
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
File: VTcR8u_pSETEP3dtRRAYwGSXLJo.mft (raw, json)
Hash identifier: r8FSbf8Z4ctYqguVCi6QExcyFsK1oWG8WKmM1kZ4TSg=
Subject key identifier: B6:E3:6F:6C:91:C9:32:DB:42:18:56:53:56:98:7D:A3:A5:6A:C2:94
Authority key identifier: 55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A
Certificate issuer: /CN=A911AAB5/serialNumber=553711F2EFE94844C43F776D451018C064972C9A
Certificate serial: 0CF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
Manifest number: 0CEA
Signing time: Tue 28 Jul 2026 18:35:09 +0000
Manifest this update: Tue 28 Jul 2026 18:35:08 +0000
Manifest next update: Tue 04 Aug 2026 18:35:08 +0000
Files and hashes: 1: VTcR8u_pSETEP3dtRRAYwGSXLJo.crl (hash: 7Ur//aiU42FgLRqzc/iAO9CTeHwyE1QzSdNi1wwaMM8=)
2: 65EE26547A8711ECBA5D244DC4F9AE02.roa (hash: Fc0EoN7FBo1h+1UnkvkkpWbLnVe4ZgVu2lP55njdUjY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl
rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3319 (0xcf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AAB5, serialNumber=553711F2EFE94844C43F776D451018C064972C9A
Validity
Not Before: Jul 28 18:35:08 2026 GMT
Not After : Aug 4 18:35:08 2026 GMT
Subject: CN=6a68f65d-9eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:7f:3d:e3:ab:cc:0d:b4:a8:20:ff:ca:a6:
76:0f:30:da:9c:2a:16:c7:ef:d0:e8:4e:e9:e2:da:
8c:ad:69:67:1a:25:01:14:a8:48:a3:6d:7e:54:b8:
cf:ec:03:08:a7:33:27:7b:54:31:e8:ba:0a:06:cb:
01:e0:8d:0b:87:bb:ab:75:04:28:2c:a5:eb:41:04:
e1:2b:7a:cf:5c:e4:08:ef:0d:84:b3:43:09:96:a1:
da:bb:f4:07:f9:9d:2b:4c:40:61:49:39:e4:ea:f5:
96:7d:76:76:48:8f:2d:8a:36:92:bc:92:f9:a9:db:
1b:f4:e4:54:d1:c1:8e:1e:d9:a0:d7:ae:34:33:c7:
62:f8:81:07:e4:7a:99:d5:f9:10:79:bc:9a:ba:ea:
08:fb:f1:4c:16:c0:45:67:d7:cb:51:3e:77:69:54:
88:0c:7a:77:fe:9e:f3:09:52:c2:a5:24:e6:e6:29:
58:ff:d7:2d:fd:da:de:b9:ca:ce:d5:ba:7c:1f:70:
ce:32:4a:e9:8c:c1:38:e5:ed:ac:52:4f:b2:0b:7f:
02:3f:88:82:74:fc:54:0e:29:90:02:34:bc:0e:3f:
9f:e1:23:ce:f0:7f:d1:e9:5b:b8:8e:27:8a:e0:76:
51:55:09:63:94:df:3f:62:50:3b:7d:58:92:bb:a1:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:6F:6C:91:C9:32:DB:42:18:56:53:56:98:7D:A3:A5:6A:C2:94
X509v3 Authority Key Identifier:
keyid:55:37:11:F2:EF:E9:48:44:C4:3F:77:6D:45:10:18:C0:64:97:2C:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTcR8u_pSETEP3dtRRAYwGSXLJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AAB5/A3BDE7A010F611EA9103B61BC4F9AE02/VTcR8u_pSETEP3dtRRAYwGSXLJo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:8c:d0:77:68:66:6c:d1:2a:5c:d8:c7:fe:35:9c:de:63:35:
ea:e8:81:dd:6c:86:2a:a0:2f:f8:99:59:e7:ec:9e:ba:61:d8:
6d:9b:af:a3:53:e2:fa:0c:b3:79:b8:34:d8:db:75:3e:0a:e4:
c9:28:77:d5:61:12:c8:8d:1c:b3:f1:e9:1c:a1:d6:92:44:76:
dd:c7:d1:ed:d5:16:41:d0:a6:f9:ff:9e:1c:b7:48:53:d9:83:
e7:97:2b:de:ce:72:5c:4f:04:a6:41:c1:39:80:6e:99:11:e6:
fd:bb:f6:1c:33:cd:06:da:27:01:8d:ca:76:52:56:77:b2:17:
e3:64:5d:22:fe:79:b9:9a:2b:85:c6:47:fb:ed:41:91:94:21:
4e:24:04:72:76:fa:2b:46:74:c4:f8:14:6f:7f:f0:98:f4:8c:
ba:76:05:e9:b9:76:e5:46:09:b7:26:92:a8:44:36:1a:ee:ac:
c3:f7:e9:5d:0b:94:c4:cc:15:fe:13:c7:d0:df:18:97:0d:0e:
46:49:a1:f4:bc:b7:a1:36:27:91:e3:7d:56:e7:f7:1f:96:fe:
99:97:7f:bf:37:4c:9d:57:1d:23:7e:c2:97:19:3e:de:6c:dc:
55:c9:89:9e:b7:c3:ba:bb:e0:55:0e:9b:72:5e:1c:9d:9e:6f:
8d:86:e4:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFBQjUxMTAvBgNVBAUTKDU1MzcxMUYyRUZFOTQ4NDRDNDNGNzc2RDQ1MTAxOEMw
NjQ5NzJDOUEwHhcNMjYwNzI4MTgzNTA4WhcNMjYwODA0MTgzNTA4WjAYMRYwFAYD
VQQDEw02YTY4ZjY1ZC05ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt8R/PeOrzA20qCD/yqZ2DzDanCoWx+/Q6E7p4tqMrWlnGiUBFKhIo21+VLjP
7AMIpzMne1Qx6LoKBssB4I0Lh7urdQQoLKXrQQThK3rPXOQI7w2Es0MJlqHau/QH
+Z0rTEBhSTnk6vWWfXZ2SI8tijaSvJL5qdsb9ORU0cGOHtmg1640M8di+IEH5HqZ
1fkQebyauuoI+/FMFsBFZ9fLUT53aVSIDHp3/p7zCVLCpSTm5ilY/9ct/dreucrO
1bp8H3DOMkrpjME45e2sUk+yC38CP4iCdPxUDimQAjS8Dj+f4SPO8H/R6Vu4jieK
4HZRVQljlN8/YlA7fViSu6H0TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbjb2yR
yTLbQhhWU1aYfaOlasKUMB8GA1UdIwQYMBaAFFU3EfLv6UhExD93bUUQGMBklyya
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUFCNS9BM0JERTdBMDEw
RjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNFVEVQM2R0UlJBWXdHU1hM
Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZUY1I4dV9wU0VURVAzZHRSUkFZd0dTWExKby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QUFCNS9BM0JERTdBMDEwRjYxMUVBOTEwM0I2MUJDNEY5QUUwMi9WVGNSOHVfcFNF
VEVQM2R0UlJBWXdHU1hMSm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAY4zQd2hmbNEqXNjH/jWc3mM16uiB3WyGKqAv+JlZ5+yeumHYbZuvo1Pi+gyz
ebg02Nt1PgrkySh31WESyI0cs/HpHKHWkkR23cfR7dUWQdCm+f+eHLdIU9mD55cr
3s5yXE8EpkHBOYBumRHm/bv2HDPNBtonAY3KdlJWd7IX42RdIv55uZorhcZH++1B
kZQhTiQEcnb6K0Z0xPgUb3/wmPSMunYF6bl25UYJtyaSqEQ2Gu6sw/fpXQuUxMwV
/hPH0N8Ylw0ORkmh9Ly3oTYnkeN9Vuf3H5b+mZd/vzdMnVcdI37Clxk+3mzcVcmJ
nrfDurvgVQ6bcl4cnZ5vjYbklw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:39 2026 by rpki-client