
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File: VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier: 3X4KyxijtOmHpDafCMupeNLYlbi0lsvJ92FEzKXmHC4=
Subject key identifier: AF:C0:80:87:05:15:80:6A:B3:45:C6:13:E2:2A:50:28:D7:3C:DC:70
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer: /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial: 0180
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number: 017A
Signing time: Fri 17 Apr 2026 04:24:19 +0000
Manifest this update: Fri 17 Apr 2026 04:24:19 +0000
Manifest next update: Fri 24 Apr 2026 04:24:19 +0000
Files and hashes: 1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: xLnVxqB+s5vfv8dhGs2I3WwJDBeK3CvYUAydZzmhXe4=)
2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: R/+mpIF7D2Ei1AS7/k2esMe46P023CSHvwSxqyATt3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:24:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 384 (0x180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Validity
Not Before: Apr 17 04:24:19 2026 GMT
Not After : Apr 24 04:24:19 2026 GMT
Subject: CN=69e1b5f3-829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5f:22:86:35:eb:a7:99:12:19:d4:66:36:74:
bf:2b:3c:53:2c:38:de:f1:a1:72:49:03:55:b7:8c:
b4:f6:df:c1:b8:21:b3:52:43:7e:64:fc:29:b3:52:
54:b4:59:5e:51:56:2a:ea:e2:ee:58:39:5f:d9:d3:
42:2d:81:66:4a:c2:81:39:c4:cc:60:94:26:dd:48:
21:14:e5:c1:91:88:8d:51:a1:79:2b:d6:1f:6d:4b:
78:34:8f:1d:03:c5:ab:9c:c4:d1:63:4c:9d:80:a5:
49:b8:35:13:d5:e9:77:04:6c:ca:84:af:4c:28:45:
1c:53:4e:5e:dd:dd:b3:be:8a:68:46:64:6f:f0:7c:
10:11:7e:39:64:ec:dd:c7:c8:b2:ee:b0:55:98:72:
1f:9f:ee:af:e2:d9:43:b3:f4:ad:57:36:47:de:ef:
e6:27:08:0c:83:05:1f:50:fd:de:23:26:88:65:4e:
1c:bd:71:40:92:65:ff:01:7a:cd:c6:44:6b:52:e8:
12:44:56:9c:8d:0f:1c:01:d0:07:1a:84:79:17:f8:
83:36:51:7e:bf:ce:a8:83:12:3c:d6:8d:f5:14:69:
d9:bd:93:ac:c8:6f:4e:2c:14:c3:dd:0e:e4:2f:6e:
1f:49:ea:97:3b:06:0d:94:1d:05:c7:cc:96:7f:4c:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C0:80:87:05:15:80:6A:B3:45:C6:13:E2:2A:50:28:D7:3C:DC:70
X509v3 Authority Key Identifier:
keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:cd:f4:07:c8:95:75:df:83:68:f3:74:ce:99:d2:a9:81:8d:
8d:b3:e1:5e:47:c2:2c:2e:2f:72:c6:6d:5d:87:65:4c:a5:19:
34:60:e1:1a:18:e0:b0:46:d4:ff:8d:3f:1c:51:cb:36:a5:97:
e3:f0:dc:ae:d4:91:f4:e7:ea:1d:8f:72:38:16:8e:6a:2d:27:
59:02:9d:77:49:25:08:2c:16:50:6a:83:83:c8:78:bb:7f:37:
f0:59:63:df:49:9f:1d:2f:d8:15:5f:6a:d5:61:7b:29:b6:b1:
5a:2b:73:0f:52:77:24:ee:ec:83:b3:d7:97:69:78:08:b6:8a:
98:2a:68:b8:9d:25:95:b1:a9:55:e6:fa:81:85:d3:22:42:b0:
6f:b2:d0:f5:f9:08:ea:80:bf:a3:56:95:7a:5a:d4:9c:ee:7a:
06:e1:96:7a:31:80:f2:d3:8e:7c:3e:a0:d0:12:df:7a:81:71:
e4:fa:b3:70:ef:2f:8b:25:7b:86:52:da:f5:e0:03:24:6e:3d:
35:85:b1:5e:79:3c:f9:44:10:09:69:9a:92:67:96:1e:db:56:
c6:cb:86:3a:5f:93:82:67:f0:da:a0:35:f7:73:0b:08:f1:58:
f2:af:b7:29:d5:b2:f7:df:44:66:e9:21:32:a7:5c:4b:5d:da:
9c:6c:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:51 2026 by rpki-client