
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: pkzF6DkPbVK9pw/NovAxb4StNXApUy4WWNgPd+QFvck=
Subject key identifier: 5A:54:EC:2B:44:49:C5:E0:47:E0:B7:79:A6:9D:05:3A:66:FA:11:77
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 016A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0156
Signing time: Thu 23 Jul 2026 06:44:02 +0000
Manifest this update: Thu 23 Jul 2026 06:44:01 +0000
Manifest next update: Thu 30 Jul 2026 06:44:01 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: zGzOKekyfkiOas6KHr96C8v5U6iilE3apbixLDABhfw=)
2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 06:44:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: Jul 23 06:44:01 2026 GMT
Not After : Jul 30 06:44:01 2026 GMT
Subject: CN=6a61b831-fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f4:03:64:bb:a8:83:dc:73:1b:30:ab:0b:e5:
85:be:66:b2:d2:90:47:68:fe:5e:9d:84:df:95:d8:
bf:45:42:a0:eb:00:14:55:3f:99:91:f8:b2:57:cb:
f7:03:f6:49:19:f2:db:4b:25:f5:1b:a9:c2:9c:a1:
3d:fa:37:49:a6:db:5e:b4:9c:72:5c:0b:cd:ec:03:
63:1f:9c:bf:16:de:2e:d6:d7:fc:36:ac:9a:29:9d:
85:1c:9d:21:65:06:e5:04:3d:ff:64:2a:45:23:2e:
56:22:4b:9a:f3:65:2e:c4:6d:57:70:00:ed:a2:d7:
ae:d4:27:53:aa:0f:11:99:eb:f6:d0:e0:10:de:37:
bc:7f:5c:02:99:f1:c2:d8:15:b1:4d:6c:72:b0:e7:
2e:d5:84:4c:a2:33:d2:d6:6d:de:39:3b:c3:ae:3c:
44:e6:66:c0:3e:d7:4e:c5:07:af:b0:80:29:3c:b3:
71:25:d3:a3:3a:1a:b3:19:ec:08:a0:27:2a:b2:c8:
ce:1e:4c:d0:a2:6e:a1:ee:7c:48:b1:89:b1:50:17:
0b:75:c7:76:2c:78:2d:18:1a:db:ee:b9:40:77:f4:
9a:ce:06:8d:82:1c:2b:8a:e3:6e:7e:11:63:27:31:
34:e8:a2:8e:2c:87:32:ca:15:8e:f9:58:08:f8:1c:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:EC:2B:44:49:C5:E0:47:E0:B7:79:A6:9D:05:3A:66:FA:11:77
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5f:7f:75:b9:34:50:b0:0f:6b:f1:c3:a6:ec:33:78:f9:96:
79:1e:fd:79:82:80:c5:52:4a:00:20:7f:0f:25:e0:e2:e0:b4:
37:d5:42:3b:b6:a2:48:8f:63:a1:cd:e8:4f:d0:a3:7e:64:84:
81:74:76:75:34:43:81:6b:50:b0:ed:ca:09:88:c9:61:7f:1c:
89:04:34:ce:f3:b5:58:98:e6:a3:f5:2e:62:80:8f:8e:70:cc:
b8:25:a7:d1:f0:90:eb:49:a3:97:e0:c5:85:c8:30:8f:82:f0:
4a:4e:5e:32:58:57:5b:70:90:ae:e5:ec:28:05:01:57:c6:fe:
ef:38:df:b2:79:c4:70:12:89:d2:ca:74:1e:ce:da:70:ab:6a:
32:66:63:dd:36:fd:bd:93:76:05:36:c5:9c:01:92:6d:13:14:
e8:22:bc:fb:7c:21:d5:2e:c6:2a:aa:b4:07:a4:94:9e:21:f8:
23:9d:5b:5f:c7:07:d3:1a:55:5a:00:3f:89:21:db:92:d8:ec:
34:8a:f0:65:3c:cf:86:dd:e8:b1:15:a7:9a:55:44:af:63:36:
c8:00:33:64:e9:08:6d:00:71:a3:ae:88:71:87:1a:2b:42:83:
da:43:08:0d:f1:0d:a5:98:f6:ce:9f:7b:f0:d4:13:ed:5f:d6:
a8:49:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:18:24 2026 by rpki-client