:f2:9d:e6:34:63:de:
20:2c:26:58:31:ab:2e:ba:8f:7c:26:c2:d1:6a:c0:d5:f0:ff:
91:db:11:fd:7a:52:ef:7c:60:97:30:c2:d2:02:5e:b1:78:1a:
98:16:e9:d0:5f:1b:bc:de:78:0b:ec:bc:d6:2d:eb:1c:60:7e:
20:7d:ff:a8:f8:08:27:ca:fe:d5:8d:40:97:89:c3:6d:83:28:
18:92:16:8f:cb:42:15:50:07:8a:15:f8:d9:b7:6d:bf:88:6b:
f1:d2:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:28:08 2026 by rpki-client