
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
File: vIYhQTCXFsDk3Dff_zPlqwxVStA.mft (raw, json)
Hash identifier: 8FQiSfPjr4sadwPkWuw7q/1wJFvTrLHwp+h8pkA5Qo4=
Subject key identifier: DD:D4:09:53:C2:33:50:75:A8:AB:A7:BA:6E:9E:B0:93:19:19:78:6E
Authority key identifier: BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
Certificate issuer: /CN=A911EA27/serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
Manifest number: 02CB
Signing time: Wed 29 Jul 2026 02:09:31 +0000
Manifest this update: Wed 29 Jul 2026 02:09:31 +0000
Manifest next update: Wed 05 Aug 2026 02:09:31 +0000
Files and hashes: 1: vIYhQTCXFsDk3Dff_zPlqwxVStA.crl (hash: pizzS2X7QOPameLYBtC3E41Bo45w4s0P4ZHU9Vyhld0=)
2: 3DE0E9065F0811EDB42DC97FC4F9AE02.roa (hash: NcHl9AJMYCFpUIi+eqsBTaf+YrjXdd3uK3fAP8cyrek=)
3: 3F2E65045F0811EDB42DC97FC4F9AE02.roa (hash: c+rgLPv7uhR0sgis57QLeIpTo3mpCxApvYMQGknvhqw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:09:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA27, serialNumber=BC862141309716C0E4DC37DFFF33E5AB0C554AD0
Validity
Not Before: Jul 29 02:09:31 2026 GMT
Not After : Aug 5 02:09:31 2026 GMT
Subject: CN=6a6960db-4d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:86:75:ad:5b:27:e3:a5:3c:2c:72:23:9b:31:
1d:30:07:68:1c:b1:25:8a:28:00:a7:4f:cf:79:04:
02:15:cc:fa:7e:6e:de:5d:e0:b5:5a:f5:39:d2:62:
2a:5c:47:bd:5b:59:c1:4c:42:13:6b:26:1f:21:1f:
aa:ee:96:92:49:95:11:ea:27:9e:d2:24:9f:f7:f6:
5d:7c:2f:0d:64:16:c2:4e:64:5e:9b:9a:99:c1:99:
e6:06:8d:10:67:2c:53:a6:41:1a:88:84:88:fa:5e:
8f:1e:80:09:aa:ca:29:19:99:e2:d6:23:1d:73:ca:
da:20:08:79:12:ab:cb:ff:b9:aa:06:61:b2:e6:79:
d7:88:0f:1d:df:c0:10:9e:73:7c:9a:6a:44:c9:74:
e6:1c:61:3e:f8:af:c6:b9:5c:39:7b:7f:e1:43:21:
45:c9:ff:48:c2:22:60:20:8d:b5:be:6f:20:67:59:
05:8c:fd:4b:30:31:61:b3:3b:ee:43:6f:88:3e:b6:
a2:22:85:97:26:c0:8d:4d:25:53:85:da:61:5a:3d:
ce:57:05:a4:56:93:09:23:9d:f4:ad:41:b0:b5:28:
d9:23:09:10:a2:d8:02:63:f4:ca:90:62:93:5c:a2:
f1:12:61:16:12:44:25:88:7b:ed:92:85:3e:17:91:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:09:53:C2:33:50:75:A8:AB:A7:BA:6E:9E:B0:93:19:19:78:6E
X509v3 Authority Key Identifier:
keyid:BC:86:21:41:30:97:16:C0:E4:DC:37:DF:FF:33:E5:AB:0C:55:4A:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYhQTCXFsDk3Dff_zPlqwxVStA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA27/6A8BD08C446F11ED9095D565C4F9AE02/vIYhQTCXFsDk3Dff_zPlqwxVStA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:1d:a3:c1:1e:8e:ab:81:d3:e2:63:cd:7d:60:31:ec:68:08:
40:95:be:80:46:d3:f6:91:c3:4c:00:b5:f8:da:6a:ac:3d:8e:
89:d7:3a:4d:c2:f3:2b:a2:0e:f3:d6:1c:d7:a4:29:d1:32:4a:
5b:60:21:79:4c:2e:cd:2f:a6:5a:ba:42:a7:5c:80:51:15:b6:
39:4e:3d:e5:2e:96:9f:32:ed:92:63:29:1b:fb:14:88:bf:5e:
e8:7f:1a:2d:c5:23:f6:1e:6e:e3:f8:ee:de:40:71:e4:c3:e3:
8f:76:11:96:7c:83:a0:dd:ae:83:f3:d5:51:50:ef:61:ab:d9:
90:f0:2f:eb:c3:76:80:73:aa:68:e5:25:0a:89:ff:87:97:94:
98:0f:94:a4:f9:66:02:59:a7:57:b8:ab:b6:1d:4a:02:37:34:
ca:06:74:d7:8e:d1:f6:a5:30:ce:6a:ec:a9:86:d5:ee:d3:7d:
40:fc:5d:8a:02:d5:89:da:d5:48:cc:8a:23:fd:8e:60:c7:e3:
80:48:d1:c2:94:15:04:00:86:49:b1:89:78:2c:92:e1:0b:49:
71:49:00:6e:ae:5b:d4:42:fc:19:a3:8f:bb:c3:f9:9b:17:4f:
0f:32:d7:d4:93:9a:b2:ed:89:e4:12:0b:b4:c8:72:23:65:03:
a7:be:22:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:01:33 2026 by rpki-client