
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json)
Hash identifier: E17pNUlC6kX9ofGFMvMI+Nfx+bUPYl2+WBDlBZqm0Y8=
Subject key identifier: 35:AC:AB:41:90:9E:20:29:47:BA:ED:11:DE:DC:21:29:9C:C7:76:AE
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: 0102
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
Manifest number: 0100
Signing time: Thu 23 Jul 2026 07:57:13 +0000
Manifest this update: Thu 23 Jul 2026 07:57:13 +0000
Manifest next update: Thu 30 Jul 2026 07:57:13 +0000
Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: OAhX5REYAHDrEIqf5lLPVJxJFKBZwSN6/2WMpYMppGo=)
2: 394CC63C2D2F11F19323886DBB833773.roa (hash: 45eCaBsMYY5Dq3/DduTYtQquofDXNyzGbOAJxOjVzdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 258 (0x102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: Jul 23 07:57:13 2026 GMT
Not After : Jul 30 07:57:13 2026 GMT
Subject: CN=6a61c959-6c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b4:30:01:01:49:46:93:73:18:e0:72:93:19:
4e:04:fe:6f:a7:72:1e:af:08:88:22:20:8c:06:e7:
fa:2c:e9:fe:2b:ab:36:1b:c1:5f:dd:09:a1:ac:f6:
4a:17:13:97:d7:1b:3c:de:11:30:04:41:09:1c:0a:
43:83:8e:62:fc:00:58:e7:a4:7e:ee:4f:c4:7a:0d:
d7:89:87:36:20:a8:1f:e6:7e:50:53:cc:8e:0c:52:
dd:d2:58:eb:fa:aa:92:3b:b3:04:41:7c:db:e5:56:
f7:24:3c:83:36:31:62:cc:17:63:75:48:2f:09:e6:
a8:b3:05:c2:4b:db:f6:38:1d:32:91:7b:92:a0:47:
93:39:dc:83:36:9f:40:21:c9:29:65:ba:54:a4:65:
b2:e9:92:37:72:92:0d:a5:bd:c7:91:9d:fb:c0:eb:
6b:f9:80:a3:82:7e:f5:34:e9:37:39:e1:94:b7:3f:
da:ba:e2:77:61:67:7a:8d:50:1b:dc:6e:d2:73:33:
08:00:ed:34:48:1a:3c:24:ed:58:43:10:9d:45:5e:
4b:34:c1:45:9f:89:c3:0b:b0:45:f2:d4:45:3a:e4:
43:7a:23:72:de:ee:f7:48:28:8b:0c:32:da:97:75:
9e:f5:f3:12:62:f8:fd:4d:4f:00:eb:4a:9e:ee:a1:
73:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AC:AB:41:90:9E:20:29:47:BA:ED:11:DE:DC:21:29:9C:C7:76:AE
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:20:f7:14:97:5f:5d:10:06:ec:ba:f9:30:e7:14:36:4d:f6:
91:68:47:8a:ef:4a:ec:63:9c:54:91:8e:f6:12:bd:56:6a:ec:
d4:0e:42:ef:2d:36:ed:be:f7:57:f6:d1:65:0f:ce:19:7b:06:
bc:d9:d8:a2:61:87:de:22:04:7a:6b:b1:a2:8c:24:c2:e8:47:
a6:6e:96:3b:44:68:9f:6d:76:4b:6b:17:39:8e:78:2c:d8:0f:
d8:0e:34:c8:06:47:d5:4a:ed:13:a4:5b:ff:2e:1e:a7:03:58:
68:2c:88:36:ad:2d:af:28:d4:81:4d:1a:1c:75:99:6b:64:49:
f5:9e:31:4c:ba:55:b2:8e:d9:8e:cb:34:c6:7d:9c:6d:dd:c3:
a4:3b:e2:dd:de:d8:9d:7f:a4:ab:31:91:2e:c6:b6:31:6e:db:
b0:04:aa:21:12:61:0a:2b:46:49:c8:7c:75:c9:24:b7:4c:cc:
77:07:d7:bb:cd:af:44:bb:f9:21:1f:2b:3d:e8:39:6b:c3:2e:
86:ec:04:74:46:62:2f:ad:68:52:af:e9:7c:8b:56:d7:f1:73:
49:60:e6:98:8a:88:d9:a5:4e:04:0b:e8:19:74:99:df:d5:86:
2f:35:75:23:7a:38:5e:17:23:eb:a0:29:9a:7e:b0:34:03:c2:
27:4a:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:40 2026 by rpki-client