
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
File: vYeFXLaB4jNZv-waNPGZK2ceXu4.mft (raw, json)
Hash identifier: wCs9x8nYQCHW760tgyVpJiNQGf3zclhiSZGSpjdec5Q=
Subject key identifier: 33:01:85:38:04:CB:7B:CA:7F:7D:57:32:48:AE:5E:5B:A4:19:C9:B4
Authority key identifier: BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
Certificate issuer: /CN=A9127726/serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Certificate serial: 35F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
Manifest number: 35B1
Signing time: Sun 20 Sep 2026 15:10:57 +0000
Manifest this update: Sun 20 Sep 2026 15:10:57 +0000
Manifest next update: Sun 27 Sep 2026 15:10:57 +0000
Files and hashes: 1: vYeFXLaB4jNZv-waNPGZK2ceXu4.crl (hash: VWaXFDur8jnryO6FeV2sbRP3N5nU3S8l6ECt+a5PeRo=)
2: 264A19E27A3D11E99D212E62C4F9AE02.roa (hash: DeSKNH4HScDLuICfGiae128aAotHyUD/RwFhRy7k38Q=)
3: AF976FA2023311ED945EBE12C4F9AE02.roa (hash: tsITTRTvL3ZpZTiMW9Pvk38F1H2gtAvA9bKyZtXQM/k=)
4: 9D03023EA86E11EDABA1FA2AC4F9AE02.roa (hash: 7Y4TL4USxn/GFFX1wZbIuzSEbnQasIZPWs9yWSTrx/k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13815 (0x35f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9127726, serialNumber=BD87855CB681E23359BFEC1A34F1992B671E5EEE
Validity
Not Before: Sep 20 15:10:57 2026 GMT
Not After : Sep 27 15:10:57 2026 GMT
Subject: CN=6aaff781-42b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:79:92:2e:17:0a:2f:b0:d3:f6:11:74:bd:
b2:ec:02:e9:a4:15:c9:53:54:1c:ca:09:e4:84:be:
65:56:56:b2:c5:dc:fc:88:d2:fc:81:4d:88:a0:d8:
a1:5b:40:d5:f8:11:6b:88:3d:15:1f:69:e7:20:55:
99:ac:45:c8:4b:80:4b:de:7c:a7:39:eb:0b:6b:dc:
78:8d:75:78:90:15:b7:d3:2a:9b:3f:e6:30:df:c5:
2a:27:73:6a:10:d2:74:1f:09:03:15:ec:2c:b3:51:
37:86:bb:f5:d1:18:51:34:c5:67:5f:9e:04:ca:68:
92:d4:ce:43:ae:91:38:5b:da:ec:aa:1b:6d:52:45:
5a:c7:c4:26:a4:50:c6:81:6a:48:5a:1a:73:8c:ff:
6a:74:09:cc:e3:ac:91:ee:47:7d:5e:ea:ed:9b:11:
fc:57:5f:b3:87:46:ed:8d:3c:2d:ab:49:dc:c8:7e:
dd:a0:77:35:b5:9e:09:34:78:76:a5:f7:9a:43:ef:
49:0a:30:55:ea:41:59:9c:53:24:b8:2d:85:6e:ee:
2b:a4:a8:07:71:71:f3:7e:03:ea:00:1a:39:99:c1:
33:a3:3b:55:f3:2c:b9:41:12:ca:56:59:71:f5:55:
b3:d4:d0:04:82:58:1d:5f:b9:80:73:1a:99:3e:07:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:85:38:04:CB:7B:CA:7F:7D:57:32:48:AE:5E:5B:A4:19:C9:B4
X509v3 Authority Key Identifier:
keyid:BD:87:85:5C:B6:81:E2:33:59:BF:EC:1A:34:F1:99:2B:67:1E:5E:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vYeFXLaB4jNZv-waNPGZK2ceXu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127726/F9FFF6AC1DA711E2963AFAA108B02CD2/vYeFXLaB4jNZv-waNPGZK2ceXu4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:0d:5a:7e:10:93:81:72:d4:68:c2:be:8e:d8:19:54:b1:83:
ed:b7:01:47:f3:1d:2b:85:af:5b:1c:d4:2c:b1:09:18:a7:8d:
89:2a:5a:b5:94:8b:8b:3b:30:ce:ad:c4:13:ef:81:48:f4:17:
53:80:43:2d:3c:c3:8f:95:f9:56:b3:31:d3:98:28:d3:7e:f9:
37:9d:60:f0:6f:57:a6:30:95:65:81:3b:c4:33:b7:cd:4b:bf:
41:62:9e:c7:32:44:2f:94:55:21:1a:8c:be:79:4a:bc:04:ec:
3b:0f:13:dc:9e:be:26:01:c2:df:45:72:87:58:22:dd:84:e0:
23:1c:92:f6:40:c1:af:6f:4f:ab:c8:53:de:2b:65:ae:3e:62:
26:20:ba:ef:8b:6f:12:b4:08:01:55:74:e5:9a:4b:0d:f1:ca:
8a:ba:c2:21:b1:38:d9:65:48:23:b6:bd:12:a1:ec:2e:5f:72:
b1:7c:cc:9c:2b:c0:9d:32:12:c8:d9:33:e5:b5:86:21:ef:20:
53:20:d6:79:4d:38:a0:41:f6:03:4f:f4:e5:fe:5c:bd:4f:2a:
c4:46:02:95:60:36:4a:77:60:10:e1:f1:bf:1b:9a:ea:79:ec:
15:dc:8a:40:00:3f:5a:97:2a:58:a5:a0:b8:c6:4c:ac:bb:e9:
c6:7a:9c:dd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc3MjYxMTAvBgNVBAUTKEJEODc4NTVDQjY4MUUyMzM1OUJGRUMxQTM0RjE5OTJC
NjcxRTVFRUUwHhcNMjYwOTIwMTUxMDU3WhcNMjYwOTI3MTUxMDU3WjAYMRYwFAYD
VQQDEw02YWFmZjc4MS00MmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArlZ5ki4XCi+w0/YRdL2y7ALppBXJU1QcygnkhL5lVlayxdz8iNL8gU2IoNih
W0DV+BFriD0VH2nnIFWZrEXIS4BL3nynOesLa9x4jXV4kBW30yqbP+Yw38UqJ3Nq
ENJ0HwkDFewss1E3hrv10RhRNMVnX54EymiS1M5DrpE4W9rsqhttUkVax8QmpFDG
gWpIWhpzjP9qdAnM46yR7kd9XurtmxH8V1+zh0btjTwtq0ncyH7doHc1tZ4JNHh2
pfeaQ+9JCjBV6kFZnFMkuC2Fbu4rpKgHcXHzfgPqABo5mcEzoztV8yy5QRLKVllx
9VWz1NAEglgdX7mAcxqZPge4eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMBhTgE
y3vKf31XMkiuXlukGcm0MB8GA1UdIwQYMBaAFL2HhVy2geIzWb/sGjTxmStnHl7u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzcyNi9GOUZGRjZBQzFE
QTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRqTlp2LXdhTlBHWksyY2VY
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZZZUZYTGFCNGpOWnYtd2FOUEdaSzJjZVh1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzcyNi9GOUZGRjZBQzFEQTcxMUUyOTYzQUZBQTEwOEIwMkNEMi92WWVGWExhQjRq
Tlp2LXdhTlBHWksyY2VYdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcg1afhCTgXLUaMK+jtgZVLGD7bcBR/MdK4WvWxzULLEJGKeNiSpatZSLizsw
zq3EE++BSPQXU4BDLTzDj5X5VrMx05go0375N51g8G9XpjCVZYE7xDO3zUu/QWKe
xzJEL5RVIRqMvnlKvATsOw8T3J6+JgHC30Vyh1gi3YTgIxyS9kDBr29Pq8hT3itl
rj5iJiC674tvErQIAVV05ZpLDfHKirrCIbE42WVII7a9EqHsLl9ysXzMnCvAnTIS
yNkz5bWGIe8gUyDWeU04oEH2A0/05f5cvU8qxEYClWA2SndgEOHxvxua6nnsFdyK
QAA/WpcqWKWguMZMrLvpxnqc3Q==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:19:16 2026 by rpki-client