
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: z3Tes46RSj4jz+DZvQbQg4q+y3W18wcddDmINQC0ZPM=
Subject key identifier: 1C:8D:D8:D0:D5:CF:34:CE:8A:90:84:B4:C8:2C:B5:80:86:35:21:BC
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: A2
Signing time: Wed 25 Mar 2026 06:29:58 +0000
Manifest this update: Wed 25 Mar 2026 06:29:57 +0000
Manifest next update: Wed 01 Apr 2026 06:29:57 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: 4MEcfUOG7/u97yP2Rep9TJOf2iOtf0UAirzaAIuUl8I=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: HtaHQbR4Ww0fWPU3P7Hu/E8dYBtv4LHASdo5cN8a0Fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: Mar 25 06:29:57 2026 GMT
Not After : Apr 1 06:29:57 2026 GMT
Subject: CN=69c380e6-2a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ac:ce:7c:60:f7:75:2d:5a:d7:2f:b0:87:7c:
6d:b2:f7:47:a6:73:d8:d0:8d:f1:0c:ad:43:40:47:
21:0c:f5:c8:ab:0a:46:29:ba:a3:b7:52:1f:79:70:
8d:52:9f:0c:ed:ac:31:fb:2b:d4:84:10:88:73:1a:
c0:63:16:32:4f:22:fe:ba:60:61:ec:5e:62:ed:c3:
57:6b:35:55:07:94:bb:83:fb:ce:a8:9e:1d:e0:68:
56:51:be:88:1b:f3:32:03:79:32:38:b3:07:33:8e:
c8:06:02:e6:e1:58:1c:5f:51:c4:f8:ce:41:07:ee:
b5:db:c0:38:b6:b6:8a:ec:58:4b:51:61:2f:8b:65:
12:9e:e8:e5:c1:4b:9e:7f:40:91:08:bf:10:3f:9a:
8e:4d:4c:34:a0:a0:9d:00:53:d0:38:8b:49:3f:c2:
6c:35:9a:95:df:27:31:9a:6e:10:7b:b3:6a:8a:ec:
a2:1b:47:cf:44:18:21:c4:22:12:da:2f:bc:42:c0:
9b:e5:30:d4:80:25:8f:ab:b9:14:b1:37:c4:28:3e:
b3:74:25:f3:ea:d5:e8:67:d8:bc:50:ed:33:13:bc:
e7:4f:33:47:07:41:61:f8:34:d8:b5:b6:fa:dc:48:
0a:37:24:ba:08:d6:bd:f2:e8:8c:4d:b0:d3:6b:b0:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8D:D8:D0:D5:CF:34:CE:8A:90:84:B4:C8:2C:B5:80:86:35:21:BC
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:8e:a6:3c:9d:18:eb:09:87:70:bc:5c:34:83:76:77:e6:
87:b4:16:1a:d4:be:a2:97:a5:de:d2:06:28:5b:8d:c7:39:12:
18:1a:b5:1a:4c:86:ac:7a:00:d4:45:e0:e5:c8:e5:a2:3a:bd:
80:bb:9e:46:6a:b7:c6:9a:10:e9:ef:1f:53:2b:52:59:fb:d1:
69:4e:9b:8e:7b:30:76:15:26:16:84:29:a2:1d:c8:c5:24:e4:
82:4f:2b:31:a3:2a:65:f9:67:17:26:64:5b:de:4d:99:f8:b4:
d4:ef:30:87:5d:f0:51:a1:28:7f:23:7f:fb:25:2d:f4:f5:9a:
91:31:36:f8:f2:c6:66:48:5d:3e:15:d3:c8:84:14:1c:52:4a:
9d:89:92:06:e0:f9:db:be:b0:39:25:72:e3:ed:d3:b9:05:28:
aa:ea:78:ab:e9:50:7f:a7:93:f0:78:17:5c:11:59:45:77:b7:
cc:91:d3:3d:3b:1f:7d:65:3e:95:08:e5:13:c9:c3:a0:7c:1a:
4c:f9:8a:80:84:92:c1:05:20:d5:1b:31:e3:e9:6b:e1:bc:f4:
73:35:ab:ca:1c:70:7f:70:2d:19:ab:dc:76:57:71:14:5d:49:
79:a0:15:ca:f8:a9:2f:f9:70:5f:27:32:0e:af:cb:80:8f:b1:
3b:58:9b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:06 2026 by rpki-client