
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
File: vIx594SRodWqRdvkEzwMEPaTZK0.mft (raw, json)
Hash identifier: aoZ9mm0w4d80d2FemElZSRCbnJ7K++tKuXqVPo0ewY4=
Subject key identifier: 3F:38:40:2A:F0:A2:33:BC:4D:42:F1:C4:C8:55:AC:28:EF:C3:47:75
Authority key identifier: BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
Certificate issuer: /CN=A911DB66/serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
Manifest number: 0118
Signing time: Mon 27 Jul 2026 07:56:19 +0000
Manifest this update: Mon 27 Jul 2026 07:56:19 +0000
Manifest next update: Mon 03 Aug 2026 07:56:19 +0000
Files and hashes: 1: vIx594SRodWqRdvkEzwMEPaTZK0.crl (hash: 76++pmrGZslH0obpTnjOUFVOinqj+/nhbu2fqHtnmTA=)
2: DA673610F51D11EFAD3D042EC4F9AE02.roa (hash: 06Hho+RJykAUvzboSlu1tF6rcNxA0i0LVsGzl68LWWI=)
3: D973E6FEF51D11EFAD3D042EC4F9AE02.roa (hash: roA3vy8x+jf66csilJCthToT1WHohR3rxK/y2E1bU7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DB66, serialNumber=BC8C79F78491A1D5AA45DBE4133C0C10F69364AD
Validity
Not Before: Jul 27 07:56:19 2026 GMT
Not After : Aug 3 07:56:19 2026 GMT
Subject: CN=6a670f23-57db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:e9:10:46:e6:06:e1:73:b6:1b:77:58:df:
81:60:7d:df:dc:c3:d3:6e:d2:dc:e3:ce:47:a4:32:
18:dc:17:8d:9f:fe:78:c9:28:fa:55:da:14:93:65:
ad:ff:40:41:c4:6d:c9:ef:f8:40:c5:8a:59:d3:56:
1b:20:8a:fd:4a:ac:17:7b:ff:4c:2c:77:7f:46:2c:
5a:cc:68:ed:60:1d:8c:cf:72:55:d8:c3:e2:cf:e1:
a8:be:d3:df:29:25:b8:bb:53:ad:cf:5e:06:21:e0:
fe:42:f1:a7:99:c9:48:97:e5:98:3a:0c:90:d9:04:
29:2a:61:e1:a9:04:d2:24:8e:cc:61:56:23:99:a6:
ec:71:1c:85:8a:05:ef:7b:63:1a:8c:c0:7a:a1:52:
5e:80:05:d3:b2:e4:07:1e:87:e6:60:6a:0b:3e:88:
ad:7a:22:03:d3:d5:2a:5e:87:c5:66:88:f4:23:7b:
a4:58:0f:06:be:a6:9e:1f:c5:b8:cc:fb:92:55:f0:
4f:af:76:b9:3b:51:63:57:49:f1:b0:9f:67:28:57:
dc:08:f7:94:0f:89:71:9a:85:f2:7f:87:28:51:50:
bf:c3:7b:10:e5:6d:b5:2f:bc:e2:f1:f3:fe:fa:6c:
b4:29:92:58:07:0a:22:39:51:df:53:7a:c3:71:d5:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:38:40:2A:F0:A2:33:BC:4D:42:F1:C4:C8:55:AC:28:EF:C3:47:75
X509v3 Authority Key Identifier:
keyid:BC:8C:79:F7:84:91:A1:D5:AA:45:DB:E4:13:3C:0C:10:F6:93:64:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vIx594SRodWqRdvkEzwMEPaTZK0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DB66/77B6199CE09A11EFB63A8130C4F9AE02/vIx594SRodWqRdvkEzwMEPaTZK0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:e0:d2:ed:61:e7:80:e4:53:c0:14:98:a5:b8:b6:19:07:93:
1b:81:82:7a:e7:a1:ca:47:39:45:e4:52:fc:6f:16:a1:6a:b0:
6f:66:30:e1:41:46:18:13:42:fa:17:2e:ea:ae:70:9b:d1:29:
fa:c8:27:d2:33:d7:54:03:5a:87:3f:d0:99:68:82:1a:fa:ae:
2d:34:78:74:eb:59:19:c1:9e:3e:17:35:14:84:e9:3d:d7:e7:
c1:eb:c6:dd:95:46:18:c0:03:2c:0f:33:4e:aa:b5:de:a0:e8:
8d:5a:31:b3:61:15:90:2c:bf:5c:f6:51:83:75:ed:8c:f1:f9:
42:3b:f5:53:a3:eb:4e:86:55:02:5c:8b:7e:eb:49:70:55:bc:
02:cf:70:5f:83:e3:09:a2:06:cf:0e:6f:e5:a7:f0:33:e2:8d:
da:2f:bf:32:c2:0e:9a:f9:9a:73:45:7b:50:41:da:81:cb:72:
07:37:cd:31:8f:ef:3d:ad:6c:d4:29:2b:e8:75:ce:1e:43:17:
03:9d:68:bb:36:93:c5:84:76:92:e9:c7:86:d7:69:8e:f2:6b:
9b:e6:2c:43:1d:4f:18:79:86:ca:b0:f0:14:e7:91:7b:b5:e9:
cb:0f:e7:2e:c6:ff:74:66:f6:3a:9e:45:cc:bf:f1:5a:b3:01:
17:01:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:13:23 2026 by rpki-client