
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier: pr+2vRLwGjbeAvzDrsgbFEW0337TCt7/UASXU3fhv/k=
Subject key identifier: B1:F4:3A:7F:8C:60:A5:D2:91:37:17:54:12:D9:77:F0:FB:5D:15:15
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial: 0CED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number: 1576
Signing time: Tue 12 May 2026 18:19:22 +0000
Manifest this update: Tue 12 May 2026 18:19:21 +0000
Manifest next update: Tue 19 May 2026 18:19:21 +0000
Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: PzbsQfITfuygIgctHFCFxsQHMmMg6Kiu6nCKfMj5noI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3309 (0xced)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Validity
Not Before: May 12 18:19:21 2026 GMT
Not After : May 19 18:19:21 2026 GMT
Subject: CN=6a036f2a-abef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:de:d8:2a:5e:17:9f:47:94:d6:6c:f3:6e:5b:
f4:aa:29:8b:68:10:8d:10:19:4a:36:bd:0d:45:71:
43:94:9f:89:da:ed:32:b2:0d:4b:96:d4:c4:ad:de:
5d:2b:ac:bc:a2:8a:10:6d:5a:4f:ff:fb:14:d8:7a:
3a:af:c6:c8:b0:63:25:31:b7:d7:66:a3:9d:f1:9f:
d8:20:bc:66:6b:8a:e8:44:96:89:b4:f8:00:8d:a0:
9c:7e:63:74:fb:dd:68:22:8f:89:10:b5:40:c6:64:
c8:ab:e1:22:01:bf:de:a7:42:ac:d9:18:19:5a:04:
03:c7:e3:b9:93:33:42:af:62:59:3a:f7:38:00:c9:
82:26:c4:d6:02:f4:36:4a:8e:b6:15:ea:7d:80:b4:
62:dd:82:81:4d:ca:b1:19:3c:36:93:9c:e9:2d:68:
aa:bf:bd:f8:f5:e1:64:f7:b3:ec:db:6c:7a:04:bf:
27:87:f4:d4:b8:17:32:4d:04:b8:47:e5:d6:49:57:
93:2a:df:6f:91:57:16:48:01:1f:a5:4a:b8:6e:98:
02:b4:df:07:a2:53:d9:18:a3:70:bf:e0:f1:aa:d6:
67:c2:d3:d6:d9:0d:f4:20:16:3b:f2:66:69:66:1f:
2f:c0:68:2f:de:44:fc:49:df:77:59:75:56:0b:ba:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F4:3A:7F:8C:60:A5:D2:91:37:17:54:12:D9:77:F0:FB:5D:15:15
X509v3 Authority Key Identifier:
keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:67:a5:73:3f:fb:a0:39:75:59:39:19:60:5d:05:54:89:98:
72:a9:bb:11:f7:83:d5:f7:27:66:be:db:d8:fc:be:fb:d8:81:
8b:5b:cc:fe:b2:79:2c:02:a2:4b:a8:7e:a8:e5:bd:02:2c:1d:
a5:83:3e:85:fe:0e:8e:68:e8:c5:8a:ae:36:ab:27:e9:bc:67:
4b:91:55:df:65:f6:f1:f9:82:80:34:2e:fe:6d:0c:33:53:31:
6a:02:56:92:83:64:bf:3e:c1:98:59:19:f9:f6:33:75:8d:fc:
5d:6c:91:99:2d:4d:8b:4e:c7:9a:a3:f9:0a:5d:20:0a:48:03:
94:a9:92:c6:dd:4a:c6:c8:a7:71:97:ef:07:50:bc:e7:1d:51:
3b:4f:42:0f:d8:5e:f2:d7:86:ff:b6:44:86:b8:25:21:02:ab:
7c:1b:49:e9:d8:55:3d:da:1a:19:54:44:0a:bf:b1:d8:bb:b7:
3c:c7:45:a7:5e:2b:65:ba:06:70:1e:52:ba:cf:1b:87:20:2d:
95:54:4e:a3:ae:cd:c8:61:f6:59:07:97:cc:ff:fb:98:5f:53:
f9:41:5b:3f:70:81:c9:7e:e9:c5:c9:1b:f8:65:55:ba:b8:20:
a9:d6:4e:21:ea:ab:83:09:65:d2:6e:d5:fe:f6:be:2a:5a:e5:
22:fd:19:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy
QkNCNzdDMzkwHhcNMjYwNTEyMTgxOTIxWhcNMjYwNTE5MTgxOTIxWjAYMRYwFAYD
VQQDEw02YTAzNmYyYS1hYmVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA197YKl4Xn0eU1mzzblv0qimLaBCNEBlKNr0NRXFDlJ+J2u0ysg1LltTErd5d
K6y8oooQbVpP//sU2Ho6r8bIsGMlMbfXZqOd8Z/YILxma4roRJaJtPgAjaCcfmN0
+91oIo+JELVAxmTIq+EiAb/ep0Ks2RgZWgQDx+O5kzNCr2JZOvc4AMmCJsTWAvQ2
So62Fep9gLRi3YKBTcqxGTw2k5zpLWiqv7349eFk97Ps22x6BL8nh/TUuBcyTQS4
R+XWSVeTKt9vkVcWSAEfpUq4bpgCtN8HolPZGKNwv+DxqtZnwtPW2Q30IBY78mZp
Zh8vwGgv3kT8Sd93WXVWC7oTMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLH0On+M
YKXSkTcXVBLZd/D7XRUVMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2
QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB
bmJuTUJXRlBZOVlyeTNmRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApmelcz/7oDl1WTkZYF0FVImYcqm7EfeD1fcnZr7b2Py++9iBi1vM/rJ5LAKi
S6h+qOW9AiwdpYM+hf4OjmjoxYquNqsn6bxnS5FV32X28fmCgDQu/m0MM1MxagJW
koNkvz7BmFkZ+fYzdY38XWyRmS1Ni07HmqP5Cl0gCkgDlKmSxt1KxsincZfvB1C8
5x1RO09CD9he8teG/7ZEhrglIQKrfBtJ6dhVPdoaGVRECr+x2Lu3PMdFp14rZboG
cB5Sus8bhyAtlVROo67NyGH2WQeXzP/7mF9T+UFbP3CByX7pxckb+GVVurggqdZO
Ieqrgwll0m7V/va+KlrlIv0Zqw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:03:20 2026 by rpki-client