
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
File: vAv4-dc7foz8yOpen0LXqFUjPXw.mft (raw, json)
Hash identifier: F5qnzHeY4M/x1Wbc7U9VpZGoVqMJpAT9kmk5wza/0zo=
Subject key identifier: 41:BF:AA:96:9B:E3:B3:3E:9A:1C:F8:52:6C:76:AC:49:3F:45:8F:BE
Authority key identifier: BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
Certificate issuer: /CN=A9163EB9/serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
Manifest number: 01B0
Signing time: Sun 15 Nov 2026 04:18:14 +0000
Manifest this update: Sun 15 Nov 2026 04:18:13 +0000
Manifest next update: Sun 22 Nov 2026 04:18:13 +0000
Files and hashes: 1: vAv4-dc7foz8yOpen0LXqFUjPXw.crl (hash: /6T1zBL1aaVwjCzbiEae/zo2gPGngguPJh43kSoLwkE=)
2: 710FB354979E11EF99310B40C4F9AE02.roa (hash: ibwxeVeyVQI+vvw7bXSGLT3jfkcETuhidGMFVe0e+w0=)
3: 27AEE7D0979D11EFB1426839C4F9AE02.roa (hash: 0u9Gf3pBJ31pHnjrQtEGG5mIF3vRoS4ay6AlIe0bQoA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl
rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 04:18:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163EB9, serialNumber=BC0BF8F9D73B7E8CFCC8EA5E9F42D7A855233D7C
Validity
Not Before: Nov 15 04:18:13 2026 GMT
Not After : Nov 22 04:18:13 2026 GMT
Subject: CN=6af93286-55cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:55:3e:43:2b:de:b6:35:87:c1:8f:d7:ec:
19:51:b6:5d:12:88:ab:ad:79:e4:34:1e:5c:5e:04:
71:bf:b1:85:6c:23:ca:e8:d4:72:8a:e9:5b:44:d0:
19:e4:9e:97:52:ad:82:e4:64:51:2c:3e:01:f6:64:
4b:92:f0:3e:3e:d8:47:e3:6f:7f:d7:44:3a:6c:4a:
3b:7b:c1:01:f1:ed:46:99:e6:4b:e9:51:2f:41:2d:
d3:f3:9d:5d:e6:0a:e4:dd:4f:80:56:1d:e9:2d:e1:
0a:45:d7:bd:02:41:f1:97:cf:63:e3:09:eb:be:e8:
46:1e:83:a3:ea:7f:1c:65:6d:39:7f:01:46:ae:f6:
2d:f2:30:65:f3:14:64:dc:ac:30:98:23:60:ab:05:
44:6c:e6:14:c5:92:5a:e9:38:ab:85:85:ca:45:69:
8f:d1:58:6d:b9:34:95:f1:3f:a1:d8:50:86:6b:8d:
64:87:ab:ae:2d:ce:89:3e:a8:e3:7f:f9:c5:51:c8:
ce:75:c9:13:99:73:9b:48:ae:8e:6f:f7:80:59:00:
cd:3f:18:47:6a:d5:7f:e9:f5:1f:41:a5:49:7e:e1:
3a:d9:9d:d7:88:33:17:8a:6f:30:2b:b8:25:bf:f9:
33:2f:6e:b2:71:9f:0c:97:ab:79:0c:38:a8:cd:d4:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BF:AA:96:9B:E3:B3:3E:9A:1C:F8:52:6C:76:AC:49:3F:45:8F:BE
X509v3 Authority Key Identifier:
keyid:BC:0B:F8:F9:D7:3B:7E:8C:FC:C8:EA:5E:9F:42:D7:A8:55:23:3D:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vAv4-dc7foz8yOpen0LXqFUjPXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163EB9/FCD55C0A549F11EF86AE5922C4F9AE02/vAv4-dc7foz8yOpen0LXqFUjPXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:80:c5:42:c7:b7:9f:7e:fd:ed:55:f2:c9:c6:6e:a9:a4:0a:
ae:ce:23:bd:5c:f0:77:03:bd:7b:23:7a:13:ee:5d:27:af:f2:
d6:8a:93:8f:6c:2b:7d:64:24:d4:69:36:21:68:ea:52:32:59:
0d:16:dd:da:2c:27:b7:f7:e4:04:1d:a9:3b:45:c3:33:f7:d4:
a4:71:da:bb:03:6c:23:24:e4:30:38:4e:37:36:14:cd:5c:78:
f6:29:50:ea:cd:9a:cb:18:20:fd:dc:e4:db:fe:fb:b7:26:7e:
29:29:5e:ef:e2:dc:d5:d9:2b:e5:f4:02:1e:7c:64:51:76:2c:
41:aa:f8:0b:60:d0:ac:c6:bb:27:16:fd:6c:fa:c6:3c:1d:20:
b4:a6:b6:a5:1f:7e:9e:47:f4:1c:e0:e0:e0:00:9e:a2:93:9a:
fe:10:f9:c9:0a:5f:b1:7a:b3:9c:23:ef:c5:7c:4c:ff:1b:37:
ca:c3:b8:72:51:a1:27:8f:0f:41:c1:4c:22:b3:07:d0:41:b1:
94:ce:21:15:02:fb:87:7d:45:b2:a2:19:18:21:e2:7a:d1:08:
e6:0a:56:2e:40:93:b4:6e:7c:46:d3:7b:a5:bc:f3:b5:cd:85:
0f:3c:15:fd:59:4f:6b:89:04:33:35:39:f8:6f:17:4e:39:6b:
65:d2:a1:ec
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjNFQjkxMTAvBgNVBAUTKEJDMEJGOEY5RDczQjdFOENGQ0M4RUE1RTlGNDJEN0E4
NTUyMzNEN0MwHhcNMjYxMTE1MDQxODEzWhcNMjYxMTIyMDQxODEzWjAYMRYwFAYD
VQQDEw02YWY5MzI4Ni01NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh4hVPkMr3rY1h8GP1+wZUbZdEoirrXnkNB5cXgRxv7GFbCPK6NRyiulbRNAZ
5J6XUq2C5GRRLD4B9mRLkvA+PthH429/10Q6bEo7e8EB8e1GmeZL6VEvQS3T851d
5grk3U+AVh3pLeEKRde9AkHxl89j4wnrvuhGHoOj6n8cZW05fwFGrvYt8jBl8xRk
3KwwmCNgqwVEbOYUxZJa6TirhYXKRWmP0VhtuTSV8T+h2FCGa41kh6uuLc6JPqjj
f/nFUcjOdckTmXObSK6Ob/eAWQDNPxhHatV/6fUfQaVJfuE62Z3XiDMXim8wK7gl
v/kzL26ycZ8Ml6t5DDiozdRN7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEG/qpab
47M+mhz4Umx2rEk/RY++MB8GA1UdIwQYMBaAFLwL+PnXO36M/MjqXp9C16hVIz18
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0VCOS9GQ0Q1NUMwQTU0
OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zvejh5T3BlbjBMWHFGVWpQ
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZBdjQtZGM3Zm96OHlPcGVuMExYcUZValBYdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
M0VCOS9GQ0Q1NUMwQTU0OUYxMUVGODZBRTU5MjJDNEY5QUUwMi92QXY0LWRjN2Zv
ejh5T3BlbjBMWHFGVWpQWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAB4DFQse3n3797VXyycZuqaQKrs4jvVzwdwO9eyN6E+5dJ6/y1oqTj2wrfWQk
1Gk2IWjqUjJZDRbd2iwnt/fkBB2pO0XDM/fUpHHauwNsIyTkMDhONzYUzVx49ilQ
6s2ayxgg/dzk2/77tyZ+KSle7+Lc1dkr5fQCHnxkUXYsQar4C2DQrMa7Jxb9bPrG
PB0gtKa2pR9+nkf0HODg4ACeopOa/hD5yQpfsXqznCPvxXxM/xs3ysO4clGhJ48P
QcFMIrMH0EGxlM4hFQL7h31FsqIZGCHietEI5gpWLkCTtG58RtN7pbzztc2FDzwV
/VlPa4kEMzU5+G8XTjlrZdKh7A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:18 2026 by rpki-client