
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: PySSyMMDH74LzaOmsO61m+5i3LMB5qjeuAK4cMPya8Y=
Subject key identifier: 7A:06:33:1E:D6:EF:F2:2D:ED:50:8A:E0:85:FE:FA:BB:A5:36:97:61
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 03D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 03C8
Signing time: Fri 25 Sep 2026 00:22:19 +0000
Manifest this update: Fri 25 Sep 2026 00:22:19 +0000
Manifest next update: Fri 02 Oct 2026 00:22:19 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: IQ173MIso2U/c/FKH+kvK62zzWWi/3GV5t5jdjtsifM=)
2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: AQR2AqdqPiSLigHSVYMCJz3V0m5doAkibsu5b67EN18=)
3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: tZN6ZhlBaJlSeqZvecE5/VxMhbLZpXKbOog3hKIU06c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 00:22:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 982 (0x3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Sep 25 00:22:19 2026 GMT
Not After : Oct 2 00:22:19 2026 GMT
Subject: CN=6ab5bebb-1c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:93:7c:eb:83:97:e6:34:e0:c2:2b:a7:65:53:
9d:1c:a1:e9:24:d2:57:3e:e7:81:c5:ea:6a:5e:b1:
f9:3b:e1:a5:9f:1b:6e:78:9e:ec:69:ee:fd:d6:5a:
2b:04:f4:13:45:dc:18:72:20:c4:f6:8c:a3:ce:4d:
8e:83:da:c4:d1:d3:fb:49:3c:66:f0:29:75:62:f0:
1a:12:21:b1:50:95:65:11:c1:6e:ac:de:5a:37:73:
07:bb:1e:65:5f:f4:6a:20:1a:ae:4e:8a:25:44:50:
f7:ad:ba:85:94:78:11:22:dc:ff:76:8a:eb:9e:42:
52:74:94:16:ae:8c:c7:4b:46:a7:af:f7:8f:f0:5a:
8f:47:3e:0b:1f:90:87:11:5d:e4:cf:bf:25:cb:2b:
87:37:f7:9b:70:8c:8d:8c:48:e2:79:93:bc:9e:21:
ca:16:af:05:d4:1e:53:8e:d1:13:fa:ee:c3:bd:87:
60:27:24:b7:31:20:c8:d8:51:20:fa:14:29:73:8e:
c6:87:d8:6b:96:9e:e2:af:b8:46:df:c6:08:9f:e8:
25:09:35:b7:dc:3c:e9:a7:36:15:f6:da:67:20:1a:
da:cf:a3:b6:66:59:d6:93:22:f4:2c:14:d8:92:da:
cd:5e:35:f9:ca:29:8e:e4:bc:3d:72:9a:03:53:68:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:06:33:1E:D6:EF:F2:2D:ED:50:8A:E0:85:FE:FA:BB:A5:36:97:61
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d7:97:74:fa:20:a7:48:c7:de:7f:b1:e4:54:6b:3e:ec:42:
30:30:d2:33:64:c6:24:96:ea:60:3a:ca:08:46:18:9e:68:ba:
08:28:c8:91:54:48:aa:88:64:a5:89:0a:ae:0a:d4:7a:51:d4:
04:47:ff:4f:fb:d1:6d:b1:74:92:50:75:c4:51:ed:a4:2a:74:
f8:81:68:f3:ba:ad:f5:88:fb:3d:fc:6c:e4:56:91:83:eb:be:
5a:59:9d:7d:6c:23:44:09:0d:b0:21:9d:e0:12:bf:58:13:07:
28:d3:20:1c:82:b2:53:d9:b3:10:70:4d:4c:52:36:17:7c:c2:
f6:32:a9:96:36:18:de:bb:7d:1e:31:38:65:bc:b8:b6:f7:6f:
15:01:c5:83:72:c9:07:42:6b:82:1d:0a:12:4a:2d:f8:0a:5f:
55:1a:c7:4b:88:df:a3:29:c9:90:32:a3:d6:fe:27:86:1a:92:
2f:df:94:05:aa:6f:b1:d2:d6:11:79:79:95:da:73:4e:5f:a9:
aa:73:59:fe:af:44:e8:f0:37:14:82:24:9b:b3:16:76:ce:59:
39:fd:ea:98:5d:17:e7:4e:66:e5:4a:45:71:ef:9e:31:5b:fd:
ad:ba:c9:f4:18:fe:74:56:16:aa:1a:0f:2e:ca:51:ac:62:76:
0e:63:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:19:49 2026 by rpki-client