
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier: r9s/+Tw3PE9VMf/Ib1wsrUEMYgafWjv1vbUMmY5vgV8=
Subject key identifier: 0E:1C:E2:0A:B9:9F:C4:5F:07:58:F3:C7:4A:8E:FA:D5:08:EC:72:44
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: 5A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number: 57
Signing time: Mon 11 May 2026 08:21:44 +0000
Manifest this update: Mon 11 May 2026 08:21:43 +0000
Manifest next update: Mon 18 May 2026 08:21:43 +0000
Files and hashes: 1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: dLsP5KVpbuGvjDMs1/UUBxamAkSg02foaYxaVTRNLvA=)
2: 722C58FACE9311F0A2C11D25C4F9AE02.roa (hash: ERXxcYaD/BipGW6AIZDMmzRHcboCoePXi+aLABZ/mKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: May 11 08:21:43 2026 GMT
Not After : May 18 08:21:43 2026 GMT
Subject: CN=6a019197-7e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:91:ae:f0:46:5c:a3:8d:b7:2f:8c:68:8f:
94:e4:0e:d2:41:42:0a:f3:c8:ce:8f:a0:66:ad:c4:
c2:d9:95:db:42:92:7b:30:f9:98:66:23:c8:70:ae:
75:14:86:42:79:01:1d:39:90:40:cc:2f:1f:7b:ae:
86:c3:42:ae:b3:79:22:e2:65:16:d6:77:7d:00:4d:
12:ec:5a:5e:6c:68:05:8c:a3:87:57:27:cd:d1:8c:
bb:44:4d:d1:1c:b3:7b:b3:03:12:60:54:b8:4c:8c:
31:72:17:de:a5:12:7e:98:e9:7c:81:a9:46:5f:4f:
17:8e:06:60:94:dc:fd:37:98:b8:c5:36:91:e2:17:
9b:99:87:fb:5e:af:ee:7c:26:2b:0c:25:c0:87:05:
d3:1e:9a:e2:7e:a8:e2:fb:ae:e3:d9:20:0b:22:48:
0e:fc:31:57:3f:ed:18:32:3a:b8:12:a5:f8:1c:54:
2f:69:2c:86:38:c7:9f:af:cb:a7:2f:c2:3e:97:b7:
f5:26:b5:99:11:e7:1c:95:bc:25:b9:80:7e:8f:66:
44:d1:57:ca:60:50:20:c9:f9:cd:9f:fe:df:3c:51:
26:58:ac:e8:f9:04:eb:58:0b:0e:42:57:0a:28:fd:
33:26:9a:13:29:c0:ab:cc:83:db:ed:ee:75:97:12:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1C:E2:0A:B9:9F:C4:5F:07:58:F3:C7:4A:8E:FA:D5:08:EC:72:44
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:48:46:24:e9:8d:97:29:e9:e8:98:33:2b:61:a0:f1:fa:18:
ee:8c:e6:1c:c5:fe:bf:be:97:52:17:fd:00:ab:0b:eb:1c:60:
be:4d:7e:90:64:32:45:2f:9d:aa:df:08:b6:c5:6e:2c:1e:4b:
3e:44:26:b2:db:7b:eb:c0:80:24:bb:97:66:55:90:98:27:cd:
2f:10:44:bb:f4:54:2e:85:23:d9:c2:4b:0d:79:bd:11:9d:3c:
60:f0:50:8f:15:0c:a6:df:58:56:6b:ff:7b:77:36:a4:7e:33:
49:b5:e6:59:43:34:6a:38:93:74:86:e0:94:d9:eb:5c:a7:67:
c7:68:b0:0a:45:7f:0c:91:b3:db:16:94:e1:cd:5a:3c:ed:84:
51:c4:99:5a:42:63:6a:c3:5f:e0:30:55:a9:f1:15:db:de:ab:
5c:4d:5d:62:8c:3a:f4:35:0f:3b:1a:95:e4:81:79:69:ad:b8:
ec:8a:ce:ca:56:8b:ab:12:1b:29:24:57:c7:3c:66:88:9c:2d:
e4:ee:0d:23:c7:fd:7f:bf:0b:cf:00:1d:3f:cb:77:04:64:1b:
c9:aa:06:5c:b8:62:b9:2b:5d:82:08:7d:19:74:4a:b9:6b:12:
80:ed:60:e8:c7:14:bd:d7:4b:1c:3a:26:19:1c:c0:3f:ed:4f:
5c:b1:6d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:08:16 2026 by rpki-client