
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
File: VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft (raw, json)
Hash identifier: PNMBERpBvM5HM8a0GfXI0iDdRGvpubVYDIOSI/lBMjs=
Subject key identifier: 9D:23:DF:69:F7:44:F3:E8:15:98:EB:18:C4:B8:68:2E:11:48:C8:A2
Authority key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Certificate issuer: /CN=A9159BAE/serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Certificate serial: 20
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
Manifest number: 1E
Signing time: Wed 25 Mar 2026 08:04:46 +0000
Manifest this update: Wed 25 Mar 2026 08:04:46 +0000
Manifest next update: Wed 01 Apr 2026 08:04:46 +0000
Files and hashes: 1: VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl (hash: u4T1+gG4GFwGUh0u6giFsClGSZ9PCXMuVBLMjmsPpmM=)
2: 550BEEB0000311F1893529AE3C6F56BC.roa (hash: 2Te1NMqIJ2B9pmKNpdjXQir35QqlPCZ8GX9jF3OrH3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32 (0x20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Validity
Not Before: Mar 25 08:04:46 2026 GMT
Not After : Apr 1 08:04:46 2026 GMT
Subject: CN=69c3971e-0ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d9:2b:39:4f:b7:aa:3e:18:a5:7a:78:22:64:
9c:ce:25:7d:b8:7f:c9:57:fb:ee:13:ce:9d:21:8b:
2c:26:e4:7f:16:5c:e8:29:7a:2b:5c:08:da:54:ce:
8d:b6:9e:78:d1:e5:09:72:8e:15:12:af:ac:5f:f0:
8a:78:e9:34:2a:5c:f4:eb:e1:cd:17:64:65:b2:8a:
b6:b0:09:83:44:33:a9:a0:ac:c5:45:90:3a:72:91:
9c:2c:bf:dc:0b:88:c7:56:b6:a7:b0:7f:95:a9:df:
28:08:89:28:c1:e2:c1:fd:65:81:08:a0:2e:18:58:
f7:03:a7:be:24:fa:3f:ce:e1:3a:f6:43:4c:b3:f8:
d4:69:f3:f3:b7:f0:e8:de:e6:16:78:fc:d3:36:a7:
98:39:21:85:c9:22:90:66:28:9b:26:cb:df:af:5a:
9d:f4:30:79:a3:d9:f2:4d:6c:be:f7:68:b3:44:5d:
34:78:81:10:fb:8b:9f:13:d0:45:ce:b7:e3:32:c2:
a7:f0:29:30:cd:52:3a:f7:72:e0:c3:3d:e7:d0:f4:
a8:6a:21:e2:51:37:f5:ce:00:36:5f:95:b9:00:f5:
62:d4:2c:37:f1:99:66:3c:bd:99:61:64:67:52:94:
3d:77:56:12:11:37:97:7b:7b:12:11:2e:3a:10:0f:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:DF:69:F7:44:F3:E8:15:98:EB:18:C4:B8:68:2E:11:48:C8:A2
X509v3 Authority Key Identifier:
keyid:54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:61:6c:ca:74:f1:6a:33:7c:ca:1f:8e:00:2b:ff:06:86:96:
17:57:54:1f:b7:14:10:5f:9c:cc:e1:03:9f:5d:be:27:7e:fa:
59:d0:8c:7f:19:00:7f:1a:9c:d8:e9:90:a8:36:9d:f9:93:58:
e4:be:9c:37:7c:b9:e1:cb:10:5d:8e:f4:2c:a2:66:a6:09:0b:
d0:f0:b4:d2:5a:2e:90:e2:8f:6e:01:42:25:ba:7f:95:c2:8b:
97:16:ce:0f:bd:e3:47:1d:8e:e5:5a:f8:12:18:92:04:57:2b:
e2:06:e3:0d:b2:e4:52:42:2e:64:9c:65:60:e7:ee:e1:ce:cf:
21:f4:51:e0:57:5b:5e:d9:27:1f:92:2d:c1:a5:19:85:88:7a:
18:f6:93:9c:4e:29:fa:b8:5d:84:37:6a:0a:7a:9a:b9:9d:9c:
27:c5:d2:52:73:05:c2:fb:bf:2d:e2:c2:34:27:1a:c3:95:39:
78:59:ef:b8:3c:9e:97:e4:05:c0:f0:b9:d7:7c:e9:5c:54:30:
39:c8:e1:4e:c9:59:85:4b:df:56:9c:c0:8d:81:e2:a9:05:60:
5f:93:ee:d2:48:b2:96:b4:02:b1:04:84:23:6f:39:09:fc:44:
10:06:2e:6e:0c:d2:a1:f9:47:2f:05:fc:de:b4:54:dd:7a:40:
1a:d0:cb:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:05 2026 by rpki-client