
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier: aJpV7iHdUFr/H1pxgWJK7Nb5KcVF4Pkngr92iqUYWm0=
Subject key identifier: A3:D1:DE:7A:FB:EF:F4:5D:24:73:3F:C9:FF:8A:C4:5F:98:25:6F:87
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial: 0D33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number: 1603
Signing time: Thu 24 Sep 2026 18:09:09 +0000
Manifest this update: Thu 24 Sep 2026 18:09:08 +0000
Manifest next update: Thu 01 Oct 2026 18:09:08 +0000
Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: GLKpG9tIvA0S5D38NK3e1KbW52wKNb7JWFdgnbAUoD8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3379 (0xd33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Validity
Not Before: Sep 24 18:09:08 2026 GMT
Not After : Oct 1 18:09:08 2026 GMT
Subject: CN=6ab56744-444f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:d4:4c:55:fc:c9:f6:25:b9:0b:c3:79:37:
cc:82:16:a0:54:39:13:af:46:32:50:44:0e:1b:c7:
73:7e:93:41:fd:31:69:79:5d:9e:8d:56:e2:52:f5:
0a:19:d1:1e:fa:58:6e:76:f1:4b:15:3a:be:6a:49:
4a:e2:08:f9:c6:68:72:9e:90:b3:2a:ec:76:1c:d7:
01:45:90:37:98:e7:34:ae:84:ac:99:3e:23:4c:ec:
e2:2b:d0:41:ac:ac:4b:d5:5b:cc:a9:32:3b:61:10:
d3:1c:5b:0e:72:fa:f6:b2:38:b8:fa:ef:6b:ad:af:
24:f9:11:62:7a:12:6b:23:31:ef:cc:bd:74:53:9b:
0c:a9:72:28:d9:1e:72:54:0e:96:ab:dc:4f:71:b2:
7f:d8:e0:69:e2:6f:3a:11:e0:68:a5:71:74:ba:95:
39:3e:07:cc:3e:d4:02:52:70:a4:39:06:f5:55:6b:
21:47:b0:aa:a5:d1:43:58:37:a8:59:f1:04:6e:fa:
15:1f:1d:6e:f7:c3:ba:a9:ef:a1:ac:5d:a7:e6:dd:
6b:4d:59:ab:3c:7e:e2:45:c9:b5:29:91:0d:e3:73:
a8:f5:90:2d:b9:62:3a:8f:a1:23:2a:00:8b:25:24:
53:48:79:f6:c0:c6:aa:80:b0:51:b4:7b:67:5f:64:
c0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:DE:7A:FB:EF:F4:5D:24:73:3F:C9:FF:8A:C4:5F:98:25:6F:87
X509v3 Authority Key Identifier:
keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:a8:16:09:41:28:97:5b:3e:7b:cf:05:ab:79:70:24:96:f1:
b8:11:cf:76:9b:50:36:7e:f4:66:1e:4d:9d:02:16:1a:14:1e:
e5:81:78:6e:68:03:9d:69:1e:33:c9:7b:46:48:18:39:7a:8e:
9a:c6:16:31:13:2f:9e:8a:fb:46:70:83:83:61:02:85:a1:1e:
32:58:60:a6:b3:21:6c:cf:b9:f7:60:63:df:b1:1e:1a:3a:a0:
40:e9:bf:c3:ce:4a:8e:1f:e3:e8:76:cc:08:50:bd:f7:bd:15:
3e:47:f0:0f:42:df:35:a6:48:9d:4d:b9:cc:f6:d2:d0:97:67:
25:b4:0e:70:08:cc:53:58:ae:67:b0:8e:4b:49:94:a9:30:c9:
d0:da:e5:6b:01:73:95:96:be:c5:76:84:16:51:f1:d3:74:df:
07:29:71:da:8c:4d:7f:d6:85:c7:8b:66:b2:9b:6f:8a:ed:65:
d1:95:57:1d:2d:8a:97:9c:90:e3:da:e2:c9:6f:93:82:30:2d:
7a:03:7f:42:8f:85:9d:84:d6:b4:d7:3e:62:20:c0:db:00:d2:
56:7c:be:4b:59:16:4b:13:ca:3e:47:94:af:62:13:8c:32:24:
56:26:c6:d8:fc:2c:da:6f:87:fe:b5:95:e3:48:37:8b:05:1e:
65:46:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:33:04 2026 by rpki-client