
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: dM4i+FzPZY/xV/lEvHlDqGPqAfO4bJxXcaL4kGlFRto=
Subject key identifier: 86:F8:37:C1:A0:64:F4:66:EA:09:E4:10:63:22:33:81:EF:39:81:3D
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: C1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: BD
Signing time: Wed 13 May 2026 07:06:25 +0000
Manifest this update: Wed 13 May 2026 07:06:25 +0000
Manifest next update: Wed 20 May 2026 07:06:25 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: ftjsAE/ciZa6WIgSIvyA/q5ya6qNo9yYeT/H6IBwbCA=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: +1at33QnbgxnZAr+yaqQBfNmqk6yXdfwXvQNEtuPBPk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 193 (0xc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: May 13 07:06:25 2026 GMT
Not After : May 20 07:06:25 2026 GMT
Subject: CN=6a0422f1-6d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b2:76:11:05:58:ea:47:7c:6c:4d:28:a7:29:
38:46:33:5b:79:5c:37:a1:c6:4b:fc:b7:ed:94:98:
23:11:1e:75:3c:26:45:47:b8:fe:b2:fc:37:9e:b3:
f1:d2:b5:06:0a:a3:a9:19:ff:03:a1:ed:7b:1f:d8:
d2:3f:27:66:4b:2b:3e:73:3e:cd:93:41:bc:9b:8d:
ae:d9:a4:d2:87:30:c2:af:06:d0:d2:10:ea:9c:ca:
d0:99:8d:94:09:87:cc:88:a6:22:a0:ea:e7:24:4c:
08:d1:fa:d7:cd:38:6d:8e:d6:3a:70:4c:1f:87:e4:
3b:41:77:f5:7d:4f:1d:49:0f:fd:dd:c4:61:96:a8:
60:6a:62:cd:af:07:c4:3d:8d:61:c8:b7:7c:a9:1d:
96:64:d4:25:d9:f2:a1:2f:6d:92:5f:3d:bc:0e:82:
90:dc:12:5a:41:88:22:50:78:b0:70:54:0b:b9:a6:
3e:0b:77:ee:d1:2a:6d:b7:5a:4c:57:75:09:0a:dc:
e2:0d:80:65:2d:fc:01:b6:4d:bf:de:de:8b:d8:c8:
43:49:a7:fd:9d:d5:2c:9d:d0:87:ff:9f:17:4f:6d:
98:04:7a:9b:f4:b4:11:c9:91:58:99:15:ff:17:f6:
c5:e4:34:fb:22:a6:4c:5f:ec:f0:6b:89:c9:8a:b4:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F8:37:C1:A0:64:F4:66:EA:09:E4:10:63:22:33:81:EF:39:81:3D
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:62:79:44:2b:66:dd:7c:a2:14:76:0b:7f:c8:66:bb:96:
be:47:3f:c5:9a:f8:9d:c8:39:53:d5:30:a3:1d:0e:72:31:20:
d6:5e:b4:84:f0:c6:d3:68:69:35:f4:78:8b:28:2b:f3:d5:f8:
10:27:b1:7b:31:ca:90:6c:5f:5a:a4:e7:ce:77:ba:ba:29:c5:
6b:ce:28:5c:62:80:8d:bf:2a:b9:4f:0a:42:e4:7c:25:2c:49:
ca:5e:8d:12:e1:cf:d7:01:06:2c:4f:c1:bd:05:24:a9:fc:40:
3b:20:e9:73:cd:5d:2d:d8:62:74:7c:fc:a0:a9:fa:c7:a1:22:
ef:92:85:88:d9:ab:9f:b6:68:11:d7:1b:83:c9:f4:8f:99:01:
31:b0:36:a2:44:fb:e4:c4:ed:cb:df:d3:e8:aa:3d:37:b7:f4:
04:61:c7:d7:06:e0:e0:e1:86:cc:9c:f5:39:82:ee:5e:bf:66:
6f:11:51:69:62:5c:3e:37:7c:93:e4:8b:fb:44:98:a2:21:68:
b3:e8:bf:a6:5c:33:d3:c0:d0:ec:46:07:4c:d5:c1:e1:4d:e6:
c2:65:be:bd:98:e4:71:c9:27:7f:2f:1d:83:f4:56:e0:c4:8e:
6b:f4:be:2a:32:65:81:41:7a:80:80:4b:20:bd:b0:7c:1f:bc:
a0:54:b8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:22:22 2026 by rpki-client