
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: dHiLvOUrSfQ0jSj7bna6ZStOLV+/+J9F8jQyrBOBN7Q=
Subject key identifier: 91:D0:05:C2:B1:69:ED:11:49:D4:6F:8E:49:39:E8:EB:67:8B:7F:B9
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 038D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 0381
Signing time: Wed 13 May 2026 00:55:16 +0000
Manifest this update: Wed 13 May 2026 00:55:16 +0000
Manifest next update: Wed 20 May 2026 00:55:16 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: ZaNGzlwpmuFCK/3qKnsg+SnkqI9pvI0y5QLSiE3c/zk=)
2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 909 (0x38d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: May 13 00:55:16 2026 GMT
Not After : May 20 00:55:16 2026 GMT
Subject: CN=6a03cbf4-9dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:21:69:40:15:25:7f:2d:bd:d6:e4:07:c6:
f9:a3:48:62:3e:9c:61:01:3e:73:d7:7a:2d:9c:d8:
99:a8:40:b7:c3:ad:75:6b:79:22:f6:f3:19:c6:dd:
d9:9d:c5:06:f9:dc:aa:c0:ba:dc:aa:3f:2f:a8:ac:
35:6f:ed:b9:f9:4d:02:89:47:e2:22:dd:5a:d8:28:
5b:32:74:ba:c5:47:fb:32:7e:33:6d:79:c5:ca:19:
4a:b8:ca:5f:96:a8:30:cc:21:ae:04:21:48:6e:5e:
10:ba:5b:a9:92:56:f0:5a:f1:be:4a:92:c0:b5:2c:
c0:5a:00:df:94:f6:f6:0e:83:77:ef:e6:3f:71:f9:
cf:27:4b:cc:a3:4d:b7:a5:f8:b1:c3:ed:c3:47:84:
e1:53:0b:8d:57:12:4f:4c:44:7e:55:d0:15:e9:db:
d3:97:55:56:58:4c:33:03:13:14:ae:1e:28:8c:73:
5a:92:25:29:3f:3e:f7:28:7c:98:da:ea:63:7f:d2:
14:97:3e:4b:8f:82:cc:71:03:5e:7c:b5:02:fa:4c:
5f:47:a8:00:0c:ba:81:02:3c:86:f1:aa:7f:3a:9f:
83:59:74:c1:dc:43:49:78:f5:6d:6c:3d:d5:45:dc:
77:78:bd:63:de:92:10:33:b4:a2:18:6a:20:d3:bf:
53:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D0:05:C2:B1:69:ED:11:49:D4:6F:8E:49:39:E8:EB:67:8B:7F:B9
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:02:0c:48:fd:c3:cb:47:cc:8f:a1:32:88:b9:72:03:e2:ce:
6a:97:31:03:81:a3:08:7f:61:57:a1:e6:0e:5c:9e:f5:d0:ff:
47:98:e6:dd:de:68:42:62:ce:5b:21:72:cc:ce:9f:ec:3d:a1:
37:4a:32:45:5b:60:ef:ce:f7:f8:bb:56:3a:8b:bd:41:05:a1:
df:00:6a:05:cd:43:9b:46:8a:06:03:15:01:56:ea:76:3c:fd:
b6:6c:5c:de:97:18:a9:43:6c:6f:98:9c:e4:9e:84:da:95:85:
dd:b6:6b:3a:8a:00:42:1b:73:89:91:95:5b:7d:50:c3:cc:3d:
23:9a:1a:d7:3e:c9:2c:33:32:84:91:b7:d0:30:ec:5f:e0:aa:
24:f9:a5:cd:d8:27:81:b9:de:b4:e7:10:64:6a:e5:0c:f0:eb:
7c:2a:26:9f:f0:ba:89:4c:70:ec:33:b2:4a:69:6e:c8:3c:62:
8e:ea:38:70:ab:54:d2:3d:44:f4:da:23:da:ad:cd:c9:da:03:
dd:64:09:8b:1a:10:61:70:f6:32:a2:2f:d2:e0:88:5a:af:af:
3d:f9:b8:c3:6b:4d:cb:2a:70:79:69:a2:f0:cf:93:4c:e0:dc:
c4:dd:8a:dd:0b:5b:50:64:db:8c:55:9a:d9:16:ad:f1:a9:b2:
ea:f5:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:51:56 2026 by rpki-client