
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
File: vpKrpKAUQxnubUWrkJDYjV2vN_4.mft (raw, json)
Hash identifier: R8Pfn162HuF1JBSfs2vbzQjkemsQkUIg46iLGFRoXHA=
Subject key identifier: 8D:0E:0D:C8:BA:7B:C3:04:93:11:92:68:27:DC:B3:B0:43:97:5F:FE
Authority key identifier: BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
Certificate issuer: /CN=A9151F3B/serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Certificate serial: 06F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
Manifest number: 06DF
Signing time: Tue 22 Sep 2026 21:59:53 +0000
Manifest this update: Tue 22 Sep 2026 21:59:52 +0000
Manifest next update: Tue 29 Sep 2026 21:59:52 +0000
Files and hashes: 1: vpKrpKAUQxnubUWrkJDYjV2vN_4.crl (hash: LIyE1bfE9wV3wFsKtlzsB5A3Qfyx5WDq1CwCzC2MiM0=)
2: 76DDA85AFE5211EC8F4A4F16C4F9AE02.roa (hash: FsIfjE1hCId4WZSmCGZi8B4pcoqpgzCAhgnEUj6OePM=)
3: 21F42C4EFE5511EC9A3F6F31C4F9AE02.roa (hash: 9SWvU83uta5yQV6kASYfDhqApkdxCt/37HDqSjzPVj8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 21:59:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1783 (0x6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151F3B, serialNumber=BE92ABA4A0144319EE6D45AB9090D88D5DAF37FE
Validity
Not Before: Sep 22 21:59:52 2026 GMT
Not After : Sep 29 21:59:52 2026 GMT
Subject: CN=6ab2fa59-fe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a8:c5:0e:99:12:b2:c4:91:50:f0:f9:e8:54:
9d:c4:8a:68:53:89:08:fd:e2:76:78:7e:4a:8a:3c:
38:ef:64:ad:20:89:9a:37:df:a7:8d:48:f4:d2:5a:
04:a4:37:3e:a2:94:b1:5d:76:19:6b:25:7a:9a:1f:
14:a1:a2:76:fe:5b:f1:d9:cf:92:5f:de:07:c2:9a:
1d:ca:ce:81:7f:5c:39:0a:ee:78:e8:b1:3d:da:65:
69:1f:c5:08:ee:6f:5c:27:4c:94:42:bd:bf:97:b8:
43:b2:f0:59:d9:5e:d2:8c:ea:3a:fc:93:66:ae:d4:
bb:97:ca:38:b0:bf:cf:80:dd:5f:d0:f3:2d:8f:63:
29:f9:fa:b7:71:fa:2c:9f:64:1f:cb:fa:4a:77:c6:
2b:0d:a7:d2:52:70:ed:b4:b6:53:ee:58:88:45:15:
e3:78:46:18:c6:e4:9b:ca:1b:a8:c5:73:d1:6d:c8:
25:93:7d:a2:65:0c:98:ec:34:30:d8:30:00:56:8d:
da:f6:98:b1:a8:20:84:5c:2d:78:50:fc:02:e9:4b:
f9:01:55:2f:0b:f0:ac:f8:1f:de:22:63:1a:74:24:
90:5a:98:d1:79:07:09:58:44:ee:e3:09:0d:42:ba:
d2:42:f9:aa:3f:f2:b5:7d:1e:1c:37:9c:f5:9a:8a:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0E:0D:C8:BA:7B:C3:04:93:11:92:68:27:DC:B3:B0:43:97:5F:FE
X509v3 Authority Key Identifier:
keyid:BE:92:AB:A4:A0:14:43:19:EE:6D:45:AB:90:90:D8:8D:5D:AF:37:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vpKrpKAUQxnubUWrkJDYjV2vN_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151F3B/4F8B91B8B9B611EBB411E92EC4F9AE02/vpKrpKAUQxnubUWrkJDYjV2vN_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:ca:80:46:45:98:4d:39:11:3f:92:05:85:49:73:79:1f:2e:
21:4c:fc:ef:0c:d2:a3:10:9a:80:b8:ac:d9:21:ad:66:66:0a:
65:48:b9:68:0f:07:21:45:0f:7d:0c:28:ca:fc:08:9a:d9:96:
5c:2e:65:b9:fe:63:3e:bc:08:c2:e1:6e:e9:c2:02:22:e7:f9:
6d:60:9a:d1:7f:b9:2f:1b:1c:da:b8:92:3e:12:93:20:7b:b5:
3b:bb:bb:97:6a:83:aa:c8:36:cd:e6:5c:5e:a1:7e:de:06:65:
7e:c3:42:87:18:7b:a3:82:61:66:e5:0f:5e:f7:c7:5a:6f:bb:
7b:ec:b6:e5:48:5a:50:3f:7f:35:a6:da:ad:ee:af:b7:a4:06:
22:e7:36:36:2e:0b:e9:bf:7c:ea:19:ca:df:4d:b1:c7:26:40:
a1:c3:6e:28:49:74:22:63:a6:e0:3a:90:e1:9e:68:38:68:96:
27:c5:fc:c6:81:87:43:1b:da:00:80:05:36:ca:e1:d7:d6:4e:
dc:92:e9:8a:7a:68:2e:d7:04:0d:04:e3:85:0c:34:eb:a5:67:
fa:fb:7e:9c:c9:7f:83:60:ba:1f:d8:c5:37:be:b2:ee:91:c5:
a2:04:43:ba:81:d9:e2:3f:d1:5b:d4:6e:19:ae:f3:25:df:71:
3b:cd:35:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:01:35 2026 by rpki-client