
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: YGj7r7PxfMtt5Sgr4fZQvqcEcvymH0FordX16rjbnFo=
Subject key identifier: 26:CF:0F:F7:EB:14:AB:F5:6D:28:E6:FC:6B:50:EA:53:30:20:02:AC
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 016C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0158
Signing time: Mon 27 Jul 2026 07:01:35 +0000
Manifest this update: Mon 27 Jul 2026 07:01:34 +0000
Manifest next update: Mon 03 Aug 2026 07:01:34 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: bq366bX1yv23pfMbRQQ5pvRzQCq37qNa/2LpUthQYgw=)
2: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
3: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: Jul 27 07:01:34 2026 GMT
Not After : Aug 3 07:01:34 2026 GMT
Subject: CN=6a67024f-dad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:31:85:d6:08:aa:2f:f6:43:d6:85:30:f6:
68:72:84:89:be:9c:cc:c3:11:ec:c4:12:6e:3c:0b:
6a:45:85:3b:6d:52:9e:cd:1c:a2:5a:e7:15:a2:29:
86:33:df:b1:d3:83:12:2b:6e:ef:19:59:29:2e:b8:
b0:23:8f:ed:99:12:c8:da:7a:d8:c1:4c:42:91:c4:
a5:8d:21:d2:59:2f:0d:7e:32:47:35:4b:a2:0e:c3:
70:cb:ce:5a:f9:f5:29:c8:5b:ef:e9:86:cb:e2:9f:
3e:8b:40:4c:82:8d:34:0f:db:c9:07:4d:e4:8d:35:
64:ea:ef:37:c7:6a:e3:b2:54:ee:d5:42:11:b9:87:
8e:43:c2:09:62:bc:a1:c1:63:8b:fb:a5:f2:e0:22:
84:cd:58:5a:45:ca:61:df:39:79:82:f6:8b:75:fd:
c8:50:88:97:96:56:8a:a4:c4:14:ec:a5:b1:3a:4d:
8f:eb:1f:f7:8d:f9:48:a1:ff:29:74:27:83:c1:4e:
ce:a6:ee:f4:7d:c9:b4:b4:de:e7:7f:91:9f:0f:f1:
eb:54:4b:3a:51:be:70:4d:3d:7b:44:7b:bd:a6:37:
65:88:b1:97:1b:fd:f7:47:49:b0:b9:ec:fc:4f:59:
88:6b:39:81:aa:99:57:0e:6b:1d:2d:d8:a5:9f:af:
6e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CF:0F:F7:EB:14:AB:F5:6D:28:E6:FC:6B:50:EA:53:30:20:02:AC
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b5:04:97:22:5d:e4:89:be:a6:e1:e6:e9:32:e5:1d:ad:df:
fe:1a:a3:7a:01:d1:11:3d:35:e2:99:52:8a:4e:c1:9b:7e:11:
0f:55:43:70:aa:bd:c4:c6:a9:07:1b:3a:da:23:9b:f8:1c:5a:
0d:af:73:d3:f5:61:2e:f8:28:c1:84:04:d6:f9:1e:e7:da:e1:
e4:10:b1:87:70:11:5b:7c:63:d7:18:54:d9:82:82:dd:77:da:
40:53:87:ef:da:f0:23:8b:27:d8:69:3f:55:44:a6:68:d0:ba:
06:fa:7a:bb:14:07:27:8f:75:d4:1c:66:b4:b6:87:04:82:e4:
ec:2e:e1:99:fd:19:ce:b8:42:29:41:85:c5:4c:04:fc:f9:bb:
d3:d1:c4:d2:36:8d:f3:b8:cf:cf:5a:33:4f:b9:4c:06:19:29:
f9:7a:ed:d1:e7:47:b3:d6:a2:b9:43:a9:42:8b:1a:36:04:bd:
64:b9:a0:16:9c:84:2a:33:64:6b:17:9e:90:65:6f:b7:dd:de:
f3:31:89:d2:af:44:74:69:7b:d8:6b:08:ab:4a:88:d7:3f:6d:
13:17:8b:c8:26:1a:ed:34:57:da:fd:5e:e3:a9:6a:f7:7d:e7:
ab:2c:39:9e:7d:d5:41:61:e9:b1:b2:e2:59:45:11:80:7d:f0:
da:4b:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:51:28 2026 by rpki-client