
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
File: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json)
Hash identifier: zcx1IPvd38Qk5AhDcWCfPDjjPf8IPx1L4dbWSSyposs=
Subject key identifier: E4:C3:40:22:98:AD:4F:0E:73:8F:EF:CC:AB:62:4B:83:B3:E9:53:58
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial: 8F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
Manifest number: 87
Signing time: Wed 23 Sep 2026 07:25:59 +0000
Manifest this update: Wed 23 Sep 2026 07:25:59 +0000
Manifest next update: Wed 30 Sep 2026 07:25:59 +0000
Files and hashes: 1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: TqjvSfkMySyR/rjciHUvqKdhnXbP9kEyP5vW3tjgpkA=)
2: 95303322F20511F0873139314A6F56BC.roa (hash: 1sNl2GKaplu72shhpID3R2WKIOZVHmc3EWv5WEQWdk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 07:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Validity
Not Before: Sep 23 07:25:59 2026 GMT
Not After : Sep 30 07:25:59 2026 GMT
Subject: CN=6ab37f07-f415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:8d:cf:e9:6b:84:e2:17:25:54:bb:0a:54:
a3:11:b9:01:6c:aa:9f:a2:82:4a:b9:76:5e:8a:88:
4a:de:61:02:9b:48:14:3f:3a:7f:f4:6f:92:5a:73:
13:45:94:06:9b:37:f2:2b:d4:e5:b3:30:ca:00:86:
28:fb:fc:7e:32:15:e3:9e:3e:0a:bc:ea:0c:15:36:
db:cb:ca:23:66:46:e2:84:a5:e1:79:55:42:1d:ae:
2e:4c:01:ec:55:d0:72:41:76:2a:5e:0b:9b:8a:fa:
0a:ae:31:c7:07:19:dc:97:60:6a:22:29:f2:14:9a:
9a:8d:e9:8f:16:6e:22:3c:22:73:c4:dc:38:87:c2:
34:40:a3:a4:53:ef:cc:be:40:51:45:65:40:7c:af:
80:25:c0:06:e0:9d:f7:3f:cc:59:9e:e6:c7:81:97:
92:ee:e8:2d:56:55:e4:51:8f:b6:80:e5:61:07:b0:
03:33:af:e0:84:6c:f1:ac:63:e4:4f:e3:d6:c0:97:
37:20:76:2e:6c:76:f5:c9:10:a8:13:85:dc:27:96:
22:b4:98:d8:ff:ec:24:91:b7:51:14:94:30:4e:ed:
cb:c3:04:e4:d1:19:7b:16:f6:52:9a:d7:24:c3:42:
9e:5a:21:f9:25:e7:1f:0c:a6:4f:0c:5f:23:08:1d:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C3:40:22:98:AD:4F:0E:73:8F:EF:CC:AB:62:4B:83:B3:E9:53:58
X509v3 Authority Key Identifier:
keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:7f:7d:69:c9:e7:8c:14:a8:d9:7e:0b:67:1e:89:ca:eb:
3e:cc:37:f7:e7:93:35:58:5e:81:b5:54:a8:2a:9d:d7:19:6f:
88:d9:48:04:28:40:a5:eb:d3:d3:55:54:5b:6e:9f:ce:d4:fb:
c3:2f:bb:24:39:dd:2a:da:84:eb:ed:fa:20:35:ad:ae:7d:77:
70:37:28:ec:ff:80:a1:f1:65:f0:dd:d1:0a:58:60:bf:1f:05:
32:c8:e1:df:07:99:5f:e6:29:3c:87:05:ee:fc:19:d9:01:b0:
6e:63:68:ea:97:52:df:3b:5e:24:82:4c:d7:ee:97:81:ad:73:
40:4d:77:8e:d7:d3:a6:c6:6a:3b:86:93:8b:27:fa:e8:61:95:
3d:f5:ae:98:16:57:ac:11:46:ff:f1:8b:bb:e6:dc:72:f1:b7:
f4:bd:7b:7a:03:72:ca:85:3b:31:c0:77:9b:b3:43:13:aa:24:
f0:b2:51:7e:bb:fb:80:ba:b4:af:93:7f:66:4e:cc:cc:3c:e5:
67:9f:ad:bb:40:7a:11:49:79:ac:dc:6d:72:89:93:4b:d7:57:
14:f0:0f:60:c0:51:65:03:91:bf:71:dc:98:83:28:9d:08:d1:
6f:28:45:f1:8e:7a:f9:e3:94:c6:4e:cf:0c:db:38:bd:70:6e:
42:86:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:24:14 2026 by rpki-client