
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier: pJ6PtUd+G+c1IITGS8od48eZwdQQNT3sQ2evuuXQvKU=
Subject key identifier: E0:D3:E8:D7:35:3B:B4:F6:06:F0:1B:59:7D:94:2F:74:EB:63:F7:21
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial: 0190
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number: 0173
Signing time: Mon 27 Jul 2026 06:42:51 +0000
Manifest this update: Mon 27 Jul 2026 06:42:51 +0000
Manifest next update: Mon 03 Aug 2026 06:42:51 +0000
Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: tBfpK7zEuhz28AAa/NtHsUuRt48q3Rea+f2i02CubtY=)
2: 9FB99556604111EFB4652062C4F9AE02.roa (hash: k4xjdnoEdJ4ZINBwfRdnO6KbApSD649BXEVODGAn848=)
3: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: Gw0jFmA84rZ18sx/7QrnbJxTgZTCnUYn+soLzQH1wKk=)
4: B527A9C8604111EF97252962C4F9AE02.roa (hash: zljNGxAqLeUku4CTzDmhSDwisDsF8PGy5rmaV56Sx6w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:42:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 400 (0x190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Validity
Not Before: Jul 27 06:42:51 2026 GMT
Not After : Aug 3 06:42:51 2026 GMT
Subject: CN=6a66fdeb-4b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:b9:07:4d:46:2e:5c:24:61:44:c6:54:3e:
8c:e5:1b:23:47:5e:d7:1f:c3:98:67:f4:9f:7e:fd:
9a:6b:8b:45:94:38:fb:f5:cd:29:50:b0:28:3a:40:
d3:06:ea:c9:42:1f:72:ea:7f:5b:4f:7d:03:0b:0e:
be:08:25:60:eb:d2:7e:d0:60:0b:8f:cb:87:4f:29:
f5:f4:f3:c1:05:aa:6f:c8:8f:59:9e:3f:2c:ba:72:
4a:65:41:73:7c:59:cf:62:47:ee:e1:2c:b8:a3:c1:
92:d2:e3:75:e8:a0:31:19:d8:09:2b:7a:d1:a3:ea:
fc:30:75:d9:cb:b3:58:63:db:f8:d2:2a:57:0d:98:
90:d3:54:84:32:be:c4:05:31:5f:fa:e6:d6:76:74:
b3:9f:98:49:8d:90:66:88:9b:9f:d3:8f:32:e9:34:
b6:f3:c9:06:ee:40:c3:ea:6a:a7:f7:98:f0:e6:85:
39:1b:46:c2:fb:ef:76:19:61:14:7c:07:2a:81:3d:
b6:96:ee:24:b3:28:5a:6b:6c:cc:72:94:a9:d1:dd:
f2:12:ab:86:4e:1a:03:89:d1:92:0f:5c:b9:5f:b6:
b2:d1:28:ae:e4:43:63:0f:46:9f:d6:27:48:53:27:
44:42:38:69:6f:e3:ae:ab:ea:63:1e:96:be:b2:9f:
85:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D3:E8:D7:35:3B:B4:F6:06:F0:1B:59:7D:94:2F:74:EB:63:F7:21
X509v3 Authority Key Identifier:
keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:98:76:fa:de:f7:23:90:ec:d8:e7:b9:d7:8f:e8:e9:bb:ab:
33:64:92:07:24:1b:95:6e:12:46:cc:38:0b:3e:0b:32:9a:7b:
f0:f8:99:39:c6:ed:36:6a:19:5a:64:a3:07:5e:e1:7e:ff:c3:
7d:fe:5a:88:9e:23:48:78:42:4c:2c:93:52:19:91:53:5f:b8:
84:1a:35:d5:f2:e5:7d:24:cc:8c:b5:5f:94:b0:9d:cc:47:d7:
43:87:92:f8:86:27:ec:72:3e:a5:ff:f4:4b:41:23:46:d1:7c:
7c:90:e5:67:39:0c:e1:40:57:35:78:b3:52:65:7f:89:ff:07:
08:76:18:63:58:64:55:22:3f:bb:a2:a0:f7:64:4d:4b:90:2a:
66:5c:f2:db:18:88:b4:47:7c:99:d0:01:08:83:85:ff:3b:7e:
dd:6a:39:a3:91:d9:d0:f0:07:8b:f1:8d:dd:d7:24:e6:2c:7c:
31:1e:0d:ba:b6:6a:f0:ff:10:ff:a0:30:ee:93:e5:72:17:54:
b0:28:b9:36:8d:cf:2e:e9:46:9f:0d:88:d3:69:09:5d:94:fa:
fa:b0:47:ed:5d:10:32:f0:2d:d4:f6:f0:c5:74:f4:2a:41:ec:
7a:d7:5d:25:07:67:8c:49:ef:45:b4:58:04:4d:7d:bb:00:3f:
cb:61:47:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:17:19 2026 by rpki-client