
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
File: vFNsAPhfWQQdnEwpYfciQr9g1R4.mft (raw, json)
Hash identifier: r8z2nORb/euMeaxDw3IDPZzg0Vy/4RnKUrTnNoUBhOk=
Subject key identifier: 44:49:6B:7C:30:F4:6E:F6:12:7E:49:95:54:E1:FB:0C:09:7B:B7:EE
Authority key identifier: BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
Certificate issuer: /CN=A9164860/serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Certificate serial: 1367
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
Manifest number: 1318
Signing time: Tue 28 Jul 2026 17:08:59 +0000
Manifest this update: Tue 28 Jul 2026 17:08:58 +0000
Manifest next update: Tue 04 Aug 2026 17:08:58 +0000
Files and hashes: 1: vFNsAPhfWQQdnEwpYfciQr9g1R4.crl (hash: 9o6szTz4bOPXiQutuNNBmOals5Ay7KK6h8c5yCWlBmE=)
2: CA04831060B811F19C6DC3147F47A888.roa (hash: rOz2RbSRemVOFrRimoMVT6/+5tzDGcbwoE9kdakjgFA=)
3: 5C67E8E87B7411F1A3D02C1F63A30FBC.roa (hash: ORuMnxH7G7FX6h8tXJKoehvjLlQp1iQA/wSMC0O4y0s=)
4: C8F89EF260B811F19C6DC3147F47A888.roa (hash: KeWwMhx4c7U/ZQPC2bJz74fYjPr5gQDtKF2jRuwLCqo=)
5: E0ACCAC4ECD211EFA6C15823C4F9AE02.roa (hash: QnQqjFydewV7u2zSJAv9kmbCFZi+DdPDplbN0AedyqQ=)
6: 8302EB5A7B7511F1BA0904A763A30FBC.roa (hash: LkZnJ3QA5cnl1yBZi3+auFKRPPNbQMzrYVVyOZE6xyQ=)
7: 57A84138605911EE8ABC9318C4F9AE02.roa (hash: GwBzururP91LCAF7TSNIMtRqmicpSh1Gk2iqSgIOC/E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4967 (0x1367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164860, serialNumber=BC536C00F85F59041D9C4C2961F72242BF60D51E
Validity
Not Before: Jul 28 17:08:58 2026 GMT
Not After : Aug 4 17:08:58 2026 GMT
Subject: CN=6a68e22b-d7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f9:32:bd:fd:16:69:78:2b:2e:31:46:73:30:
c1:1c:7c:14:23:fb:7d:ce:74:90:a2:72:74:0b:14:
bf:f7:9b:e8:d9:9d:aa:19:ff:c8:59:fd:75:c5:5c:
60:dd:a0:f0:8b:a8:23:a1:d9:49:fa:d1:41:b4:b4:
18:5b:f8:6b:9e:c4:14:bb:7c:48:a6:c3:ad:ad:42:
da:30:85:fd:db:8c:10:d8:86:7d:c3:e0:8b:a2:d1:
d6:5e:54:ff:3b:7a:b0:c9:7c:f8:79:87:0e:36:2d:
50:d9:4b:73:af:58:cb:24:70:83:42:04:7c:f0:13:
c6:c8:26:43:06:42:17:2c:46:17:4b:a2:05:bc:a4:
26:03:45:d3:36:c6:88:b0:f5:c0:bf:6e:7b:45:0f:
47:12:c1:75:ce:ac:79:3f:fb:5c:3a:6a:95:c1:79:
a5:7d:5b:53:9a:34:de:37:bf:d2:bc:4b:f8:fa:76:
ee:ce:e9:2c:76:ba:a7:1c:fa:cc:76:ac:98:f5:10:
a3:f1:35:a2:35:71:6b:be:61:da:33:fb:f5:4a:8a:
ea:38:e5:be:7a:3f:69:ba:2e:a5:5c:45:45:fa:d5:
c1:77:d3:87:ba:b0:f7:c6:9f:ea:46:63:bf:ac:f4:
cf:b2:ca:60:00:10:84:7c:e8:c6:e5:34:03:d3:c1:
89:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:6B:7C:30:F4:6E:F6:12:7E:49:95:54:E1:FB:0C:09:7B:B7:EE
X509v3 Authority Key Identifier:
keyid:BC:53:6C:00:F8:5F:59:04:1D:9C:4C:29:61:F7:22:42:BF:60:D5:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vFNsAPhfWQQdnEwpYfciQr9g1R4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164860/B401C982E97011E8B0359359C4F9AE02/vFNsAPhfWQQdnEwpYfciQr9g1R4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:a7:7b:f9:76:74:53:86:55:56:ac:60:33:98:c4:7f:dd:
ad:0d:78:d8:d9:82:94:f5:2d:2a:a4:79:3a:3d:ce:f8:60:26:
ec:46:4c:80:a6:e8:2a:60:9f:86:1a:84:f2:82:0d:83:3c:6d:
f1:ee:6c:41:fc:59:11:95:66:fa:47:4a:87:13:5a:af:cd:9b:
14:ac:90:b6:c3:bc:81:31:3a:b8:9c:77:26:27:dd:d4:6f:a9:
a1:86:c6:40:37:be:7f:e8:e9:21:31:dd:61:dc:03:2d:73:3b:
77:15:e4:a0:7f:96:2e:9b:84:80:67:ff:23:06:5c:91:9e:f8:
03:dd:b9:c3:b7:5c:00:46:d1:b0:87:95:83:61:44:76:e9:9e:
39:94:ad:eb:2e:bf:41:b6:30:cf:9b:24:68:88:8f:0b:8a:b0:
51:99:dd:38:c0:f5:cc:ff:eb:0e:cc:8f:f2:69:26:b9:72:57:
4c:53:96:fc:e1:ed:66:2f:1a:fd:70:df:1a:87:26:e6:62:27:
50:be:5e:23:90:a7:84:3f:cc:f0:16:cb:0d:0c:19:97:2c:45:
33:15:97:df:d4:50:1a:30:26:a1:2e:8f:40:b5:7a:54:76:12:
4a:ba:60:7c:e2:e5:84:43:d0:3e:d8:e5:e6:c7:72:59:86:a7:
60:15:4d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:16 2026 by rpki-client