
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
File: VFjEVinBBKqnpYcoaG-NHihyqSo.mft (raw, json)
Hash identifier: FVNKwMexPsrgYe1Wg3bE1Pd6kl/PAZIQBx/PuPwde6E=
Subject key identifier: 6E:CD:B0:28:C4:D8:78:DE:DC:20:26:6F:F7:D4:CB:27:5B:46:AC:05
Authority key identifier: 54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
Certificate issuer: /CN=A9153C27/serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Certificate serial: 0D2E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
Manifest number: 0D23
Signing time: Fri 12 Jun 2026 18:05:05 +0000
Manifest this update: Fri 12 Jun 2026 18:05:04 +0000
Manifest next update: Fri 19 Jun 2026 18:05:04 +0000
Files and hashes: 1: VFjEVinBBKqnpYcoaG-NHihyqSo.crl (hash: hztYEGi69A2k6byI44O+L67DRj67ZI2CR/GuXQRn+iA=)
2: DB020E9C010D11EAA82AD83CC4F9AE02.roa (hash: tCbmhz8Xdtfw+YZ6cKJPC3exzeqwAMNaQLxry2e2mdI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 18:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3374 (0xd2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153C27, serialNumber=5458C45629C104AAA7A58728686F8D1E2872A92A
Validity
Not Before: Jun 12 18:05:04 2026 GMT
Not After : Jun 19 18:05:04 2026 GMT
Subject: CN=6a2c4a51-c2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:99:76:e8:22:b0:86:61:a4:3f:55:d6:8c:
e8:ff:dc:09:76:4f:f2:4d:8e:37:e3:8b:00:66:05:
68:76:10:89:89:a8:69:f2:99:e0:7d:e1:77:e4:9f:
ee:11:30:94:2c:1c:95:24:dd:75:17:65:6f:57:ef:
9f:10:1c:5c:e4:c0:79:6e:bd:32:a0:bb:7b:dd:d1:
e9:50:16:89:b7:85:3c:38:bc:6b:e0:8a:a7:47:4c:
8e:14:c0:f5:9f:c4:2a:e6:1a:ed:dc:ce:ee:11:30:
68:33:09:51:87:b4:93:15:a7:50:20:5f:62:3d:1f:
8d:0a:2c:cc:9a:85:26:5d:33:6b:ad:0a:1e:21:83:
6f:03:c5:d5:1a:c9:a4:73:c5:2a:01:e3:cb:e5:7a:
89:66:c3:ab:9e:b3:1b:2c:95:c9:cc:af:80:c3:ff:
6b:5a:e3:19:ec:69:31:8b:ba:a3:98:b7:10:1b:d9:
56:ae:5a:48:d5:7b:b1:42:d7:b2:f8:4e:fa:14:96:
2f:99:1d:db:ca:b1:e6:7e:f3:74:a0:fa:bf:14:d3:
bf:55:e8:ab:27:25:7d:4c:7e:3c:74:4c:8e:06:05:
19:63:d1:16:91:75:ea:47:4f:4e:1d:7e:d3:23:58:
32:33:a8:8f:a8:1f:83:6c:96:98:b4:ea:25:a0:e3:
6d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CD:B0:28:C4:D8:78:DE:DC:20:26:6F:F7:D4:CB:27:5B:46:AC:05
X509v3 Authority Key Identifier:
keyid:54:58:C4:56:29:C1:04:AA:A7:A5:87:28:68:6F:8D:1E:28:72:A9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFjEVinBBKqnpYcoaG-NHihyqSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C27/65BB489C004A11EA980F2A7CC4F9AE02/VFjEVinBBKqnpYcoaG-NHihyqSo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d0:cd:b6:a9:d0:2a:c8:07:44:a2:26:5d:2e:43:9f:b7:85:
88:e1:46:09:ad:ee:4f:d6:3d:27:1f:ac:2b:ce:6f:32:14:61:
d4:1e:ea:53:bb:61:99:76:d3:66:a3:99:bb:c9:b7:0d:47:9f:
6e:9c:b8:9a:6d:88:75:be:61:18:99:87:5a:86:ae:17:75:c3:
dd:23:83:01:e4:cd:ed:be:4c:e4:50:d0:65:05:b9:7a:5c:d6:
b0:d4:b4:8b:83:fa:37:5c:0f:c7:f4:23:2e:cd:28:83:a1:f8:
65:b1:41:a4:51:2f:06:0a:07:9e:5e:77:51:79:32:a2:33:e6:
1f:ba:3d:da:71:c6:fb:d4:7b:d5:e4:e5:41:e3:e0:29:13:04:
6a:c2:99:ac:46:24:b8:53:8e:42:91:92:a5:b2:39:fc:5d:c9:
79:88:9e:14:46:77:b8:26:47:7c:70:df:04:e5:04:6b:fb:b2:
36:96:a5:6c:4a:e3:22:be:26:22:92:24:0a:32:77:87:29:47:
d3:c9:2a:35:e1:eb:07:df:26:6c:13:1e:f6:ca:58:27:c9:df:
eb:f5:d6:49:f6:fd:bf:ea:0e:10:98:81:ea:15:1d:eb:52:7b:
57:c1:ad:47:25:fa:ef:55:fd:e4:0c:25:e2:a5:82:20:81:4c:
4a:fe:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:09:46 2026 by rpki-client