
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.mft
File: vcm1EqwnH-q9ztCMvHpi0Wy10as.mft (raw, json)
Hash identifier: YeZKwLuUM2z3elfX/i1zdHPUTl3Y6lnIO/s0sqBpNf4=
Subject key identifier: 33:0D:A5:3B:39:8A:7C:47:0C:62:11:B3:75:0A:44:42:35:09:13:AA
Authority key identifier: BD:C9:B5:12:AC:27:1F:EA:BD:CE:D0:8C:BC:7A:62:D1:6C:B5:D1:AB
Certificate issuer: /CN=A9155C10/serialNumber=BDC9B512AC271FEABDCED08CBC7A62D16CB5D1AB
Certificate serial: 23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcm1EqwnH-q9ztCMvHpi0Wy10as.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.mft
Manifest number: 22
Signing time: Wed 07 Oct 2026 09:28:52 +0000
Manifest this update: Wed 07 Oct 2026 09:28:51 +0000
Manifest next update: Wed 14 Oct 2026 09:28:51 +0000
Files and hashes: 1: vcm1EqwnH-q9ztCMvHpi0Wy10as.crl (hash: 5TpZy6O/R2+tlEOYWDX2ABXz8InxzQFUENgNEMMNdyg=)
2: BC514B4490D411F1867D676D4211F970.roa (hash: hdibnIPwIwTOsk68oxjOB2BSyB8Gh794XIQmDTWasXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.crl
rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcm1EqwnH-q9ztCMvHpi0Wy10as.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155C10, serialNumber=BDC9B512AC271FEABDCED08CBC7A62D16CB5D1AB
Validity
Not Before: Oct 7 09:28:51 2026 GMT
Not After : Oct 14 09:28:51 2026 GMT
Subject: CN=6ac610d3-2afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a4:09:17:e8:af:eb:67:b0:99:14:71:99:1b:
99:51:85:69:c5:09:dd:b5:5e:95:4b:02:54:23:6f:
43:ab:6b:17:83:d4:c1:73:cd:24:10:2a:62:62:df:
b2:23:61:e5:2c:8c:e0:35:e3:a0:1a:2e:dc:f2:ef:
fc:3e:3b:b9:c9:40:fa:85:e6:9e:64:2f:d4:01:88:
e4:04:ee:96:14:12:52:50:cf:f8:7f:1c:f8:c7:13:
c7:85:d7:4d:ea:1e:2d:dd:a9:50:ed:28:f5:ad:e5:
2b:75:65:a9:6d:32:ee:09:58:fd:ce:80:0f:34:85:
a1:83:8c:61:eb:aa:80:2b:3c:03:e9:d1:33:24:19:
5c:b0:78:c9:4a:09:30:b4:eb:01:1e:63:f2:8d:29:
70:f6:1c:09:c8:c8:a7:4e:57:20:91:19:d3:48:9c:
d0:d6:6f:4a:94:b4:21:a0:aa:da:82:5b:fc:bb:6a:
f8:0b:3b:c4:24:6b:36:f8:5f:27:88:16:76:b6:46:
3c:33:4f:b9:f8:46:1a:01:eb:48:cb:37:22:8f:e4:
36:d3:97:3d:a3:a6:26:33:39:20:26:6c:ea:fb:72:
e7:63:be:4e:8b:12:2e:e3:01:a6:86:04:7d:e4:75:
da:4a:d8:60:56:66:ef:18:1b:5b:6a:76:45:f3:c5:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0D:A5:3B:39:8A:7C:47:0C:62:11:B3:75:0A:44:42:35:09:13:AA
X509v3 Authority Key Identifier:
keyid:BD:C9:B5:12:AC:27:1F:EA:BD:CE:D0:8C:BC:7A:62:D1:6C:B5:D1:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcm1EqwnH-q9ztCMvHpi0Wy10as.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155C10/6AF1518690D411F18C5E543F4211F970/vcm1EqwnH-q9ztCMvHpi0Wy10as.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:ff:9a:90:53:27:6e:e1:7f:91:71:f7:d3:5e:3e:ab:c4:
0d:1b:60:0c:ad:4f:08:88:ef:72:0e:18:e5:47:59:84:fe:64:
bf:50:47:8c:86:36:70:1a:2a:a8:2c:02:44:c1:1b:d5:9c:20:
79:4f:9d:31:3d:a8:31:d2:04:54:f4:d3:ca:e5:cf:b8:a2:17:
a3:75:87:10:4b:9a:63:06:59:62:cc:d4:5d:ef:ed:eb:70:1e:
41:db:c2:23:28:91:a0:11:63:b3:47:a2:bc:db:bd:d6:1b:16:
f0:57:5a:7d:2d:34:95:7b:8f:32:27:70:54:23:f7:8d:1e:e7:
2e:5c:82:c5:0e:e0:ff:8d:5d:09:9c:91:8b:a0:03:55:1f:94:
e1:d3:6c:15:36:6e:31:48:d2:05:4c:81:98:d4:c1:72:eb:68:
23:2e:f4:fc:13:c3:8f:6c:f1:4e:f9:a0:f5:ed:97:a5:1a:95:
71:df:80:a8:b7:73:e6:95:69:b6:9a:be:5c:e1:22:c4:a2:b9:
ad:67:24:87:ab:0c:a8:81:d2:59:9f:95:d8:bd:6a:63:e5:a6:
29:6c:1c:fa:73:a1:de:c5:e1:9f:89:74:ca:44:d4:e8:3e:d2:
25:b2:a8:e2:10:d2:27:73:76:5e:a4:c4:1d:a5:20:f4:ca:70:
7e:de:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:52:12 2026 by rpki-client