
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier: waVa9iPlS4a0r1JKtXFomgvFyAsSRVeIGTc5NObACh0=
Subject key identifier: 0E:3C:B8:CF:7D:B4:DF:1E:24:81:FB:10:4F:9E:36:DD:3D:B1:36:B6
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number: A0
Signing time: Fri 25 Sep 2026 07:28:15 +0000
Manifest this update: Fri 25 Sep 2026 07:28:15 +0000
Manifest next update: Fri 02 Oct 2026 07:28:15 +0000
Files and hashes: 1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: LaOBfXJ2Z8LJm+T4jdlEx4HfNmgKHFwkzPOTHV8jQEU=)
2: F30027F69C9011F1893698345711F970.roa (hash: D+j1sM6eCYVgN9wCNM0rcIbl0hAUaUHWwy+gzdAQe8o=)
3: A32543BA9BEB11F190BD09186411F970.roa (hash: 9WaHx+LUDXVMm3BI2K4FD2A1kDHdB0yt3Gwu4DhlqgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 07:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Sep 25 07:28:15 2026 GMT
Not After : Oct 2 07:28:15 2026 GMT
Subject: CN=6ab6228f-16b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:e0:82:d8:ba:1e:61:b2:8b:83:2d:b3:b2:
78:20:01:84:1f:c2:07:9b:56:c7:b9:f2:bc:4c:b0:
c1:44:17:4c:66:f1:00:4e:f0:02:04:53:7a:fd:fe:
b3:e1:13:95:56:3e:fe:79:18:17:6d:65:7e:6e:37:
c6:8b:55:ba:c5:49:f7:b2:7f:1c:a7:88:b0:96:77:
a4:cf:3a:09:bb:a1:c2:30:8d:68:17:96:4c:09:49:
53:20:54:44:da:4b:d8:9a:10:f0:86:ba:ba:89:cb:
a5:2b:6c:15:1f:16:c3:57:aa:22:a4:8a:f9:5c:90:
59:79:62:17:f8:66:d8:51:1c:61:17:9c:a7:c2:c8:
1c:cc:ea:1c:c0:6e:fb:0e:9e:3a:02:0c:d0:65:b1:
b8:d9:93:6a:72:4d:57:e2:55:43:52:0f:c5:83:b6:
bf:82:e1:a4:da:93:9e:fb:df:7a:1b:98:05:f4:21:
d6:46:e5:88:be:f7:c3:7f:5f:fb:3f:68:9d:b7:9a:
c3:61:2f:38:27:c5:77:ef:39:bd:45:10:10:bf:12:
7e:1d:17:a3:4e:81:38:94:0e:2e:6f:f4:80:80:23:
b2:22:38:15:2f:1d:e8:bb:00:14:17:c3:bc:3f:58:
da:ea:fc:8e:42:df:89:51:16:29:7e:8b:00:83:97:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3C:B8:CF:7D:B4:DF:1E:24:81:FB:10:4F:9E:36:DD:3D:B1:36:B6
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:43:04:c7:40:3e:aa:b8:73:95:2c:58:3a:71:9d:fd:ee:83:
58:94:fd:68:7e:dc:5f:da:08:66:4c:18:7b:16:cf:21:4a:d8:
e3:1d:ff:37:a7:68:cf:4d:3a:75:b8:e8:b0:16:2b:76:47:14:
52:82:8b:01:6b:99:ef:97:e2:c4:41:3e:29:dc:d8:d5:4d:33:
bd:1c:d6:4b:f0:18:54:98:e7:3f:60:a8:64:8d:ac:f5:74:a1:
6f:33:94:5a:25:a7:eb:ae:04:2c:90:fb:c1:1d:d7:6c:39:2b:
39:90:d4:7a:17:fa:28:f3:59:f3:b7:a8:9c:f7:78:35:6e:9d:
56:f4:38:ba:80:76:45:9d:c0:56:c8:83:a3:e3:b3:54:92:d3:
ea:a8:92:92:8b:80:18:6d:17:10:07:61:9e:2f:27:6b:e6:3b:
9f:ab:73:cc:f7:40:f5:f3:cc:52:ad:f5:f3:4c:9a:fe:06:42:
68:ae:5f:33:53:be:01:7c:76:b8:48:c0:16:70:9d:d3:a7:84:
f0:9b:21:b3:cf:01:18:c2:6d:84:21:d4:7a:30:b1:e8:ca:47:
80:d4:37:d0:71:a4:ac:f7:82:0f:f2:1e:ef:7a:63:f1:6a:4b:
c5:95:66:2a:ee:40:a3:28:a1:a6:ba:bb:74:25:b8:5c:03:df:
14:67:2f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:58:20 2026 by rpki-client