
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier: 8IJ6p72rD5AONrZ2dulIqs15tkDztPaDJiLjLOyFrvU=
Subject key identifier: AD:3E:D3:21:79:4B:87:8C:6F:7F:AD:C6:BC:86:51:A8:6B:B7:85:4E
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 1112
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number: 10E7
Signing time: Sun 14 Jun 2026 17:18:56 +0000
Manifest this update: Sun 14 Jun 2026 17:18:56 +0000
Manifest next update: Sun 21 Jun 2026 17:18:56 +0000
Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: DEkcmMNxzPpp4Y7dps/ZgnEXePQmv7sI8ViqIUWQvSg=)
2: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: rZBquRvSRZzwF/cXOq40XWEHIK6p9WX2a250U/MbC2g=)
3: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 17:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4370 (0x1112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Validity
Not Before: Jun 14 17:18:56 2026 GMT
Not After : Jun 21 17:18:56 2026 GMT
Subject: CN=6a2ee280-28b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:f4:95:a9:1a:ec:80:d0:8e:1b:55:e7:1c:
44:0e:18:ee:1c:e8:46:22:1a:2b:db:04:fd:6d:cb:
50:24:7f:85:b6:dc:c7:5e:91:43:8e:fd:89:6b:41:
47:5d:3a:45:23:53:d4:95:e9:11:c7:09:b3:32:f0:
02:fe:a9:54:0e:0f:8e:c7:fc:ff:e5:1e:eb:02:fa:
35:d2:27:97:05:d0:2a:56:7e:b7:98:76:c6:e6:cd:
58:86:ef:5b:63:23:35:19:c3:2b:1a:13:8b:63:0c:
7d:df:64:db:8d:e8:28:e1:40:bc:9d:d6:bf:c2:62:
b4:3f:4d:ff:72:7b:65:ef:a7:16:10:ed:ac:26:6f:
1a:10:97:ab:49:90:ee:14:81:7a:68:67:3d:8c:0c:
81:fa:d3:73:71:72:13:c0:18:75:78:70:91:c8:87:
9f:1a:0d:f1:aa:cd:5d:e8:c6:9d:71:1c:bb:8f:37:
a2:21:2d:27:85:36:e8:d2:de:09:8d:46:a0:ab:7a:
1e:a7:27:9c:58:e7:f1:8c:36:d2:3a:e8:7b:07:91:
b0:70:8f:5a:5a:9b:9c:c5:fe:df:cc:ec:04:c3:e9:
8f:9d:08:a2:94:5e:3c:7e:40:d4:bd:c0:d7:02:81:
a4:db:40:e5:db:c0:7e:07:06:6a:e1:0b:95:1f:4b:
50:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:D3:21:79:4B:87:8C:6F:7F:AD:C6:BC:86:51:A8:6B:B7:85:4E
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:eb:2f:c7:ae:32:88:ee:c2:d0:14:ae:df:be:7c:ae:fe:d6:
3d:94:7d:e2:3c:f4:38:e0:66:b3:dc:41:c2:76:22:3c:df:05:
c3:ad:f7:a3:5e:1f:9f:a6:75:a4:57:6e:f8:96:f0:1d:6f:9b:
fa:d0:02:b3:a2:e5:74:94:2a:4b:2e:4a:95:09:a3:c4:a7:76:
40:ab:36:d8:8e:2c:f5:67:4a:1e:60:6b:76:6f:03:2a:fe:cb:
cd:7c:a9:dc:a1:2e:b3:f2:4a:1f:0c:56:bc:24:b5:d7:9b:ab:
d7:a5:bd:29:5d:a9:dd:73:26:82:4f:3c:42:5d:d7:f3:6f:1a:
58:e6:37:f8:1f:c2:2d:38:96:03:a0:93:83:14:a9:fe:06:33:
52:6b:4d:43:ec:06:d2:73:f5:48:b0:24:e5:75:6e:d5:10:d6:
07:99:62:d5:ea:7f:2c:a9:65:4d:ee:c4:6b:65:ce:1d:90:34:
57:b2:1a:2c:c5:a9:e9:8d:2c:7d:0f:f9:aa:24:72:8d:70:71:
e4:e3:22:26:c6:c2:d3:a0:a5:32:57:6e:13:1c:51:a5:51:b3:
59:cc:c9:d5:f2:a4:fd:3d:2d:ea:73:10:08:fb:24:b3:8b:92:
65:3e:d6:43:7c:f1:70:75:a4:28:0d:86:5e:a0:57:32:dc:84:
07:fc:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 08:07:08 2026 by rpki-client