
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier: lOUWDAip9O/0V9oyLDfuhnqLEoCCJ16ylM6y+xxVem0=
Subject key identifier: 77:D1:93:82:BF:53:F5:19:B8:81:DA:25:6D:6F:B1:5B:75:28:2E:56
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 10F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number: 10C7
Signing time: Thu 16 Apr 2026 17:17:04 +0000
Manifest this update: Thu 16 Apr 2026 17:17:03 +0000
Manifest next update: Thu 23 Apr 2026 17:17:03 +0000
Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: ObBHpLXFLtGemlgiuu5itICv8L91NBapxxR8gJAdLys=)
2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: MC3ya+Rx2sZxtMRFWTDYtgp6jSYXay2r0LuhyZ274v0=)
3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 17:17:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4337 (0x10f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Validity
Not Before: Apr 16 17:17:03 2026 GMT
Not After : Apr 23 17:17:03 2026 GMT
Subject: CN=69e1198f-52d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:50:2a:d1:57:91:3b:c5:ae:01:10:ab:a7:
bd:19:9a:69:bb:c7:33:58:83:85:a0:cb:c2:74:5d:
28:64:1c:64:24:11:56:e8:ba:73:75:41:4f:83:26:
c7:87:66:6f:0a:1a:d2:a9:1e:e6:a6:52:3a:6d:8b:
b2:26:ce:14:47:6c:18:8f:43:4e:77:e5:f9:b8:84:
41:bb:bc:8f:4e:7b:44:4f:a8:36:fa:7a:18:64:4b:
78:ad:8d:9e:b3:1f:00:f9:e2:58:02:dd:bf:0c:cd:
03:3a:34:1a:c8:ad:2a:5e:02:8a:87:78:20:3d:fc:
fc:79:f9:20:ed:0b:67:d7:98:46:0b:1d:76:29:9b:
32:ec:eb:b4:f2:53:b9:c7:7c:7d:d9:14:5e:4c:9e:
fd:7b:48:4e:eb:76:4c:6e:29:a2:3d:7c:fd:41:81:
e4:7b:3d:03:54:41:64:cc:6c:fb:24:8a:01:ae:53:
81:9e:b6:81:b8:89:c0:06:8b:29:f8:f6:11:5d:5e:
50:c3:0c:6c:94:e7:f3:b4:f0:90:c1:dd:8f:c4:3c:
95:29:95:82:27:39:04:a5:c7:ba:98:cf:cf:98:21:
04:8f:c4:17:fe:d2:3a:4f:36:f6:a6:e7:d6:7b:2b:
6b:26:4f:71:90:8b:5f:d7:d3:46:5a:24:17:94:9e:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D1:93:82:BF:53:F5:19:B8:81:DA:25:6D:6F:B1:5B:75:28:2E:56
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fe:7a:b6:e0:fd:8f:d5:41:c1:2e:a8:3a:e6:48:80:fe:2b:
c2:d0:85:ba:f1:0e:3e:7a:14:20:38:53:b8:98:b1:ed:46:ea:
0c:77:99:e6:cb:9e:c0:88:c1:71:10:c3:85:32:32:cb:e0:c5:
42:b4:c9:95:dd:d7:f9:aa:11:e8:9b:4d:43:6a:74:db:b7:fa:
cf:98:77:eb:40:3d:fa:eb:85:a6:d0:54:00:92:9e:16:f1:18:
0b:6e:bd:ea:0a:a2:a8:6d:06:bb:41:f2:96:9d:97:bf:8c:43:
64:89:2c:40:09:6e:41:39:6d:97:62:9b:97:2f:c5:75:2f:ea:
32:04:38:75:e8:2b:83:a8:9e:33:89:18:7e:96:00:6b:34:51:
74:be:e8:11:3d:3b:c0:5a:9e:7e:65:44:a3:c4:45:11:7c:b8:
5c:c7:0d:0d:9b:8c:d6:22:df:99:99:ee:e4:c7:95:aa:90:ec:
3c:fd:11:2a:2a:58:e4:2e:fa:f7:aa:22:8f:c0:73:a7:cd:7b:
d8:8b:b8:76:1a:0c:6b:96:b6:5d:31:8f:53:6e:9a:70:ee:b2:
4f:bc:c0:54:99:c6:c5:a1:06:73:e4:3b:7d:45:20:48:6e:50:
66:ec:66:fb:ed:5b:e0:31:d1:df:14:07:84:4b:3c:d2:6a:c4:
31:c4:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:37:59 2026 by rpki-client