
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File: rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier: iknMvFFsN2AhphkmKoxGas0I2F89wLKYzbd81wJRE8E=
Subject key identifier: 5A:3C:C3:14:F5:34:E4:B9:B9:A8:AD:6B:20:75:7C:53:D0:F4:66:C6
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial: 0143
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number: 0139
Signing time: Thu 23 Jul 2026 07:09:10 +0000
Manifest this update: Thu 23 Jul 2026 07:09:10 +0000
Manifest next update: Thu 30 Jul 2026 07:09:10 +0000
Files and hashes: 1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: mPMv3PpvRIYWVGe8JI7KQcm9/Eup333w+sjUCX2phes=)
2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: Ym98AGZEM1BksP4Y3kvzDkvtm38BxUohqAh//gTG7x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 323 (0x143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Validity
Not Before: Jul 23 07:09:10 2026 GMT
Not After : Jul 30 07:09:10 2026 GMT
Subject: CN=6a61be16-3091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:f8:cd:8c:bd:df:ea:c3:60:81:a0:02:e5:
4f:d9:15:44:00:25:ea:e8:59:9e:76:8b:7d:f5:38:
31:ce:51:c1:eb:df:e2:73:d8:e0:8e:21:aa:70:6a:
5a:9e:e3:68:5d:81:85:54:40:8a:50:30:90:ba:f9:
a8:68:ef:56:8d:13:f8:e4:40:d1:eb:68:8e:5b:81:
68:c8:2a:41:c4:04:28:40:99:04:5d:3b:17:ab:fa:
0c:05:38:a6:12:b6:d5:67:8e:b3:4e:32:69:26:fb:
27:11:40:1a:fe:3a:77:24:ca:59:6b:0e:a0:d3:0a:
8e:90:25:81:dc:1d:8d:5e:cc:50:68:5c:bd:b9:3a:
b6:b1:c8:74:f3:76:12:f2:22:91:06:b9:75:3c:44:
79:65:8f:0a:a7:5f:42:40:ba:3b:29:72:76:c8:eb:
06:4e:cd:86:e9:ac:18:1b:59:ff:d5:55:99:fa:f8:
a5:25:98:6f:57:cd:0f:87:5f:80:e5:09:ad:aa:ab:
ea:9d:79:2a:ec:b9:2c:37:6e:bc:32:9c:ec:2e:9c:
1b:ec:55:16:50:09:2d:ee:b4:82:bd:28:9f:a9:11:
cf:16:5a:79:3d:06:dd:36:0b:80:18:0c:90:2b:92:
ab:cf:83:ad:5f:a0:8c:31:7f:2f:2a:f8:aa:5f:ee:
12:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:C3:14:F5:34:E4:B9:B9:A8:AD:6B:20:75:7C:53:D0:F4:66:C6
X509v3 Authority Key Identifier:
keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6f:0a:60:07:94:69:8b:f8:b5:69:bc:09:df:e2:f0:53:ea:
cd:7c:5d:9a:b9:93:b0:ab:96:09:61:c1:03:95:09:b0:6a:d4:
b8:d3:66:b7:3f:92:46:91:91:9b:10:88:d1:69:19:6f:c8:2e:
52:a1:67:48:65:e8:e1:e0:19:0e:ab:a8:1d:af:da:dc:ac:a6:
c8:10:0a:52:ee:ff:68:5d:14:67:69:aa:3f:1a:00:93:3f:14:
be:ad:7f:c7:b8:eb:a1:67:c0:2f:6d:55:28:fd:1d:0e:30:1a:
53:c2:64:90:6e:14:f6:ed:bf:ac:67:86:40:b2:97:e9:1a:23:
2f:4d:b0:9c:df:60:56:bb:6e:5c:d8:a3:25:16:51:55:cb:b5:
97:59:85:d8:4e:e6:29:a0:ed:33:d1:4e:1b:df:77:84:ef:d4:
48:e0:37:3c:46:37:d5:79:ba:34:04:40:00:80:56:8d:7f:8c:
25:1a:e3:c3:a1:1f:ed:a4:0d:c3:2d:0c:ca:6b:1e:ad:a0:75:
11:a8:0c:c3:99:2f:bb:63:ff:49:c7:6d:b0:5f:d7:0a:2b:23:
6f:14:d5:76:aa:49:c5:ba:c2:19:43:ed:da:31:85:03:1c:88:
47:10:be:40:29:25:e9:85:a2:5a:00:be:ae:99:4e:57:84:f5:
c6:52:cc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:15 2026 by rpki-client