
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json)
Hash identifier: bo3SffXKJH3LeZDnRPWMhQrzsyG5rH9I2x734o3Pmko=
Subject key identifier: 71:3B:04:F6:D3:97:58:87:7C:C4:DA:C2:56:91:6E:77:8D:42:10:65
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
Manifest number: DD
Signing time: Wed 13 May 2026 06:46:46 +0000
Manifest this update: Wed 13 May 2026 06:46:46 +0000
Manifest next update: Wed 20 May 2026 06:46:46 +0000
Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: c6cZJ/jiAvs68nFYZ4u5bhWCrs7XBkohqo1Rx16e3YE=)
2: 394CC63C2D2F11F19323886DBB833773.roa (hash: 45eCaBsMYY5Dq3/DduTYtQquofDXNyzGbOAJxOjVzdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 223 (0xdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: May 13 06:46:46 2026 GMT
Not After : May 20 06:46:46 2026 GMT
Subject: CN=6a041e56-a30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1b:b6:2f:2c:7f:f9:c9:24:e6:f9:05:13:e6:
8d:47:7b:2a:78:1f:56:2b:67:e0:5a:f1:2b:05:a9:
20:f5:53:bf:8b:4c:68:5a:75:a2:11:54:11:f0:ef:
18:a5:55:74:d6:2b:df:bc:a4:7b:61:94:a5:68:c4:
3f:72:6d:bd:51:bd:f9:35:48:6a:ea:d6:8d:e0:88:
58:50:f6:96:e7:71:84:a5:56:e0:59:32:fa:c9:42:
d6:61:b0:d0:7a:b5:17:af:f2:08:6a:91:86:c5:66:
37:be:ef:62:69:71:fb:6a:f2:68:02:9d:c8:ef:6c:
87:ae:54:6b:bd:7d:1d:69:2e:74:0c:dc:47:bb:61:
1c:65:89:76:72:b6:8e:c3:f8:f7:8b:cc:d6:ea:13:
58:7a:20:0f:93:ae:e6:e6:d3:9a:84:e8:31:83:f8:
07:15:cd:d0:31:a5:78:ba:e9:65:c0:15:88:41:aa:
07:e5:a8:86:0e:ce:26:d5:4f:12:aa:96:47:4c:b0:
e1:45:e7:36:a1:85:b1:1e:70:1d:1d:b1:3c:6e:c1:
ed:ec:90:df:ae:e0:34:6c:68:58:c2:d4:ec:31:f1:
6c:95:37:0a:eb:68:64:20:99:4b:bb:ee:65:72:3e:
64:8f:4e:02:20:8b:cf:b6:bd:fa:e0:a1:df:4b:50:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3B:04:F6:D3:97:58:87:7C:C4:DA:C2:56:91:6E:77:8D:42:10:65
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:74:75:ee:4b:32:72:d0:c5:75:0c:6e:e2:9a:9a:29:dc:d9:
ff:cf:cc:47:c2:07:24:07:9c:c1:ff:02:9a:e0:c0:55:ce:d7:
af:1c:63:3a:c9:cf:b2:1e:fa:44:b5:03:53:ee:7c:bf:9c:32:
6d:f2:21:8d:97:cf:2e:b9:2c:af:5a:49:24:4e:c5:2d:cf:f0:
76:88:ab:d9:62:92:95:80:38:23:fd:e8:23:3d:5b:07:c3:60:
6a:b2:af:5f:14:5d:d4:5e:7c:c1:2f:b7:c6:e1:96:c1:35:11:
ea:c9:a5:d6:cc:c1:73:59:85:dc:13:63:6a:5a:02:91:33:65:
d2:cd:91:a1:75:69:c3:5e:ae:83:76:03:27:a9:9f:a2:e7:2a:
5f:9a:40:81:23:81:60:2d:f4:a8:10:f8:72:93:d0:b3:1f:0f:
1c:62:95:91:91:ce:19:71:3f:94:55:a8:12:8b:5d:53:91:f5:
6c:d0:71:b8:fa:94:88:83:fe:51:b8:ce:ae:9c:3e:ba:66:9b:
79:ea:b1:20:b3:99:79:ca:b8:02:7f:58:77:32:c6:70:1d:a9:
ab:6f:26:95:c0:bc:94:69:fe:e7:2b:7a:27:29:33:9b:b6:ab:
49:38:d6:2f:55:a0:d1:3c:c2:25:eb:95:8a:15:7e:16:9a:a8:
45:31:95:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:48:59 2026 by rpki-client