
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier: MbLm6YZOZ0VVjCCLJgV21oGoPImYjDse8xtxBLKnAeo=
Subject key identifier: 20:93:8E:0F:BC:5A:E1:F8:61:81:2C:64:0D:CC:0B:2D:90:EF:63:91
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number: 0216
Signing time: Wed 29 Jul 2026 04:17:37 +0000
Manifest this update: Wed 29 Jul 2026 04:17:36 +0000
Manifest next update: Wed 05 Aug 2026 04:17:36 +0000
Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: 2PIwskhczZggB+tb5hYrPAfPKhGXYM1TLdVWQhPoWaM=)
2: EE44E774314411EF956C0046C4F9AE02.roa (hash: jhzn7pm2Oogh8gj6C2Cv0eiikNgVIXN0z6pwnFp/58g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 04:17:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Jul 29 04:17:36 2026 GMT
Not After : Aug 5 04:17:36 2026 GMT
Subject: CN=6a697ee1-babd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:3c:1c:da:68:07:ce:9b:3c:81:2c:1f:da:
8e:25:3a:99:3a:9f:e4:a2:11:14:74:43:b8:82:7e:
d8:57:ef:ba:95:3b:5a:6d:da:f7:a8:ee:ce:f4:3d:
54:44:53:78:d5:97:ba:81:35:be:22:1b:63:ca:19:
a8:b8:e0:be:b4:c5:59:25:9c:8b:3a:14:fe:de:dd:
93:c7:d2:f1:d8:01:29:8c:3d:91:84:ef:7f:dc:ee:
4c:ce:cd:71:14:37:47:ea:f2:6f:2d:16:04:56:24:
b5:ab:28:9e:b4:e0:03:82:02:d8:ad:56:16:78:3a:
a4:b1:71:37:89:5f:0c:9c:b1:bc:21:7c:a7:9e:2c:
5b:1f:f1:56:2f:70:40:ed:1f:b3:9f:dc:1d:ce:95:
ad:1c:b9:25:77:2e:68:c4:43:92:3e:ae:6e:07:37:
6d:18:c2:78:5a:59:f3:75:d8:c1:23:53:6b:0e:aa:
e9:d5:06:e9:2f:bc:e3:83:85:44:7a:77:d2:f5:eb:
82:51:fe:6e:a5:b3:62:9f:b1:07:c9:85:cf:62:cd:
a8:4c:59:c7:05:b9:0c:3f:d1:dd:0d:d0:e3:81:19:
48:d9:5c:26:bb:77:25:da:95:24:6d:39:32:ed:66:
e6:75:8d:be:5c:98:30:20:bf:08:de:cf:3c:ef:70:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:93:8E:0F:BC:5A:E1:F8:61:81:2C:64:0D:CC:0B:2D:90:EF:63:91
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ca:72:e3:d8:ad:e8:28:c7:f9:d6:70:f2:28:f4:3f:6f:c2:
a2:13:29:d1:2f:26:37:79:23:d8:a8:88:0c:30:8a:d4:6f:a0:
88:ee:82:ee:bc:f1:87:2e:ed:ca:e6:92:32:48:7d:2e:0c:df:
a6:e0:6c:6c:e7:e6:5c:2d:ea:7f:2c:d7:cc:a2:99:d5:4e:77:
4b:50:47:f5:ca:56:c3:c2:e4:27:d5:99:0a:2b:16:1f:80:50:
f8:8e:bc:f5:a1:c5:65:44:ea:b0:af:b7:f7:63:95:aa:da:e0:
db:6a:dd:02:3d:b9:4b:90:65:95:89:96:69:28:f8:96:67:b4:
d2:74:09:4b:00:4b:ee:d0:90:df:08:44:f9:cd:5b:aa:cb:03:
b8:3f:65:72:79:01:24:38:9d:db:b5:78:d2:f6:a2:3e:14:c2:
0a:e9:ac:0a:c0:75:53:0e:27:8e:3a:8f:f4:bd:9e:8d:49:97:
15:62:b5:0a:e1:40:fc:c0:29:f5:49:2d:0b:0e:f1:2a:ce:e9:
af:6f:29:36:d8:fa:8c:b8:75:69:8a:fd:dd:e0:50:e5:5e:48:
d3:e5:4e:88:86:fc:47:8e:aa:a4:9e:fe:75:25:10:c9:3d:95:
8f:81:30:da:7c:b7:3c:21:fc:16:3d:4e:32:c4:c4:78:68:d1:
d9:a3:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:01:46 2026 by rpki-client