
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
File: a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft (raw, json)
Hash identifier: C/234Uk495EeP7MM/B2FrDw38Nuh1BZxtD5KkrWS6A4=
Subject key identifier: AE:E4:D7:AE:2D:AC:F6:29:B7:31:9B:64:22:CA:DE:5E:72:85:12:42
Authority key identifier: 6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C
Certificate issuer: /CN=A9152705/serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C
Certificate serial: 5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
Manifest number: 58
Signing time: Sun 01 Mar 2026 09:33:49 +0000
Manifest this update: Sun 01 Mar 2026 09:33:49 +0000
Manifest next update: Sun 08 Mar 2026 09:33:49 +0000
Files and hashes: 1: a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl (hash: RNDDFYjaDHgIJYOEHlR6OWt4U4rhpi0uk+85+NTGsJY=)
2: D5E5F60E92BF11F0BA90D823C4F9AE02.roa (hash: 1qsI60bcISSr8S+rZu0eKRZXC6kIyDJbde18/K9baHU=)
3: 25CC4486C5B811F092EE2F29C4F9AE02.roa (hash: H7oeB7WgFvr2LyEohsaP440SuuYE4hhtTJTZTzzGgR0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl
rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152705, serialNumber=6BEBC0212D6FED8321C8D6F0C5C9C4A66ED7117C
Validity
Not Before: Mar 1 09:33:49 2026 GMT
Not After : Mar 8 09:33:49 2026 GMT
Subject: CN=69a407fd-40a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:53:ca:5d:0c:7a:a8:9d:9c:f0:f2:3f:58:
20:38:b2:2d:4b:4c:11:b9:a9:b7:39:8a:fd:9d:ac:
21:5f:01:ec:c8:5e:c4:e2:68:30:43:ce:6b:16:da:
bf:63:f2:f1:35:8b:ed:32:d8:5d:49:fd:ab:53:65:
98:e6:17:7c:e4:9d:64:44:fa:3b:18:ef:00:19:7c:
51:b3:da:f1:40:ba:86:60:02:d6:ee:0f:ee:06:d9:
67:ce:eb:1d:95:5f:62:3d:3d:c3:67:8b:f8:ee:26:
3f:58:2f:91:68:b8:49:42:7d:f2:23:44:33:89:45:
31:4a:f1:ef:18:ab:7e:fa:42:28:66:e2:60:26:34:
45:5c:8e:81:00:a4:a4:95:33:93:04:a9:1b:ac:43:
07:c4:f4:f3:32:bc:dc:69:7c:a4:5c:7a:89:09:30:
db:94:f9:51:22:19:e7:52:d1:92:0f:74:69:15:59:
77:be:72:e3:1b:6c:5f:cd:49:89:bb:40:90:96:b9:
00:6c:4e:66:ef:93:68:a7:30:91:5e:3e:2c:b9:92:
fc:1e:5d:05:58:d3:8b:52:63:65:58:e6:00:e0:ad:
6a:21:47:35:5d:62:50:86:c7:a2:57:3c:0f:0e:2f:
9a:e8:74:9a:3b:42:24:20:e2:e2:1e:8a:7e:bd:a0:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E4:D7:AE:2D:AC:F6:29:B7:31:9B:64:22:CA:DE:5E:72:85:12:42
X509v3 Authority Key Identifier:
keyid:6B:EB:C0:21:2D:6F:ED:83:21:C8:D6:F0:C5:C9:C4:A6:6E:D7:11:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-vAIS1v7YMhyNbwxcnEpm7XEXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152705/62760D2692BF11F099AC1323C4F9AE02/a-vAIS1v7YMhyNbwxcnEpm7XEXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9c:56:fe:42:d2:b4:d9:ae:c3:48:a6:41:67:d5:5c:21:84:
02:e0:0f:75:2c:15:3a:ac:72:97:d2:3d:a7:44:8e:0a:53:ae:
24:3b:27:9c:95:6d:eb:b0:b7:10:22:05:47:ab:a9:a6:ec:76:
e7:8f:af:2a:b8:4a:90:98:79:b3:c8:2b:d4:45:e0:69:70:1f:
ee:c6:e9:94:de:bb:3a:c4:23:51:e5:5d:e6:92:fb:a1:69:10:
19:d7:23:83:4b:d9:be:d4:0a:ab:2b:e6:04:9a:eb:47:a8:29:
3e:5d:14:46:b5:97:47:df:d6:ec:6d:d7:ab:63:48:fa:f1:17:
d5:11:c1:9a:c2:29:cf:8b:47:30:7a:6c:57:c6:df:60:94:c4:
24:81:3a:4d:ef:63:f1:cb:34:9e:4e:11:c2:ba:8f:d3:0d:a6:
1d:e0:d8:63:4d:f8:53:dc:63:ef:bd:db:05:ea:96:00:b9:fd:
f5:47:82:d4:91:d0:31:3b:b5:aa:e1:63:20:4e:ab:59:22:3f:
48:9f:e6:cb:97:63:9b:c3:75:4e:40:5c:f6:82:d5:33:59:96:
cf:90:15:b5:ec:a4:23:ef:c9:95:01:f4:3f:c0:9a:c6:fd:35:
f3:b9:d6:a1:de:63:21:22:d7:a3:ff:3b:37:10:7d:e5:e9:f4:
17:0e:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:10 2026 by rpki-client