
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: k7ChOqeLKq/PWEV2JB9WI0SSwD5DxO4IijwUzb7OWdg=
Subject key identifier: AF:A4:F9:98:93:8C:CA:C0:9D:C6:1E:4F:0D:E7:71:A7:E9:43:8F:5A
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: E0
Signing time: Thu 23 Jul 2026 08:18:36 +0000
Manifest this update: Thu 23 Jul 2026 08:18:35 +0000
Manifest next update: Thu 30 Jul 2026 08:18:35 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: 9F9G+Ow5arkd6HD+eVpKeaAMwmHlCVZqTFbtmeAyMcA=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: +1at33QnbgxnZAr+yaqQBfNmqk6yXdfwXvQNEtuPBPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:18:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: Jul 23 08:18:35 2026 GMT
Not After : Jul 30 08:18:35 2026 GMT
Subject: CN=6a61ce5b-52e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:77:d2:a1:6a:66:0e:7d:49:56:bc:a1:00:
25:27:db:90:35:5e:bc:2b:29:12:ca:9d:d1:c0:80:
8d:28:d8:b8:53:29:56:4b:f4:fa:16:58:15:36:7e:
dd:23:cd:26:78:9b:de:28:30:f7:c0:55:82:0b:3e:
cc:ca:8d:91:5e:a1:23:e2:78:c3:1c:5f:66:06:ef:
2a:7f:bf:f9:a4:14:ae:86:34:59:7c:07:75:1c:fe:
ef:b1:7b:48:d0:de:43:a5:11:d8:8c:ec:9c:74:34:
40:33:e1:ff:00:67:d0:8d:bf:b0:97:97:24:46:fe:
97:be:c0:e3:ea:9c:29:b3:43:68:31:c3:be:71:08:
2c:22:0f:c1:f1:38:b9:f4:34:f2:e0:a1:62:69:64:
63:d7:74:88:b4:ff:54:a7:55:29:1d:75:14:2f:31:
b6:0b:e4:b5:f5:8d:6a:75:3a:12:8d:d5:d5:a6:93:
ab:4e:a4:e4:39:ba:05:79:9a:10:3c:4a:a8:a1:93:
9d:51:00:85:72:a8:f0:2a:cc:e2:28:98:64:4c:ee:
93:5a:7f:74:cb:3d:cd:69:93:26:16:74:30:c7:09:
1e:75:58:2e:63:52:3b:28:94:5f:cc:84:d7:de:47:
87:80:9a:41:2f:07:31:0a:e1:88:71:0e:e2:98:54:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:F9:98:93:8C:CA:C0:9D:C6:1E:4F:0D:E7:71:A7:E9:43:8F:5A
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c9:c8:4f:54:0c:87:48:8d:0b:d8:5c:3a:d8:fe:dc:d9:f8:
5b:fc:8f:a1:b2:2c:bf:94:84:93:ea:bb:bc:33:fe:4f:9f:4d:
8e:17:21:46:b6:c3:fe:dd:60:f7:70:41:71:b8:a6:eb:2c:ad:
47:4e:f4:51:99:88:ff:c0:b0:12:3b:19:8c:5f:94:60:5a:0b:
b5:ef:46:8a:f0:73:aa:50:23:d3:4d:64:a5:02:c2:75:56:99:
a0:33:98:58:99:ca:32:10:96:05:25:59:2c:3f:d1:95:eb:cc:
10:d2:d4:2b:52:15:41:c4:70:7b:06:d9:0f:1f:eb:92:20:a5:
aa:91:3d:93:44:79:12:fb:66:dc:f8:1d:b4:94:88:6f:63:c5:
4c:dc:e7:1c:83:22:5c:a1:77:b5:27:5b:93:3f:27:b9:5f:77:
6e:75:b2:10:4a:55:8c:07:48:20:9e:1d:ad:38:5c:85:00:3f:
d7:69:f5:91:c1:47:b4:15:36:a0:32:38:f6:20:b0:4d:6e:fc:
12:bc:70:b7:2b:c0:bb:4b:a6:1f:63:bb:5a:ea:3b:69:5e:73:
b4:ad:80:a4:5b:8d:a2:4f:53:20:13:ed:5f:87:1b:48:2f:47:
1a:cc:0c:96:e5:23:f9:60:5b:97:3e:59:bd:d7:af:f4:f1:31:
b1:1a:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:41 2026 by rpki-client