
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json)
Hash identifier: E4mECl+4tsYnoqEedJHkegOpL/Gaa3PV9ck4N9u/+og=
Subject key identifier: 7F:AE:CC:DB:6D:1D:EF:05:6D:C1:83:1A:43:78:0D:8E:C0:B7:0E:AD
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial: 0163
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
Manifest number: 0154
Signing time: Mon 21 Sep 2026 05:19:39 +0000
Manifest this update: Mon 21 Sep 2026 05:19:38 +0000
Manifest next update: Mon 28 Sep 2026 05:19:38 +0000
Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: FssnGamc7fxHes5zdiuvfIgYSglSXl0KM61bQniNVOY=)
2: 0D4DDB6CABFA11F1B7BA63886911F970.roa (hash: 33VriuErHaG0b/GKxxxWpnY6hl1I8dnm1gnLVL8F77U=)
3: 40C6FC26ABFA11F1BB867F9D6911F970.roa (hash: 2dqyZkRvza50oGysNw3pfGLRZQAvLoX2N8qymJzoCB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:19:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 355 (0x163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Validity
Not Before: Sep 21 05:19:38 2026 GMT
Not After : Sep 28 05:19:38 2026 GMT
Subject: CN=6ab0be6b-7903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:55:c9:b1:81:da:a7:31:12:d8:bc:87:aa:
02:6f:6a:94:c5:a2:25:f7:2e:d9:8c:2f:4c:1b:e3:
05:97:ba:3e:54:5a:62:f0:d6:9b:e3:8f:b3:52:fe:
cf:9a:54:c3:8e:18:de:85:7d:ef:2a:4f:fa:a3:58:
f7:01:18:09:f0:5a:db:30:87:a6:78:b2:9a:56:23:
f1:a1:1c:58:a9:07:8b:aa:a0:94:fd:66:4f:bf:62:
0f:64:db:6a:6c:dd:7d:99:85:79:83:43:a9:9c:d7:
55:fd:d3:fd:f8:8b:1e:be:ea:20:d2:71:7f:5b:d2:
3d:00:ba:07:33:e5:5d:ac:f0:2e:66:1d:7a:3a:7f:
bf:46:47:e3:78:8e:79:2e:ae:82:40:b5:61:6d:90:
75:e9:9d:c8:ca:9c:5e:03:19:fc:0a:86:84:dc:92:
a3:f7:c9:d3:ea:ea:32:5a:df:2e:22:f6:0e:81:52:
04:4e:2e:d7:8d:52:17:1c:0c:65:16:1a:71:bf:cd:
0c:b9:f0:cf:ae:8a:7e:35:eb:c6:b7:4f:ae:1b:8d:
c9:1a:d3:42:b2:95:63:6a:fc:c6:79:34:5e:bf:b6:
ea:14:74:ae:c5:6e:ae:f4:a0:52:a1:21:0b:31:99:
3f:8e:14:5a:98:31:90:07:53:d3:6a:29:e4:b3:13:
18:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AE:CC:DB:6D:1D:EF:05:6D:C1:83:1A:43:78:0D:8E:C0:B7:0E:AD
X509v3 Authority Key Identifier:
keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
da:75:65:03:ab:6f:e2:e6:61:3d:69:14:10:6c:e4:c5:4c:4f:
11:ed:d3:62:87:91:d5:5c:25:b1:c1:35:16:64:ec:a9:60:fd:
f3:c7:ba:fd:f1:fb:f1:3d:d2:cd:25:48:ae:62:33:c4:b5:5e:
ac:68:4d:9b:15:8c:2d:bd:32:9a:bc:05:ee:56:dc:74:2a:52:
4f:0f:48:1d:99:1b:71:6c:a8:d9:bf:f6:44:a7:85:f2:c3:1b:
d5:9d:78:0c:80:a3:47:68:2e:f5:98:ea:d7:e3:7a:70:2b:fa:
fe:a9:88:16:a8:6b:4b:ef:d0:a4:dd:45:60:56:0b:ff:e0:3a:
1a:c8:21:ac:bf:f2:e5:55:0c:25:9b:9d:da:37:a5:34:da:df:
2b:50:f5:86:bf:1a:a9:d8:07:89:1d:74:bb:07:2b:a6:08:09:
5f:d1:77:1f:5c:97:6d:c2:9e:1a:10:8a:59:d6:bc:ba:a9:74:
04:cd:73:3a:4c:46:5b:65:93:fe:8a:df:27:2e:ad:1f:d5:26:
c3:e7:01:25:39:31:00:91:49:2c:60:26:bb:ee:9f:97:58:fc:
f1:fd:c5:97:44:a6:2f:a8:bd:5c:f2:1c:81:04:fc:57:3b:28:
3a:e0:56:98:53:8c:d0:42:45:08:6e:35:11:b8:e1:93:2a:66:
67:e9:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:23:26 2026 by rpki-client