
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File: VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier: qH4/Hl9+ZneCNjMG3Am6BoeUSkLoHxvBezYSivykzFs=
Subject key identifier: B1:26:32:02:28:84:F3:2A:44:72:14:15:22:28:B8:7A:D6:41:42:AF
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer: /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial: 01B5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number: 01AE
Signing time: Mon 27 Jul 2026 05:51:46 +0000
Manifest this update: Mon 27 Jul 2026 05:51:46 +0000
Manifest next update: Mon 03 Aug 2026 05:51:46 +0000
Files and hashes: 1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: QuPqXg1XtrDPDxoLItuYh/luz23BtoQlOT3bT43vEDw=)
2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: mxa8tydWQjiy2bpcgk7RtwgTSB1dfJQU4fJvs9xpLbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 437 (0x1b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Validity
Not Before: Jul 27 05:51:46 2026 GMT
Not After : Aug 3 05:51:46 2026 GMT
Subject: CN=6a66f1f2-824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:ca:4c:f8:dd:ef:94:c1:2c:10:8c:2c:4a:
f2:98:a1:a1:40:88:8e:95:f2:49:1f:b7:40:2e:d7:
e2:fc:5f:64:f8:b2:43:34:33:0a:75:9b:69:7d:ee:
d2:a5:9b:6a:41:60:e2:d2:82:52:b5:a3:99:3d:a4:
b3:87:b0:c3:b3:59:75:4c:2e:90:a9:84:1a:62:c9:
b7:05:3e:af:1b:83:48:d4:23:3a:b9:66:c7:ba:6c:
25:6f:c4:1b:ea:ea:f3:f3:87:de:88:a6:06:72:a0:
99:47:b9:0c:a4:37:a3:d8:d3:24:87:90:0d:97:33:
02:1d:42:8a:02:86:43:7d:2e:cb:9c:7d:63:9a:f9:
38:06:c5:81:38:65:c3:26:17:83:9b:b9:1d:0c:c7:
bf:3e:0b:dc:b3:81:18:ca:1a:11:c0:09:25:f2:89:
ed:b8:6f:c0:b8:e5:34:99:9e:03:cb:c9:36:12:f8:
78:a5:09:21:80:a2:ea:59:2d:3f:e1:02:6d:8b:62:
f4:58:7c:d6:8d:9a:61:71:d5:87:d0:c1:9f:99:1e:
8c:20:b7:37:0e:2c:d3:38:38:ea:71:75:ac:0a:3a:
2f:65:42:c0:aa:fe:37:4c:b7:ce:d8:b6:27:a7:0e:
49:df:cd:86:45:1e:a1:77:e9:41:2c:fa:ae:31:29:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:26:32:02:28:84:F3:2A:44:72:14:15:22:28:B8:7A:D6:41:42:AF
X509v3 Authority Key Identifier:
keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1e:3b:09:19:0c:11:f3:c4:5c:71:57:ba:7f:d5:19:4c:7d:
3d:af:f4:29:56:8c:4c:0c:61:bb:cc:48:8f:8f:66:49:e1:8d:
c9:00:88:a9:c8:a9:68:4a:2e:5b:4c:fa:fb:6f:44:4f:bf:f9:
f0:93:1d:02:91:df:8e:c8:c9:d0:4c:a3:dd:f0:92:4c:35:0f:
89:98:a3:1e:c9:2a:f0:4e:d3:26:d9:7d:2f:7d:cf:d6:4f:fa:
01:04:9e:70:02:15:cf:8b:71:c6:21:b2:3e:0e:3c:f6:a0:32:
c6:47:73:97:d6:13:37:3c:ad:53:d9:92:6c:aa:40:6c:4e:22:
a9:1a:21:44:57:c4:75:30:48:5e:83:54:04:35:be:76:7f:9f:
bf:14:26:ee:a0:f7:15:7b:64:0e:aa:98:2e:19:e4:3a:1a:74:
ed:56:96:0a:35:98:0d:bb:4e:00:d3:d3:96:2e:40:b6:79:85:
aa:44:32:bc:7a:9e:de:7c:b1:d1:a4:71:ed:ac:ca:39:fd:68:
20:0f:38:cf:b9:1d:8b:22:73:f0:23:a8:67:3e:d4:ea:47:08:
e3:ce:b9:85:86:41:48:d3:27:cd:7a:5d:fa:08:5c:4e:97:8c:
2c:17:47:84:be:a5:de:ed:b6:a8:73:62:b1:d5:28:76:6f:48:
39:4f:c0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:32:31 2026 by rpki-client