
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier: hHz1QEsaRdjm1YsaUCTdG+dZTd+2nDXRrLDgtayjPVI=
Subject key identifier: D0:3C:DD:43:35:3C:9A:87:AB:42:4B:A4:FB:2E:9C:22:E1:17:57:56
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial: 03BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number: 03AE
Signing time: Fri 25 Sep 2026 00:28:09 +0000
Manifest this update: Fri 25 Sep 2026 00:28:08 +0000
Manifest next update: Fri 02 Oct 2026 00:28:08 +0000
Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: +PMkmTXkTF/qjQJiE4oWuzcg2zJl7DJzBlpD4MuqraM=)
2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: +znSTWAgyX7HjwqMn0JfRNXldDEy7xUyekSQb8gDlMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:28:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Validity
Not Before: Sep 25 00:28:08 2026 GMT
Not After : Oct 2 00:28:08 2026 GMT
Subject: CN=6ab5c019-6cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:2e:06:44:7c:45:ee:d5:58:c4:a9:9f:28:
17:92:79:cd:84:ca:47:22:da:b3:87:da:83:89:da:
c1:e8:cf:d0:16:9c:7c:cb:b1:f7:77:9d:16:4c:4f:
4b:cb:50:58:98:3e:2e:13:ef:68:c0:c3:29:16:c8:
56:a5:fc:dd:34:69:59:39:cd:4a:b4:7b:24:d1:63:
5e:69:0f:42:42:54:13:ed:96:14:8b:2c:24:0d:5d:
73:32:08:d5:d8:52:68:07:f9:8d:96:a9:df:3b:d6:
57:56:d2:05:64:64:88:af:47:30:c6:6e:91:ed:bf:
3e:b1:ea:b9:e2:fd:ed:e3:e8:b5:f0:37:1d:17:70:
34:aa:22:98:57:52:87:ba:dc:a3:81:e6:cc:b0:46:
f3:dd:14:dd:57:4d:41:34:b0:4a:9f:bd:32:48:a1:
cf:ba:1a:bd:bf:39:b7:fd:20:15:c3:19:4a:b5:1f:
6c:5a:d6:05:8e:ec:c7:88:e3:f9:71:fd:88:3a:12:
5a:ac:a0:82:a7:91:a7:61:78:8f:61:3d:ee:63:fe:
a4:2a:ab:50:5d:f1:7d:c2:42:51:04:61:64:dd:1d:
9b:c6:24:53:43:8b:49:d6:5d:b3:48:4c:88:38:fb:
ea:64:d9:20:26:29:39:09:49:4c:4e:43:78:f7:0a:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3C:DD:43:35:3C:9A:87:AB:42:4B:A4:FB:2E:9C:22:E1:17:57:56
X509v3 Authority Key Identifier:
keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:7e:37:48:42:81:81:99:09:42:12:71:8d:31:69:00:71:bc:
9c:4c:83:34:75:bc:8c:04:00:dc:83:32:bf:83:c1:c1:ff:3a:
26:e5:8c:5f:90:63:e3:6f:6a:c0:11:bd:3a:9b:28:49:f7:d9:
da:cb:f0:f6:7f:96:53:de:92:63:62:d1:ae:61:f0:08:db:d2:
3f:ad:fa:7e:8e:12:38:82:55:f0:28:3a:b1:f7:68:16:e2:50:
45:6d:ee:5f:47:d8:df:1a:26:30:2a:ba:7d:e5:50:ae:df:ac:
bd:72:7c:32:28:70:a3:a3:7f:a0:21:e2:a9:ce:d3:9e:e3:1e:
4f:54:3e:9f:9c:a4:ca:c1:1d:5d:71:d9:88:9d:19:06:1c:1f:
92:da:f7:d3:ae:e6:20:f0:c2:5e:54:00:ac:c1:0c:c0:78:05:
77:ad:e0:ce:2c:b1:87:06:f3:3c:aa:2a:56:0b:e4:c2:53:08:
9e:a6:75:6e:7d:b6:f8:7b:20:44:51:16:5f:d4:28:86:97:f3:
67:36:9e:80:4a:d0:b9:de:1f:c6:6a:0b:d2:b4:d3:70:89:e1:
bc:79:cb:9c:80:25:6f:c6:c2:0e:54:80:40:e8:01:e1:6b:b7:
98:dc:03:cd:1c:c9:c2:15:9b:bf:91:27:03:d2:e0:02:98:27:
db:f9:99:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:45:57 2026 by rpki-client