
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier: IrOhy+1syJytGzcKWNQ+Q/5QJ93jDtIEkV8WoettKqc=
Subject key identifier: D0:B5:F4:4E:D2:EC:A0:45:9F:82:5D:2C:AA:DD:84:70:CD:5C:26:F9
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 1125
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number: 10FA
Signing time: Wed 22 Jul 2026 17:28:18 +0000
Manifest this update: Wed 22 Jul 2026 17:28:17 +0000
Manifest next update: Wed 29 Jul 2026 17:28:17 +0000
Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: 243PG46eDKq5dzJ5avFZWVM4ANd6LcUg1RUOHhAhCu0=)
2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: rZBquRvSRZzwF/cXOq40XWEHIK6p9WX2a250U/MbC2g=)
3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Validity
Not Before: Jul 22 17:28:17 2026 GMT
Not After : Jul 29 17:28:17 2026 GMT
Subject: CN=6a60fdb1-9983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:32:1d:ae:47:6c:f1:64:db:90:94:c3:87:
c9:5c:e0:2a:2a:35:fc:3b:ad:5d:11:c3:d5:6b:8f:
f9:1c:3e:34:c3:e7:b6:92:e4:5d:43:51:07:cd:03:
fa:ec:54:b1:29:5a:19:86:4c:a0:df:eb:1f:9b:3d:
bc:1a:f5:87:db:09:9a:f6:6f:de:6e:4c:ff:eb:6e:
df:5d:e9:a2:34:1d:ca:50:b6:a1:80:46:1b:b4:94:
97:69:31:f7:6f:55:6d:5a:de:cf:d9:ac:6b:1a:26:
57:33:4c:08:9b:8b:16:02:af:8d:60:d9:65:e5:ef:
35:9b:42:68:85:6d:74:db:eb:fb:f1:bd:6c:fc:e6:
d8:27:2c:99:a7:14:1f:8e:e3:a8:f7:ec:cf:d3:89:
7c:7f:b5:ea:1d:c3:7b:21:37:6a:2f:d0:8a:d0:74:
4b:59:09:d3:b6:5f:35:60:08:6a:bf:1f:9e:7b:f2:
ae:52:5e:fb:f3:95:b6:fd:f2:ae:86:73:84:d6:bf:
32:65:d9:b1:69:38:9a:58:26:69:77:f3:13:6f:a8:
3b:e3:04:96:1e:fe:e6:d5:29:bd:24:de:25:af:d8:
b3:95:2b:79:77:66:af:72:fb:db:89:81:aa:3a:79:
ea:d5:70:b5:69:07:f2:c6:fd:2c:bd:ab:5e:29:5c:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B5:F4:4E:D2:EC:A0:45:9F:82:5D:2C:AA:DD:84:70:CD:5C:26:F9
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:49:13:51:78:cf:a9:6f:3c:df:e4:3e:a3:2e:d2:d7:f3:
cb:8b:f3:ab:da:f9:29:3b:c7:53:45:2b:31:84:ea:7f:ef:9d:
b8:a3:da:61:4f:dd:75:86:65:12:a6:29:14:f8:dd:b4:b8:2e:
44:d3:3e:27:be:dc:87:b5:03:31:5f:cc:6a:1d:7a:70:ec:d7:
ec:69:5c:52:5e:4d:9d:49:67:54:e2:66:96:9d:61:07:94:9c:
4d:39:d8:1d:e4:7a:cd:e9:ef:31:ba:53:86:11:b9:cd:bd:1d:
42:3b:53:19:04:5d:0f:79:ff:9f:bc:d3:a5:a2:50:a2:d8:cb:
74:ee:89:e7:56:47:3c:1a:25:af:2b:43:d0:58:f1:0c:30:99:
ca:cc:40:88:d3:95:6f:b5:60:49:f0:10:29:4b:a3:58:a4:f9:
3b:e6:f1:05:de:33:97:bb:12:aa:d2:93:a6:e8:6b:47:a0:4c:
46:d0:57:ce:7f:50:4c:14:05:c1:fc:c1:04:22:ab:44:cb:bb:
cb:dd:36:40:87:a7:fa:c8:2c:fa:ee:99:c6:d4:3c:e4:6a:df:
1b:a3:79:ba:15:09:19:5d:05:a8:49:a0:09:20:ad:3e:17:51:
af:69:18:bf:57:2e:16:3b:b9:2d:0e:36:29:66:a1:b3:e9:16:
66:5f:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:57 2026 by rpki-client