
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier: G0ykYCwSaJmWMBJ5vpUE9gIm5LwJBSre0Gaqea7oAfU=
Subject key identifier: FD:CE:FD:F9:40:05:31:7C:9D:31:A9:4F:20:A7:E2:55:AD:65:27:2F
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number: 0196
Signing time: Sat 03 Oct 2026 05:07:09 +0000
Manifest this update: Sat 03 Oct 2026 05:07:09 +0000
Manifest next update: Sat 10 Oct 2026 05:07:09 +0000
Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: KGmqIp3yvqOp6uPImPjjmlHz+vJQrS75x+HUNXghK2M=)
2: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: Gw0jFmA84rZ18sx/7QrnbJxTgZTCnUYn+soLzQH1wKk=)
3: B527A9C8604111EF97252962C4F9AE02.roa (hash: zljNGxAqLeUku4CTzDmhSDwisDsF8PGy5rmaV56Sx6w=)
4: 9FB99556604111EFB4652062C4F9AE02.roa (hash: k4xjdnoEdJ4ZINBwfRdnO6KbApSD649BXEVODGAn848=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Validity
Not Before: Oct 3 05:07:09 2026 GMT
Not After : Oct 10 05:07:09 2026 GMT
Subject: CN=6ac08d7d-e877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cd:4f:89:ba:cd:cd:82:d0:8f:be:c6:a9:19:
30:e4:52:b3:d1:d2:44:b7:ed:d1:16:13:3c:cc:0a:
bc:d7:68:d0:bf:70:bf:82:e6:5e:fb:cb:28:93:d8:
5d:1a:ec:7c:eb:51:f6:3a:20:20:d3:ff:88:c2:64:
2c:fd:c4:6a:fd:af:9a:59:74:3b:80:83:42:d1:d9:
f9:90:72:60:9a:54:b4:3c:34:d4:ea:8f:a9:59:29:
f9:d7:f2:be:f4:d2:85:a8:bf:a2:cb:d9:26:58:b2:
52:98:66:f5:82:8c:a3:87:c2:5f:7d:d4:c4:20:6a:
20:6c:61:c5:ed:03:48:11:5c:45:88:f6:b9:b0:be:
9d:c3:ab:05:00:a1:d1:f5:e9:e7:97:52:73:b2:1a:
ac:52:4a:b3:d3:da:a9:a1:4b:b3:4b:d0:0a:7d:22:
6f:6e:ae:e4:12:63:76:7b:69:55:8f:69:7c:40:fb:
fd:8a:06:e2:68:83:4c:4c:f2:dd:81:88:2e:9e:ac:
07:ad:f5:cf:cf:f8:76:ec:a0:47:86:78:ef:bf:0d:
52:cc:46:d2:33:b7:1f:33:1b:66:18:17:08:1f:88:
32:0a:4f:5a:48:c8:0a:f5:44:d1:3b:db:9f:44:c8:
a2:6a:bf:fd:8a:e9:fa:74:d0:d4:27:23:20:a0:ec:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CE:FD:F9:40:05:31:7C:9D:31:A9:4F:20:A7:E2:55:AD:65:27:2F
X509v3 Authority Key Identifier:
keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:bf:d3:62:29:ce:98:bd:2f:7c:85:d9:94:24:d3:89:bd:eb:
b4:a7:e7:47:08:8d:87:b0:37:65:5b:cd:8b:09:ee:07:58:d0:
fa:9b:a8:97:1b:55:6b:e5:48:3f:af:42:a9:16:ce:df:c7:40:
16:d8:91:5b:01:35:4d:3f:9a:92:e0:8f:29:48:a6:ad:27:87:
85:60:70:4e:8d:04:f2:7e:43:e2:2b:57:42:ac:7e:f4:a1:38:
21:74:2a:ab:5f:ff:0c:6e:b5:01:f0:04:c9:39:6f:69:20:91:
91:cc:e0:8a:da:c0:8d:5c:39:09:da:7d:63:7f:da:18:fe:42:
2f:49:47:8d:18:f1:e9:dc:33:fc:76:b9:c3:8c:7a:b7:fe:80:
7f:c2:f3:5c:e6:b0:cf:d7:e4:a3:d3:74:46:6f:7c:c3:b2:89:
ae:54:40:51:7f:29:2d:71:82:dd:cb:23:b1:a0:9c:40:58:55:
56:66:e3:bd:0d:d7:c9:9f:54:0c:84:ec:17:20:04:9c:87:5a:
3a:b7:09:11:66:27:c4:57:2e:9a:30:10:9a:d5:59:43:84:99:
6a:af:28:0b:70:65:e6:0a:ce:d9:00:88:11:d4:dc:a0:ea:c9:
f1:79:7a:f1:1e:be:a8:f6:9e:63:24:6c:b9:22:7d:90:c9:31:
3e:15:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:41:38 2026 by rpki-client