
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json)
Hash identifier: 7NrYicC1SEUpX+YCnSwEbRSoXFBb+W3P25yWeCCvgm8=
Subject key identifier: 9E:90:B3:BF:C2:CA:84:9B:A7:A0:03:72:D0:B9:AB:4F:38:D6:6D:6D
Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Certificate serial: 0D1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
Manifest number: 0D13
Signing time: Tue 12 May 2026 18:09:23 +0000
Manifest this update: Tue 12 May 2026 18:09:22 +0000
Manifest next update: Tue 19 May 2026 18:09:22 +0000
Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: VKDHy6W0iR4wlFQPDB3F+xOkCrbxNb9hU31/s5fvtIE=)
2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:09:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3358 (0xd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Validity
Not Before: May 12 18:09:22 2026 GMT
Not After : May 19 18:09:22 2026 GMT
Subject: CN=6a036cd3-25d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:f1:79:27:40:06:de:34:c6:bb:1d:62:ca:
7a:07:f3:8f:84:4e:2a:b3:9c:1e:78:6f:d6:32:80:
5e:2a:ce:0a:1d:73:b5:22:f4:48:a1:14:18:4f:4d:
dd:fc:a5:56:45:e1:43:bd:ca:f6:51:1a:18:ad:89:
13:a8:ac:8d:06:aa:a8:62:ad:ba:61:23:55:0a:ac:
9a:6a:e7:c4:c2:5e:3b:22:8c:da:b1:19:64:a4:cd:
ba:ca:48:b1:97:78:dd:2f:7b:ca:9e:e4:2b:39:29:
2f:7b:0e:c3:23:f6:87:af:28:b0:85:1b:0a:bf:b1:
bf:0e:45:fa:18:26:02:05:54:d5:52:a8:59:78:c7:
49:33:73:b4:77:08:aa:52:a4:5c:fc:d9:ba:83:99:
1e:c9:91:31:44:9c:2c:0a:a5:b5:4e:80:75:7a:74:
ba:a5:8a:f6:85:82:a5:a5:96:3d:62:ad:20:03:dd:
98:ed:a7:cb:a3:e2:74:6e:84:ab:4a:1e:26:19:ed:
60:d6:8a:cd:66:38:54:6e:0b:3b:68:7e:c1:ac:f0:
a7:c0:41:5b:26:89:1f:f1:41:5f:65:56:4c:df:fb:
39:a6:68:c1:90:f8:94:4d:f5:97:dc:f1:02:d4:9c:
b4:20:b7:a8:dc:71:c2:11:69:b1:95:a8:14:51:74:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:90:B3:BF:C2:CA:84:9B:A7:A0:03:72:D0:B9:AB:4F:38:D6:6D:6D
X509v3 Authority Key Identifier:
keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c8:13:31:96:6d:45:69:10:99:d5:71:04:55:93:3b:3f:fc:
f7:3c:a3:29:5c:bb:16:99:a9:6e:00:7b:af:c9:b9:6f:04:c9:
df:64:b6:4f:ff:bc:91:0a:f9:ba:0b:df:7d:e5:e4:d9:8c:29:
fa:ef:60:61:fd:14:1c:b9:29:8e:8f:86:33:05:97:34:8b:28:
a6:bd:f8:ed:88:c6:9e:92:1f:1e:29:fc:6b:5f:fc:5f:5e:d9:
32:b2:08:38:cb:16:21:32:16:0a:9c:c2:53:06:62:43:96:04:
43:15:f7:2d:e9:16:cd:ef:56:98:71:66:e8:c7:c4:8c:3a:d8:
fe:f6:4b:cd:59:19:53:25:8f:fa:e7:71:38:bb:9b:79:14:07:
65:cc:b0:20:85:38:d7:b7:f1:d4:60:4c:f2:7f:69:90:fb:9d:
16:d7:5c:79:a5:30:5d:eb:26:67:58:a7:e4:d8:6a:a3:39:f0:
17:5b:73:51:29:b6:6b:f6:5b:1f:62:d4:5c:30:38:34:1d:24:
36:85:39:bb:74:cc:32:23:c6:2c:16:f9:25:e8:3e:bc:bb:ba:
1c:db:5c:81:a6:fb:d5:66:96:c8:37:65:88:a0:0f:ed:e7:57:
3e:01:ce:b6:db:14:9d:06:28:3f:f6:9f:cb:2a:d9:49:0a:dd:
84:0e:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:42:30 2026 by rpki-client