
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: 1J40T/DsmFp7iWIEHY/R7z+qPexmHsxPMtK54HFd0lE=
Subject key identifier: 8D:79:F6:03:D4:0A:5B:DE:0F:D1:BE:1B:C9:C3:CD:30:1C:C3:A0:FF
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: 0106
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: 0102
Signing time: Sun 27 Sep 2026 06:39:46 +0000
Manifest this update: Sun 27 Sep 2026 06:39:46 +0000
Manifest next update: Sun 04 Oct 2026 06:39:46 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: IuNhHu+TjU3q+zXGme/WND4ZBT0dJFr1i0l8NyyGKsU=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: +1at33QnbgxnZAr+yaqQBfNmqk6yXdfwXvQNEtuPBPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 02:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: Sep 27 06:39:46 2026 GMT
Not After : Oct 4 06:39:46 2026 GMT
Subject: CN=6ab8ba32-1c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:ad:b7:ea:8d:73:70:7a:0c:69:fc:76:35:
53:65:8e:97:85:c7:7b:c2:a2:68:28:57:c5:0c:c4:
88:d0:42:b3:f3:9f:e3:ea:41:17:08:c2:ca:61:4b:
27:58:a5:5e:59:71:93:4d:8c:a2:18:0e:94:51:77:
30:b1:7f:db:32:d9:c2:e2:7e:1d:4e:15:dc:50:7d:
40:33:ac:61:ac:84:0b:7c:a2:35:17:9a:cf:f2:c1:
e1:b3:3f:2a:b0:dc:fe:9f:4d:74:96:5c:5b:e8:a9:
24:25:c4:e0:08:43:9e:34:ed:60:46:d3:a7:13:2c:
19:c4:bf:9c:db:13:c2:f5:62:a7:c7:4f:f0:80:93:
e3:0a:92:1e:99:e5:1e:a1:77:8d:bf:5f:2f:9f:a3:
80:79:e3:6c:ab:11:39:b0:cd:11:48:b0:81:0a:d0:
a9:51:de:8b:88:43:7d:d1:be:d9:93:dc:88:7f:38:
38:49:73:64:3e:ab:2b:80:8f:f4:2d:d4:4c:4e:bb:
83:2a:7f:73:be:12:5a:bd:34:16:ca:57:10:eb:83:
9e:70:2a:48:22:f5:ba:22:72:46:81:90:46:1b:fe:
d6:8f:df:76:3e:ed:02:d5:dd:09:0a:2d:32:ad:48:
80:12:37:5d:50:98:6a:c3:6a:cc:63:42:c6:6d:01:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:79:F6:03:D4:0A:5B:DE:0F:D1:BE:1B:C9:C3:CD:30:1C:C3:A0:FF
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b2:cd:db:53:19:c0:4b:c7:dc:4c:fe:a0:e6:c7:a6:52:c4:70:
7f:f8:a8:25:6c:46:e6:a5:e9:f8:82:a0:8e:79:48:ab:38:8e:
b5:d6:6d:23:cf:59:82:32:31:40:0d:d3:d9:44:b2:53:df:0b:
80:d4:17:85:cb:b8:58:4b:95:72:e4:b1:0d:46:8d:5d:d0:32:
a9:3f:ee:fe:9e:00:f4:07:e6:22:fb:f2:87:7d:e5:93:ce:cf:
4a:5c:59:77:fb:c6:52:c8:88:41:40:f2:6f:a2:ae:aa:cf:3d:
1c:1c:21:07:07:da:0d:48:5a:f2:cc:ac:de:d1:65:f8:ea:b4:
54:47:3b:81:8d:43:9a:97:e9:46:60:17:ae:bc:53:a4:f9:72:
5d:80:71:f8:2c:35:7a:da:17:05:7d:d6:1c:f7:7e:4a:20:39:
49:bb:ee:97:b5:f5:9a:25:e0:46:4c:d2:52:63:a5:db:1b:de:
20:06:7c:6d:05:4f:98:a8:be:13:6d:b7:e1:ae:01:ad:54:88:
7b:9a:e4:5f:a8:8a:cf:ff:40:51:53:c9:f5:f2:7e:78:a2:7c:
95:f5:b5:70:ca:06:fa:1d:5a:d7:93:62:14:c0:e3:c9:6c:ed:
60:5c:79:3c:36:be:bd:93:38:10:0c:4c:8d:c0:54:81:1a:bf:
f7:c3:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:43:26 2026 by rpki-client