
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
File: VVzqN0EM0oazHxoArfYlPUzgUjI.mft (raw, json)
Hash identifier: 3Mv6V+KyPiwU0cT7iBm1wDuBQ72eXRGn6abP0LGxI1I=
Subject key identifier: 28:26:AC:C0:BF:C4:33:CD:CC:0C:BC:B1:3F:30:61:04:43:23:EA:CB
Authority key identifier: 55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
Certificate issuer: /CN=A9137522/serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Certificate serial: 351F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
Manifest number: 3517
Signing time: Mon 02 Mar 2026 15:05:54 +0000
Manifest this update: Mon 02 Mar 2026 15:05:54 +0000
Manifest next update: Mon 09 Mar 2026 15:05:54 +0000
Files and hashes: 1: VVzqN0EM0oazHxoArfYlPUzgUjI.crl (hash: a6zzNjhlfRg7Btg8y+xSaT7QBQ4ZU5FbTqOH+7bu0/w=)
2: FF9802D6FE3911EBBCE1485DC4F9AE02.roa (hash: Zqu39Uw0HncOG5VI+5Ts7HDsov6x0MYg0Iq+gNjyWCk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:05:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13599 (0x351f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137522, serialNumber=555CEA37410CD286B31F1A00ADF6253D4CE05232
Validity
Not Before: Mar 2 15:05:54 2026 GMT
Not After : Mar 9 15:05:54 2026 GMT
Subject: CN=69a5a752-da09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:35:37:b1:45:14:12:d6:2a:91:41:d9:13:b2:
ff:3d:da:8a:f5:79:0c:9a:11:47:f1:ad:ff:b8:41:
e9:72:7a:7b:09:6a:b3:3f:70:5f:36:ac:6e:54:96:
d8:13:a6:6c:6b:ab:4f:e7:7f:15:55:47:4d:47:4d:
0a:02:68:bc:f8:b1:2d:29:67:d6:2a:9d:44:0b:c4:
76:8b:84:47:e3:38:49:be:10:48:7e:37:90:0d:30:
52:a7:40:97:df:69:61:c8:da:01:ac:e6:3c:76:9e:
6c:d3:06:0e:de:c5:68:f1:f2:e8:a8:bb:21:39:5e:
82:c1:5d:6b:a3:51:0a:38:b6:c3:18:f6:9a:9d:97:
55:0c:86:70:b9:1f:3e:45:5d:fc:93:f0:c5:98:9e:
84:20:74:69:96:20:36:98:4d:2f:ad:3d:db:c6:c0:
59:96:be:89:fd:26:0c:03:8e:11:2a:e7:dc:c0:38:
24:40:f8:64:ea:8c:24:51:d0:3e:74:3c:f6:49:1d:
67:6a:44:b5:62:bc:75:a3:cb:5e:60:0b:09:b2:07:
1d:86:28:07:51:8d:2f:19:6d:b0:e0:d6:18:f9:fc:
8d:09:55:76:9e:8f:b4:64:7a:90:49:88:e3:b5:ca:
df:72:f0:ce:2a:9e:ed:d3:43:29:8b:c1:8e:29:52:
03:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:26:AC:C0:BF:C4:33:CD:CC:0C:BC:B1:3F:30:61:04:43:23:EA:CB
X509v3 Authority Key Identifier:
keyid:55:5C:EA:37:41:0C:D2:86:B3:1F:1A:00:AD:F6:25:3D:4C:E0:52:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVzqN0EM0oazHxoArfYlPUzgUjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137522/10DC18281D9F11E29605788F08B02CD2/VVzqN0EM0oazHxoArfYlPUzgUjI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:54:fe:b9:8a:b0:2e:a2:a0:e4:4b:33:82:95:71:b0:9a:3f:
8a:4e:a0:e5:55:b1:c5:54:86:cf:f6:c3:ee:62:ad:a7:6e:2f:
9d:0b:21:a5:d4:11:0c:05:b3:53:e4:08:48:00:42:2e:75:e4:
a6:06:3e:7f:de:da:4a:b5:b3:78:86:cf:f8:c7:e2:f9:c0:27:
e6:a5:17:de:04:67:2f:94:67:29:dc:d0:4d:25:d4:cc:41:eb:
34:84:7c:9b:fe:7d:24:82:56:d0:2c:c4:5b:94:ec:2e:e4:08:
c1:8b:b1:00:e1:95:72:92:f6:ec:40:b2:63:65:35:05:4d:43:
c0:36:18:77:2f:3c:ab:e0:76:c4:27:21:da:67:f7:b0:9e:43:
fa:8f:c0:08:15:84:de:6d:33:a3:47:5e:19:37:87:49:a5:a2:
1c:df:a6:7f:42:5f:38:5c:37:62:36:b2:52:8c:48:b4:60:ce:
92:86:46:80:2f:22:fe:3a:89:a5:85:72:27:40:ef:5c:c2:4c:
4b:dc:e1:2d:e1:be:3b:4f:1a:a3:3b:5e:49:af:07:a0:17:04:
cb:aa:90:f8:dd:a5:27:4b:75:4b:a7:19:85:44:42:8f:0a:e3:
54:4f:ad:e4:a3:8b:75:b3:8d:8e:7a:d0:76:5f:b6:6e:1e:0d:
80:c5:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:59 2026 by rpki-client