
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: lsZ96Is1cLsRyaiDYlw1+PqLq+8OEQthatY8qSXV/Uk=
Subject key identifier: 7F:D9:39:F0:CE:4F:43:01:7E:31:2A:88:B2:9E:EB:A1:52:40:AA:EE
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 03B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 03A5
Signing time: Thu 23 Jul 2026 01:34:38 +0000
Manifest this update: Thu 23 Jul 2026 01:34:37 +0000
Manifest next update: Thu 30 Jul 2026 01:34:37 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: FkXZ0z7zd/fmVz+4Zcj+hNCN0u0L44+UYETXlbyMBlY=)
2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 945 (0x3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Jul 23 01:34:37 2026 GMT
Not After : Jul 30 01:34:37 2026 GMT
Subject: CN=6a616fad-0ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:53:55:ed:00:e2:d7:05:33:fa:9f:75:52:
62:34:eb:77:e4:fd:4a:27:7c:45:2b:ee:ef:d3:d9:
97:32:62:54:ff:ac:cc:d6:8c:b7:22:55:5e:bb:c1:
59:a3:0d:f3:b7:fd:14:a2:77:73:8f:16:43:9f:0c:
5e:ad:7c:e6:aa:40:17:06:5b:24:dd:f1:12:9f:44:
bc:14:f7:55:be:a3:cb:e2:30:eb:e6:4e:dd:eb:21:
70:62:ea:1e:5d:55:fb:c4:d6:fb:71:a9:c8:b5:0d:
37:e9:df:8f:e4:1a:b3:bd:b7:fe:a9:dc:3e:42:c2:
e0:13:8c:79:b7:9a:79:b3:cc:e1:12:c8:09:d6:8e:
38:1a:f1:54:e1:67:15:fa:1b:76:3c:4d:13:3d:98:
70:9c:40:6e:d3:dd:db:05:60:36:99:d6:94:57:4e:
87:b9:39:8d:54:cf:6f:4d:b1:34:3b:5c:e9:03:fc:
50:7c:86:0a:dd:8f:e5:69:bc:87:f8:24:dd:68:a7:
52:fd:34:f3:63:87:40:d9:61:70:0d:6d:7b:db:c4:
64:e1:5b:1d:bf:e6:fc:e3:03:47:6a:63:3b:de:29:
92:20:64:25:c4:d2:be:c8:9c:e4:d6:ca:9c:26:12:
f8:33:a5:89:89:81:13:02:d1:b7:b3:1d:3d:4c:e7:
86:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:39:F0:CE:4F:43:01:7E:31:2A:88:B2:9E:EB:A1:52:40:AA:EE
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:16:18:d3:7d:5d:38:6b:5e:19:ca:5b:8a:4d:32:01:6f:
68:17:e9:b1:f0:c2:c4:a7:45:35:65:9c:c1:8d:ba:82:ff:c6:
83:6d:aa:cb:bf:f7:73:ef:e9:7d:f3:b8:f8:3f:92:2e:48:fd:
34:cc:79:2c:9c:42:03:2a:04:18:c2:cd:8e:4b:3a:ae:54:de:
de:db:50:41:6b:e5:b8:c8:03:2d:8f:9b:75:79:0c:b3:ff:93:
5f:81:7a:44:da:94:eb:4d:c4:95:b8:71:b4:3f:cd:7f:eb:50:
ba:7e:fa:69:60:0c:b6:48:3b:e4:77:87:c8:48:06:c7:0c:ff:
54:1a:89:c9:43:94:cc:6d:6b:46:f5:ad:f9:0a:3d:55:4c:68:
2d:68:04:67:ee:b6:9f:f5:ec:f7:7e:81:7f:c6:d0:1d:e9:9a:
b7:fe:f2:83:bc:eb:a0:7e:db:3f:48:ef:49:c8:87:af:27:5a:
bd:2d:84:52:d6:a0:9b:bd:b4:af:73:64:2d:1f:bf:3d:27:e2:
88:95:2b:37:b2:41:dd:eb:90:46:5d:db:b0:db:16:e4:b7:24:
6d:95:ba:13:30:65:71:94:84:62:5b:37:a7:66:fd:0f:ab:84:
2f:a3:bb:ce:be:29:ed:8b:1d:14:69:df:4e:1f:6f:16:0f:ac:
3d:17:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:30 2026 by rpki-client