
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
File: _vkUOxYWzaEVm1ns1eOZPpgmVP4.mft (raw, json)
Hash identifier: SjIBSAXeNwKVZ/bNv3TItejVUmxW2E/67JpqALQJn7Y=
Subject key identifier: 99:54:05:77:7D:0B:39:62:BE:B3:02:CE:26:0A:1C:FF:33:8B:A1:32
Authority key identifier: FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
Certificate issuer: /CN=A911FDBA/serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Certificate serial: 3601
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
Manifest number: 35C6
Signing time: Sun 20 Sep 2026 14:56:57 +0000
Manifest this update: Sun 20 Sep 2026 14:56:56 +0000
Manifest next update: Sun 27 Sep 2026 14:56:56 +0000
Files and hashes: 1: _vkUOxYWzaEVm1ns1eOZPpgmVP4.crl (hash: v0TkHxVaa8LUNhZ0/rPccsUfuGD02J6rK3FUOlaljfI=)
2: 800275E63FF911EB9BC3F51FC4F9AE02.roa (hash: CtU0kY5KWSLSlfwZkRorGoa4e7JgtnQg/6zuGIRKoKM=)
3: 57CA5DB02E2811EBB76B1E75C4F9AE02.roa (hash: CRBjNrDay0fKPUZhB/X7qmKie82SAt30Rk3lcvLRM5s=)
4: CD692AAEF65311EAA7E5A684C4F9AE02.roa (hash: id2mRaIy2h7nVg/sc/ikSWNLePF2FrfpCr04A5Jbft8=)
5: 931C5524175011EB8585CA60C4F9AE02.roa (hash: 5byMek5etqwTehUajH8Mj1zzTDL9e01ueYvXYYpN/aA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 14:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13825 (0x3601)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FDBA, serialNumber=FEF9143B1616CDA1159B59ECD5E3993E982654FE
Validity
Not Before: Sep 20 14:56:56 2026 GMT
Not After : Sep 27 14:56:56 2026 GMT
Subject: CN=6aaff439-41ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3d:a0:ca:08:d6:f1:b5:dc:12:e4:91:e0:ec:
17:bd:84:b2:b3:cf:f8:41:11:f6:50:da:4d:70:13:
2c:f0:b8:9f:90:b9:32:3a:e0:ae:cd:b8:3b:d6:85:
ea:d1:4e:32:0f:ca:7b:8c:76:9a:1c:e6:3d:68:81:
77:ec:3a:ee:1b:49:ad:66:d5:f6:13:e0:ee:b9:05:
ca:ec:0a:69:16:29:c7:08:f4:98:53:fb:c1:28:0b:
fb:b8:6f:ff:6c:83:97:c6:ed:98:96:92:f5:df:09:
43:e1:77:7b:b3:96:ae:04:ec:f9:c2:d5:17:79:e1:
74:62:34:15:50:fe:e7:cf:5a:0a:f2:10:84:63:53:
2f:04:42:fe:ee:66:a8:53:f3:05:87:38:47:9e:36:
2a:1a:fe:83:c0:be:68:2d:50:f6:32:5b:c9:75:af:
1e:29:02:38:31:62:3e:14:65:b5:0e:5b:3f:ec:9d:
d5:49:eb:0c:8b:27:ea:a7:98:d9:b6:82:ab:45:af:
1f:ff:bb:a5:05:bb:99:81:64:a2:a9:89:02:d4:c5:
44:40:fe:2e:78:3d:1a:74:f1:10:37:48:cb:ea:31:
17:e5:1a:cf:5b:44:18:c0:7d:81:e7:ee:21:ac:ec:
69:7e:c4:86:5f:ef:3f:48:94:ef:73:78:21:b8:a1:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:54:05:77:7D:0B:39:62:BE:B3:02:CE:26:0A:1C:FF:33:8B:A1:32
X509v3 Authority Key Identifier:
keyid:FE:F9:14:3B:16:16:CD:A1:15:9B:59:EC:D5:E3:99:3E:98:26:54:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FDBA/077851A41D9D11E2987CEE8B08B02CD2/_vkUOxYWzaEVm1ns1eOZPpgmVP4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:e4:f4:90:4d:ca:a1:4b:75:e3:14:7f:d3:eb:7a:09:5b:e1:
b4:9a:95:c0:95:72:ac:74:b2:cb:6d:e1:e0:48:d0:ee:cf:68:
18:ab:62:00:cb:77:0a:4b:49:79:d7:73:20:e2:f7:ba:c9:ae:
9e:6d:b1:07:2a:e9:13:b5:21:a4:14:71:08:c5:6d:11:4f:94:
19:a7:b2:b6:bf:35:ba:b0:25:2e:86:fa:be:6b:17:fa:ef:90:
cf:e8:dd:5a:24:96:15:9e:3f:db:f4:55:00:b9:44:83:c8:98:
28:f5:4e:bf:22:4e:80:0c:5a:72:c4:71:41:9a:26:a0:80:cd:
90:d0:22:4c:78:35:60:e9:d2:27:7e:11:32:46:53:a8:ab:e4:
1b:ee:4a:e1:6b:4b:41:59:8c:dd:c1:d0:68:d5:61:4e:3f:0c:
48:5b:bd:19:65:a6:70:37:bf:79:78:fb:d6:a8:3f:c0:d5:ea:
d4:bd:71:b8:5a:98:8b:5b:83:61:35:d2:5b:2a:11:36:ad:6c:
28:8e:9e:c3:26:d0:f7:d1:ec:df:36:fa:48:56:eb:0c:34:45:
a7:cc:3b:ef:0c:71:10:12:de:e1:34:91:f7:10:15:15:c8:b5:
57:a0:f6:29:45:a8:cf:39:2f:e2:da:c1:43:2d:18:41:a0:4d:
56:d3:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:55:14 2026 by rpki-client