
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json)
Hash identifier: 7CHuOHkQmK525x+i4SwlX8ct48O2UN9ow0YQUfi9/+k=
Subject key identifier: 26:DC:C9:99:64:9B:59:2C:4A:E9:3E:E0:4B:8A:A1:94:DD:DF:BF:9D
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial: 0D68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
Manifest number: 0D5D
Signing time: Tue 22 Sep 2026 17:54:58 +0000
Manifest this update: Tue 22 Sep 2026 17:54:57 +0000
Manifest next update: Tue 29 Sep 2026 17:54:57 +0000
Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: muZRTbSkrYvQSgRcYNxSEkF1QSNmqO0g+iAtZFsak4M=)
2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3432 (0xd68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Validity
Not Before: Sep 22 17:54:57 2026 GMT
Not After : Sep 29 17:54:57 2026 GMT
Subject: CN=6ab2c0f2-967d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:3f:36:cf:0e:41:c5:f5:df:5b:82:e0:f7:
de:47:30:40:fb:7d:3f:03:ac:0d:0c:61:d7:e7:db:
11:42:b6:30:1d:c5:4a:91:9a:b1:ee:3c:56:ed:8d:
9e:0e:34:52:cd:e5:63:ed:4b:df:32:cd:28:68:4d:
6d:48:9b:a1:68:73:0b:c4:a0:05:3a:d9:7a:44:c6:
94:ec:ed:18:04:b3:6b:22:55:ff:0a:e3:2f:64:33:
35:66:62:99:8b:35:11:27:00:ce:f0:1b:d7:23:1e:
27:d9:fe:ff:9f:31:5c:ed:14:62:ff:db:86:ff:b8:
57:16:6e:39:8d:46:7b:81:8b:8b:ec:58:59:30:1e:
11:55:88:bc:e2:d8:41:ea:89:d8:ed:6b:f5:cb:42:
d9:02:08:c7:1f:87:cb:0a:16:48:ac:e6:26:c8:ae:
84:a7:6f:d6:cd:7b:4f:b0:48:72:6f:98:52:9f:a6:
c4:fb:99:15:0a:a3:18:73:5e:d0:47:60:fb:d7:8c:
ce:8b:3c:a2:cf:8d:09:ed:13:5e:3b:87:61:49:54:
e3:14:6d:5e:1b:d3:0d:f0:a3:3d:0d:26:1a:0d:84:
02:62:f0:83:84:ce:ab:26:f4:da:13:15:09:33:65:
73:23:ab:05:68:61:c5:82:55:4b:4c:a9:d7:bc:5c:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DC:C9:99:64:9B:59:2C:4A:E9:3E:E0:4B:8A:A1:94:DD:DF:BF:9D
X509v3 Authority Key Identifier:
keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:38:05:d2:e9:f5:64:5c:60:df:72:68:78:7b:f9:26:c3:2a:
e5:ee:96:4e:c1:5c:77:87:fd:73:32:96:3c:49:e4:a1:34:e7:
ee:8a:1a:35:f3:11:fa:4f:aa:2e:43:89:94:b7:28:e9:d6:bd:
9d:1d:5d:b4:b7:b7:15:0f:4b:e0:5a:b9:61:bc:34:4c:6e:da:
b1:74:22:33:48:ff:d5:df:18:d4:d4:cd:5b:14:f7:33:e4:b2:
a3:aa:4a:fb:78:b2:c4:04:1f:24:f5:7a:0a:0b:dd:f2:b0:63:
f9:28:b9:94:5c:0b:7d:4f:25:3f:9e:9a:61:c0:ab:44:ae:94:
70:72:57:9f:42:02:b9:c5:5d:fb:04:c7:54:99:f5:1d:95:fe:
9b:74:6c:01:ff:e9:db:e2:e1:32:f8:1a:39:25:3d:b3:42:1b:
44:3c:94:57:d3:44:58:aa:af:4c:b5:49:41:69:56:67:ca:2f:
5c:46:29:ed:30:b1:f7:29:0e:05:42:8c:d9:7c:61:fe:5e:ec:
66:87:95:ef:91:16:72:03:78:5a:22:cf:3f:4e:51:37:cf:0a:
51:74:98:30:1f:69:aa:9e:ba:af:96:96:ca:3c:19:f2:a0:1a:
62:4d:33:54:d8:19:d8:30:03:cd:fa:3f:cd:24:0d:70:03:8d:
6b:4a:62:59
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC
ODFFNkFEMUQwHhcNMjYwOTIyMTc1NDU3WhcNMjYwOTI5MTc1NDU3WjAYMRYwFAYD
VQQDEw02YWIyYzBmMi05NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9Q/Ns8OQcX131uC4PfeRzBA+30/A6wNDGHX59sRQrYwHcVKkZqx7jxW7Y2e
DjRSzeVj7UvfMs0oaE1tSJuhaHMLxKAFOtl6RMaU7O0YBLNrIlX/CuMvZDM1ZmKZ
izURJwDO8BvXIx4n2f7/nzFc7RRi/9uG/7hXFm45jUZ7gYuL7FhZMB4RVYi84thB
6onY7Wv1y0LZAgjHH4fLChZIrOYmyK6Ep2/WzXtPsEhyb5hSn6bE+5kVCqMYc17Q
R2D714zOizyiz40J7RNeO4dhSVTjFG1eG9MN8KM9DSYaDYQCYvCDhM6rJvTaExUJ
M2VzI6sFaGHFglVLTKnXvFx1KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbcyZlk
m1ksSuk+4EuKoZTd37+dMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG
OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5
VHR1UmpONGJjMFc0SG1yUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAozgF0un1ZFxg33JoeHv5JsMq5e6WTsFcd4f9czKWPEnkoTTn7ooaNfMR+k+q
LkOJlLco6da9nR1dtLe3FQ9L4Fq5Ybw0TG7asXQiM0j/1d8Y1NTNWxT3M+Syo6pK
+3iyxAQfJPV6Cgvd8rBj+Si5lFwLfU8lP56aYcCrRK6UcHJXn0ICucVd+wTHVJn1
HZX+m3RsAf/p2+LhMvgaOSU9s0IbRDyUV9NEWKqvTLVJQWlWZ8ovXEYp7TCx9ykO
BUKM2Xxh/l7sZoeV75EWcgN4WiLPP05RN88KUXSYMB9pqp66r5aWyjwZ8qAaYk0z
VNgZ2DADzfo/zSQNcAONa0piWQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:26:49 2026 by rpki-client