
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json)
Hash identifier: 1PqsPl/Awry5BryX6SlhRQDTZzhFPSe6AWHuhJS/FkI=
Subject key identifier: E4:67:A4:C2:E7:BE:8A:0A:77:B7:BA:D7:F6:4B:67:2E:4A:B8:87:E4
Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Certificate serial: AB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
Manifest number: A5
Signing time: Sat 19 Sep 2026 07:19:01 +0000
Manifest this update: Sat 19 Sep 2026 07:19:01 +0000
Manifest next update: Sat 26 Sep 2026 07:19:01 +0000
Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: tT6IELVFKCCLhVdZs65lZscpAulfsy8LwcniGxc3Fbo=)
2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: OdFik9QbQwbDNwBO8NmeHTSCxxItyVwP3BUltpegtXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171 (0xab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Validity
Not Before: Sep 19 07:19:01 2026 GMT
Not After : Sep 26 07:19:01 2026 GMT
Subject: CN=6aae3765-db06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:84:9f:59:34:d6:ec:39:fa:ea:2d:87:c3:b7:
f4:71:5f:38:5f:42:33:11:e9:dd:68:d9:65:ab:93:
eb:d8:d1:e7:12:d4:6f:81:a9:c3:73:33:ca:41:49:
71:a6:d9:86:15:38:2c:fa:eb:71:de:29:97:4a:01:
15:8e:0d:03:63:e4:bd:6a:b6:62:ad:29:f9:f6:9f:
ff:ef:f1:8a:7b:39:0f:c2:4b:a5:9b:2f:b9:6e:e2:
8b:08:32:4b:0b:64:80:e2:bf:10:90:18:6f:ec:07:
5b:13:75:62:aa:b8:91:39:2e:05:af:8b:9f:8d:a0:
c5:a2:6d:45:29:63:e2:92:eb:35:7b:8f:7c:fa:0a:
9e:ce:7c:64:7a:db:40:b3:6e:c2:21:83:cf:87:55:
eb:5d:e2:bd:02:83:8f:85:78:15:a4:81:a0:44:ed:
bf:79:0c:76:49:ad:ce:c3:b7:5b:c4:c6:53:38:2d:
f9:5a:e7:8a:c2:dd:91:18:21:66:4e:00:08:e7:db:
e4:d4:dd:c3:2e:fe:09:3d:3e:bd:f4:8a:a4:66:6c:
a0:0b:f0:d7:3f:dc:48:c0:3c:d1:44:16:82:53:41:
5b:0a:3e:2f:9f:7b:7a:86:bf:30:0c:6a:70:21:62:
76:72:05:3b:69:9a:aa:e9:d4:eb:65:bb:b6:51:26:
74:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:A4:C2:E7:BE:8A:0A:77:B7:BA:D7:F6:4B:67:2E:4A:B8:87:E4
X509v3 Authority Key Identifier:
keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:c6:bc:ab:10:fa:0a:e0:7b:e8:d5:1a:fe:6f:48:34:db:61:
53:54:37:7f:d5:25:56:85:03:64:a7:57:65:a0:4c:86:b2:8e:
44:58:91:8f:7c:54:51:94:b1:f9:ab:ce:14:63:8e:fc:38:a7:
30:97:5a:60:c5:10:c3:aa:05:6c:3a:63:80:b7:83:14:58:9a:
87:99:c5:b5:bc:13:c8:34:23:5b:40:94:c5:a9:be:a7:87:61:
c0:de:0d:78:00:78:b6:64:36:95:7c:9e:9d:c6:78:80:ab:65:
06:bc:58:cd:8e:22:4b:40:15:b7:dd:a8:a1:c3:bd:63:90:03:
a6:38:6a:e1:05:91:8f:ce:d3:8e:41:c1:84:64:52:aa:26:b6:
2d:cd:55:60:33:61:71:1e:bc:79:3a:b7:29:b7:a9:60:9f:7d:
f8:83:34:88:81:c1:17:4a:06:57:f9:45:20:d9:19:5d:fe:24:
9c:ec:6d:e6:c7:65:48:80:73:fd:b8:25:f3:b0:35:6b:80:5d:
85:87:76:80:9e:48:80:62:3c:35:a4:de:ca:23:1a:a4:c1:fc:
12:76:c1:bf:a9:58:96:fa:ad:58:7c:46:d6:8e:04:1c:ac:3d:
61:29:bd:bb:56:92:2a:f5:50:a0:e9:76:57:ab:5a:95:99:8f:
00:53:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:38:48 2026 by rpki-client