
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
File: vhLS7vQqHJ3CpXIERscDFsfCBlA.mft (raw, json)
Hash identifier: NGTZAiCZr88QNvAcfAUHXG289ZEpCK4yYdTOiX3ZtyI=
Subject key identifier: A1:02:FD:D7:98:8F:BD:7C:12:A1:3A:7D:C2:78:E3:88:1F:89:1E:E7
Authority key identifier: BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
Certificate issuer: /CN=A9174A6B/serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Certificate serial: 290B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
Manifest number: 28DF
Signing time: Thu 24 Sep 2026 15:33:51 +0000
Manifest this update: Thu 24 Sep 2026 15:33:51 +0000
Manifest next update: Thu 01 Oct 2026 15:33:51 +0000
Files and hashes: 1: vhLS7vQqHJ3CpXIERscDFsfCBlA.crl (hash: mElPJDdvt4QyIaD1WNEMMKm+qSuhwIbgIR2fQ48zYiw=)
2: RjtJADDV0_xVIHKM6AxMwjiOpJc.asa (hash: cizTmtMukagaIDONuHUr+Znzj5qm8V+AxuhTGLPEf8A=)
3: 5B7F22440AF811ECB423A671C4F9AE02.roa (hash: TspezYM4IRlokwPfjhl3bMH0Gn30QinDMLtE8ZCLHTk=)
4: 5UXIKmWqo-EBUfAdqb3AfiGNwt4.asa (hash: EGbS76h1brvYeOhgFfCzAj/zLNdTcv0xYc1rIzDyMRA=)
5: B70AE7D20C6B11EC82638A40C4F9AE02.roa (hash: FfIhVgOobJG4Dwk4yARQxeFwaeZwMJUebKyXm+2RqRM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 15:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10507 (0x290b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174A6B, serialNumber=BE12D2EEF42A1C9DC2A5720446C70316C7C20650
Validity
Not Before: Sep 24 15:33:51 2026 GMT
Not After : Oct 1 15:33:51 2026 GMT
Subject: CN=6ab542df-9fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:1e:e4:01:1e:55:00:db:cb:88:85:1e:43:
3e:96:ca:0a:18:83:ed:9f:93:9f:ac:12:40:dc:57:
60:86:0f:cc:8e:1a:26:d1:b9:8a:5e:ba:af:86:55:
2b:a3:60:5c:e9:fd:6f:46:eb:82:e7:29:d2:4d:d0:
3f:dc:31:ca:56:b6:f8:7f:a0:73:21:46:b5:d5:82:
8b:ae:5a:d2:84:61:79:17:3b:43:7f:77:c3:0c:30:
a1:18:a8:9d:db:31:54:de:7e:16:7e:99:e2:56:09:
3b:65:94:13:40:ca:c0:0d:b6:41:03:57:cf:03:04:
7f:cb:b1:fd:82:bc:bf:03:70:07:62:d6:e6:4b:eb:
f7:f1:16:79:d5:b0:2f:f6:5b:89:7f:86:ee:3d:8a:
89:27:6e:5e:9c:4f:f7:92:2d:de:97:31:1a:94:ad:
40:2e:81:1b:66:79:75:d5:28:2f:f6:53:f1:c0:00:
9b:0b:c5:48:30:d5:e3:31:a8:81:bd:14:0c:ee:18:
91:83:08:87:de:a2:0a:bc:4a:2f:b6:05:e8:e0:45:
77:5a:76:5c:15:ca:36:74:4e:b9:af:d7:6b:b3:d3:
d5:53:e6:23:eb:21:4a:1b:50:bb:47:f2:9f:3a:f4:
cc:53:b7:01:36:80:e3:87:13:2e:20:86:41:c6:5b:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:02:FD:D7:98:8F:BD:7C:12:A1:3A:7D:C2:78:E3:88:1F:89:1E:E7
X509v3 Authority Key Identifier:
keyid:BE:12:D2:EE:F4:2A:1C:9D:C2:A5:72:04:46:C7:03:16:C7:C2:06:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vhLS7vQqHJ3CpXIERscDFsfCBlA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174A6B/75244B62A16311E4B966DD0FC4F9AE02/vhLS7vQqHJ3CpXIERscDFsfCBlA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:65:5f:23:40:7f:79:4d:be:f5:de:01:99:91:16:d1:0b:0b:
19:e5:65:61:0a:27:93:c2:ec:02:59:c8:38:da:a4:cc:7f:0e:
65:6d:c1:47:e1:1f:51:9e:c8:6a:77:09:41:39:5e:28:61:2a:
c9:84:1e:6d:27:56:89:8f:f0:c4:40:54:66:31:1c:4b:a5:c0:
71:28:7d:22:3a:37:0c:c7:c3:bd:f5:f0:8a:5e:c5:8d:46:92:
22:3a:b9:54:45:83:ec:97:72:fa:dc:d4:b2:81:95:27:2a:e5:
1c:8b:09:d7:c3:c6:a1:2f:3f:5b:3d:51:55:ab:08:e2:38:53:
5d:63:9e:e4:bf:8f:ed:87:51:aa:3f:3f:25:a0:05:73:1f:60:
9d:49:e7:22:e5:2e:f7:1c:b0:dc:f4:ee:2d:24:59:a7:46:23:
19:61:cf:e7:63:20:a5:d4:98:46:16:7a:02:42:e3:e5:2b:dd:
0d:1f:e9:52:9a:ae:ba:44:a2:b9:b9:ce:59:d4:2f:8a:8c:ba:
ee:58:ec:58:ba:25:13:93:13:3c:19:ef:b8:a9:56:c1:ae:53:
58:f3:41:11:d7:1e:6c:15:f7:85:4e:c5:4e:86:6d:77:61:d3:
d9:ab:16:40:2c:49:0c:3a:c6:9e:e5:1f:86:d2:54:e1:46:95:
02:da:39:51
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICKQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRBNkIxMTAvBgNVBAUTKEJFMTJEMkVFRjQyQTFDOURDMkE1NzIwNDQ2QzcwMzE2
QzdDMjA2NTAwHhcNMjYwOTI0MTUzMzUxWhcNMjYxMDAxMTUzMzUxWjAYMRYwFAYD
VQQDEw02YWI1NDJkZi05ZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuiEe5AEeVQDby4iFHkM+lsoKGIPtn5OfrBJA3Fdghg/Mjhom0bmKXrqvhlUr
o2Bc6f1vRuuC5ynSTdA/3DHKVrb4f6BzIUa11YKLrlrShGF5FztDf3fDDDChGKid
2zFU3n4WfpniVgk7ZZQTQMrADbZBA1fPAwR/y7H9gry/A3AHYtbmS+v38RZ51bAv
9luJf4buPYqJJ25enE/3ki3elzEalK1ALoEbZnl11Sgv9lPxwACbC8VIMNXjMaiB
vRQM7hiRgwiH3qIKvEovtgXo4EV3WnZcFco2dE65r9drs9PVU+Yj6yFKG1C7R/Kf
OvTMU7cBNoDjhxMuIIZBxlt95wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKEC/deY
j718EqE6fcJ444gfiR7nMB8GA1UdIwQYMBaAFL4S0u70KhydwqVyBEbHAxbHwgZQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEE2Qi83NTI0NEI2MkEx
NjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhKM0NwWElFUnNjREZzZkNC
bEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZoTFM3dlFxSEozQ3BYSUVSc2NERnNmQ0JsQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEE2Qi83NTI0NEI2MkExNjMxMUU0Qjk2NkREMEZDNEY5QUUwMi92aExTN3ZRcUhK
M0NwWElFUnNjREZzZkNCbEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUWVfI0B/eU2+9d4BmZEW0QsLGeVlYQonk8LsAlnIONqkzH8OZW3BR+EfUZ7I
ancJQTleKGEqyYQebSdWiY/wxEBUZjEcS6XAcSh9Ijo3DMfDvfXwil7FjUaSIjq5
VEWD7Jdy+tzUsoGVJyrlHIsJ18PGoS8/Wz1RVasI4jhTXWOe5L+P7YdRqj8/JaAF
cx9gnUnnIuUu9xyw3PTuLSRZp0YjGWHP52MgpdSYRhZ6AkLj5SvdDR/pUpquukSi
ubnOWdQvioy67ljsWLolE5MTPBnvuKlWwa5TWPNBEdcebBX3hU7FToZtd2HT2asW
QCxJDDrGnuUfhtJU4UaVAto5UQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:12:56 2026 by rpki-client