
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier: QL4k1zWLztgrSDv0jsdTs08XVCvQM+jyVcnHqhCMWM8=
Subject key identifier: C6:00:1D:FE:36:AA:D0:5D:05:07:82:62:17:DD:73:87:D5:E8:21:63
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 10D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number: 10AF
Signing time: Mon 02 Mar 2026 00:53:34 +0000
Manifest this update: Mon 02 Mar 2026 00:53:33 +0000
Manifest next update: Mon 09 Mar 2026 00:53:33 +0000
Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: wHeLOWc2pfMYwrZ57gMnUcfgWWfYByzWGjRSaTLzl7Y=)
2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: MC3ya+Rx2sZxtMRFWTDYtgp6jSYXay2r0LuhyZ274v0=)
3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4313 (0x10d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Validity
Not Before: Mar 2 00:53:33 2026 GMT
Not After : Mar 9 00:53:33 2026 GMT
Subject: CN=69a4df8e-9d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:39:08:3a:91:59:31:ff:7a:1e:42:62:7e:
74:aa:cb:87:cd:8c:42:a5:bd:30:08:6a:c3:7c:53:
7e:0a:a7:0f:3e:eb:ee:35:9d:92:a8:68:b0:4d:2b:
5a:7a:b8:18:7b:66:ac:dd:0d:19:87:a4:38:34:94:
cc:c3:3a:18:99:26:64:36:d3:cd:0c:f1:37:2e:a4:
9b:c4:77:2a:dc:cc:e2:95:07:d9:85:fa:54:f8:78:
c9:08:4d:de:94:4f:0c:6a:42:92:f7:7c:0c:94:4b:
5f:a2:1c:af:1b:f5:92:5c:31:b7:87:97:93:27:8b:
03:18:13:a3:f9:1f:c3:06:bf:90:33:ef:22:77:a4:
d3:27:22:ba:1d:a6:a4:7c:44:34:40:c4:af:c7:50:
ad:75:59:7f:7d:fa:d9:fd:4f:96:78:22:cf:db:45:
62:24:fa:da:6c:c3:dc:d1:c8:c9:c8:5a:cb:bc:0a:
ad:19:06:1a:50:55:7e:dc:e9:c1:b4:c2:aa:d2:cb:
6c:66:95:8d:84:39:63:d8:8e:e1:63:5a:c7:b6:5d:
98:70:b9:19:94:3c:e6:a1:dd:f4:e2:fa:51:05:a2:
e0:af:6e:51:69:48:32:57:43:9d:cc:d3:65:a9:df:
e3:ec:3e:f7:4d:79:19:f2:e4:9f:cb:fb:0c:b0:10:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:00:1D:FE:36:AA:D0:5D:05:07:82:62:17:DD:73:87:D5:E8:21:63
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:ed:a1:66:05:26:33:fb:6f:79:09:91:bb:3e:7f:b8:3f:00:
87:8b:67:36:fa:c6:fa:81:21:1e:b5:66:de:23:ae:96:f4:b2:
9c:b9:8f:d6:ef:d8:f7:9d:96:49:82:77:6c:44:cd:c1:da:14:
83:97:6a:46:6c:11:87:d6:0a:fd:cb:84:ba:15:ed:3b:c1:7a:
d9:10:fe:24:af:68:78:76:d8:3e:b0:86:6c:05:7f:c6:8b:c6:
8a:99:3f:f2:c4:ec:c8:96:f8:69:21:12:05:c4:e1:72:38:dc:
07:9d:b7:d1:12:a4:96:cb:bc:d0:8b:64:2d:b5:c0:2d:18:14:
62:ee:f4:bf:30:90:3e:c1:04:d7:42:6c:05:db:e4:15:39:cf:
7b:32:18:59:8b:2d:9f:56:39:c7:50:06:f3:86:26:a6:63:ee:
d0:4c:64:58:cb:de:51:f9:24:c3:e9:3b:a8:ef:da:35:af:0c:
d7:ba:4e:8a:9e:ed:6c:b9:47:d5:16:1d:d2:96:5e:a0:05:5c:
0b:00:cc:e6:33:28:85:c4:ea:c4:b6:a3:ac:33:02:41:6c:60:
cb:18:0b:aa:67:ea:f1:54:4a:97:c1:7e:e3:97:9d:a0:49:4a:
ef:33:78:08:d6:8a:c5:2c:aa:5b:ef:2c:a7:98:21:95:a6:73:
36:ca:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:11 2026 by rpki-client