
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File: VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier: Em1JOMNRgYFi7lSg6Zpf6Ffh/0dsFUVKrNB8lWxCzsU=
Subject key identifier: 15:89:45:55:5A:63:13:0D:B4:CF:07:09:41:D0:67:3B:55:A8:22:FD
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer: /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial: 01B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number: 01AC
Signing time: Thu 23 Jul 2026 05:33:34 +0000
Manifest this update: Thu 23 Jul 2026 05:33:33 +0000
Manifest next update: Thu 30 Jul 2026 05:33:33 +0000
Files and hashes: 1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: oWOapQPqNlNHLXbC88cfGc5jm9FmU8zNU667KXutd4Q=)
2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: mxa8tydWQjiy2bpcgk7RtwgTSB1dfJQU4fJvs9xpLbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:33:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435 (0x1b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Validity
Not Before: Jul 23 05:33:33 2026 GMT
Not After : Jul 30 05:33:33 2026 GMT
Subject: CN=6a61a7ae-d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:7f:62:82:89:27:26:d3:2f:57:eb:96:d2:
52:f4:90:2f:94:a7:3c:73:95:fe:0b:4a:9a:23:d6:
7f:fc:2a:0f:74:2f:48:b8:1e:10:c9:ee:e0:9e:50:
fc:0c:63:75:a3:bf:f9:a0:f1:3d:7b:17:16:dc:09:
38:7f:9c:07:e2:66:fc:06:fe:27:8f:f9:7e:e8:0d:
de:ac:bd:8e:33:37:1f:89:55:06:65:27:5b:32:46:
37:64:06:69:66:b8:14:fd:ca:c6:8c:89:e8:85:00:
1d:09:6a:69:c0:c9:5b:96:c3:d3:a8:4e:3c:f0:5d:
7d:0f:3f:53:c5:f0:d9:38:42:a5:28:72:26:ac:a1:
ee:51:a5:36:67:df:24:dd:a6:14:a0:b5:41:35:6b:
f6:0a:88:09:95:1c:8e:ac:61:42:61:01:33:26:de:
40:f1:18:b9:26:28:a3:e1:14:1d:d3:39:50:7d:1f:
3b:ca:c0:35:f0:73:81:a5:9e:bf:0a:05:ea:32:a2:
98:a0:88:c6:7b:ff:37:5b:fa:50:8d:8b:86:54:b8:
02:04:fc:e2:53:e3:1b:df:ec:bc:2e:ac:55:65:18:
62:fd:8e:81:d5:66:06:9b:fd:b1:00:85:3d:53:8c:
db:7f:b0:40:2c:dc:ea:18:a7:b0:26:b1:06:a4:c3:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:89:45:55:5A:63:13:0D:B4:CF:07:09:41:D0:67:3B:55:A8:22:FD
X509v3 Authority Key Identifier:
keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:46:7d:f1:8d:c0:2c:f6:b3:d5:fa:e3:c4:38:cb:b7:c9:af:
a7:1f:b1:4e:70:75:e0:b3:73:bd:5d:3a:27:9d:3b:b5:7b:55:
c5:20:7b:75:58:2a:56:75:38:65:91:86:00:df:1f:16:4f:8e:
03:cb:f9:20:89:e5:7b:65:68:39:f7:a2:45:14:2d:30:44:14:
8f:06:3a:0d:f2:f6:6f:a0:a2:f0:69:2d:96:31:3e:c8:08:55:
92:87:2c:13:36:74:74:42:0f:3a:e6:32:d4:50:60:b8:c9:82:
2a:0d:23:ee:36:85:0e:1e:90:54:44:b1:3a:15:b3:03:3c:60:
dd:c4:8c:f1:5f:14:0b:ed:4b:9f:c1:ef:5c:b8:64:cd:a3:61:
8e:c6:11:39:74:f3:b1:c2:a6:73:a1:4b:64:27:5b:34:d3:6a:
3f:e7:5c:66:6b:33:6c:50:db:d9:23:92:ee:49:08:a6:f3:ad:
28:4c:ed:3e:ea:ed:c6:d9:bb:f9:0c:da:aa:e9:d2:25:02:32:
58:04:99:43:d1:0d:3b:7e:81:f6:6f:a4:db:c0:f6:73:33:b3:
28:58:bb:3c:37:1d:b4:bd:96:08:f4:0d:b9:39:c4:87:5d:23:
a2:06:64:2f:f5:83:4e:f2:99:ce:31:eb:95:82:68:68:40:20:
07:b9:92:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:32:16 2026 by rpki-client