
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json)
Hash identifier: ag4s2vOamLPV+qQyxn41ADU91QjexfMETW/NbsrCJXc=
Subject key identifier: EF:42:92:4A:3E:CE:FA:EF:4A:BE:98:EA:65:46:79:EC:26:8A:BE:80
Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B
Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
Manifest number: 0195
Signing time: Mon 27 Jul 2026 06:15:54 +0000
Manifest this update: Mon 27 Jul 2026 06:15:54 +0000
Manifest next update: Mon 03 Aug 2026 06:15:54 +0000
Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: RQ53Oq8d4kD6gPKBGYxQJRGcVrdB1uvIbU6b7TMjaPU=)
2: 7B6E133A61D911F0822B8C0CC4F9AE02.roa (hash: VZQ5HmNTBpwk9Ml5/WJR942fN8on4eqSYDwAFivaZPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl
rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 06:15:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B
Validity
Not Before: Jul 27 06:15:54 2026 GMT
Not After : Aug 3 06:15:54 2026 GMT
Subject: CN=6a66f79a-8fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:77:b0:3d:ab:05:4b:c2:7d:02:3b:a5:20:fb:
5c:bc:91:51:2a:37:9b:3b:83:65:ca:c1:9b:ca:b2:
d3:bf:31:39:69:26:6a:e6:02:6b:c4:f5:4c:38:d8:
e2:73:8b:42:d4:7f:0d:45:1c:bd:b6:d6:ec:79:d1:
8f:d6:b6:21:56:96:82:93:af:41:8b:f2:c9:02:9f:
f5:43:04:68:32:68:9e:e1:dd:d8:e0:fe:0a:97:60:
8b:52:46:15:e5:02:3a:e8:28:70:1e:cf:4c:9e:ca:
9a:a4:7c:1d:26:10:f3:0a:b2:60:60:4f:5d:1b:c2:
3b:15:89:7f:6e:86:6e:74:de:af:4b:be:78:34:14:
d9:94:0c:81:49:0d:a5:fd:93:74:72:e6:fb:c1:37:
f4:7c:50:84:10:e2:0e:ac:56:89:85:24:40:83:84:
e3:fc:42:58:2e:8d:44:e0:47:db:52:ff:f5:85:e3:
3b:c5:25:b7:bc:d2:a1:35:4b:7a:7e:ad:a9:38:7c:
98:25:56:cb:f8:a7:b3:b3:d9:ae:ff:b7:2f:39:88:
02:dd:cd:32:54:c7:71:c2:05:4c:10:f3:1f:0a:e5:
c2:3d:a8:e5:92:b9:e7:db:7b:ad:74:5b:f8:e1:8d:
4d:51:94:ea:87:3a:46:ee:51:62:66:f9:92:4c:3a:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:42:92:4A:3E:CE:FA:EF:4A:BE:98:EA:65:46:79:EC:26:8A:BE:80
X509v3 Authority Key Identifier:
keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:e2:61:c5:d8:7e:47:f4:a2:08:88:da:af:fd:2e:db:4f:b1:
44:9f:e0:5c:39:c1:fa:a8:de:ae:7b:53:12:4d:ec:88:07:6a:
77:49:90:ba:ce:09:a5:8d:32:06:1c:7a:62:60:c0:bf:2f:5b:
65:d8:ea:45:85:a5:83:f0:21:73:27:d7:01:a2:52:00:2c:46:
e9:93:19:03:8e:4b:eb:2d:fb:7b:54:7e:01:8f:88:d3:3a:40:
98:6b:9c:12:8d:bc:57:97:ed:68:4a:ab:ab:93:4d:14:b1:7d:
54:b3:31:2e:7b:ed:2c:70:38:d9:1f:99:5e:fc:29:a5:f4:c3:
45:8b:7e:9f:fd:ee:ca:bd:f4:52:ee:56:03:8f:0c:80:62:45:
36:85:e4:74:bf:9e:bf:25:71:ca:4c:cf:80:cc:c7:a6:6b:b4:
f1:a0:8f:5d:1f:3a:0e:89:cf:af:59:e7:a9:23:77:56:20:71:
aa:f6:2c:61:9b:6a:84:4c:b0:97:8c:9c:c6:8b:9e:1f:7d:1d:
ea:fa:8a:96:7d:73:b8:2b:16:47:ff:02:49:38:97:d7:37:e9:
8c:2b:66:b2:5a:94:14:a6:aa:dd:2f:c7:7b:62:1c:27:82:1f:
cf:e8:f5:8e:e4:b8:f8:f4:82:23:de:09:1b:78:de:5d:ec:c8:
da:5d:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:42 2026 by rpki-client