
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
File: vbWSaolrtlGg51QKOYzV7wcUFx8.mft (raw, json)
Hash identifier: Eq8pBG15T7zIm427aci5G+ZD0x5EAyBzk/gYtxT9Yt4=
Subject key identifier: 65:AE:09:64:A7:91:1D:B8:D9:6B:2A:A7:60:9A:F3:9B:66:51:1A:73
Authority key identifier: BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
Certificate issuer: /CN=A916A5CD/serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Certificate serial: 0529
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
Manifest number: 0516
Signing time: Sun 20 Sep 2026 23:26:38 +0000
Manifest this update: Sun 20 Sep 2026 23:26:37 +0000
Manifest next update: Sun 27 Sep 2026 23:26:37 +0000
Files and hashes: 1: vbWSaolrtlGg51QKOYzV7wcUFx8.crl (hash: oL4aQr0oH4iG2PMxlFCc3I+Rl0oBZCrsOEHmGZDqh0w=)
2: 66864FCE688011ECAA829E31C4F9AE02.roa (hash: oTwsosYR7qPA588mHLZ56TR8yUV0D8Vyzewy1czbsfc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1321 (0x529)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A5CD, serialNumber=BDB5926A896BB651A0E7540A398CD5EF0714171F
Validity
Not Before: Sep 20 23:26:37 2026 GMT
Not After : Sep 27 23:26:37 2026 GMT
Subject: CN=6ab06bae-a637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:04:26:9d:7e:4a:27:df:25:e5:5f:57:ff:
54:66:a1:e9:ba:25:e3:d4:4f:4e:89:82:fa:af:5e:
3a:4f:23:0a:14:69:3f:cf:19:83:aa:4d:f8:59:9e:
20:9e:54:78:bf:d3:43:a9:88:96:9c:88:5c:60:34:
d1:ef:6e:65:72:dc:d9:a7:35:53:f1:4a:3c:1f:c5:
79:12:00:96:4d:95:79:af:ae:02:68:77:82:52:2c:
06:07:65:70:e1:fe:83:79:c2:6e:27:bb:5b:4f:21:
c4:d9:78:3a:2c:7c:61:d3:46:63:2b:35:cd:3d:6b:
11:3a:c6:75:ec:c4:43:b4:ed:af:bf:68:81:82:86:
b6:ab:c2:b7:ab:39:24:20:34:df:60:05:51:d8:6e:
8e:11:be:28:28:92:76:7c:48:22:ca:5b:32:06:c9:
44:b8:fa:c4:72:ea:48:15:dd:ac:4f:5e:3c:bc:07:
31:b8:3d:ad:d4:d7:7b:77:65:33:43:20:53:02:57:
ed:90:28:04:fe:37:51:e1:28:e5:a0:7e:a3:f3:b5:
0a:80:e6:c5:31:19:a1:a1:fb:8e:da:ae:83:f9:bf:
d8:54:fd:9a:f8:08:86:17:e7:cf:f0:78:b9:8e:14:
70:ec:e8:68:4f:41:af:04:d7:c7:70:c7:5d:1e:a4:
2d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AE:09:64:A7:91:1D:B8:D9:6B:2A:A7:60:9A:F3:9B:66:51:1A:73
X509v3 Authority Key Identifier:
keyid:BD:B5:92:6A:89:6B:B6:51:A0:E7:54:0A:39:8C:D5:EF:07:14:17:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vbWSaolrtlGg51QKOYzV7wcUFx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A5CD/29436FCE687C11ECAA26B959C4F9AE02/vbWSaolrtlGg51QKOYzV7wcUFx8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:da:6d:46:8d:f5:01:65:9d:f0:2f:c3:9b:3f:96:ed:5d:f5:
7b:53:44:45:79:b2:ef:4a:80:ac:05:81:20:8e:3c:30:04:06:
44:9b:c9:51:3d:5f:41:d6:7d:6a:29:bb:02:9d:d2:a6:95:16:
8f:c0:f4:e7:8c:d7:20:47:a2:4c:93:af:c2:eb:a0:d5:7d:58:
20:70:5a:06:34:8e:00:1f:1a:58:64:f7:4d:79:2b:28:56:67:
ba:bd:0f:2c:c6:ae:ac:ff:cc:87:3b:78:37:99:2b:23:2f:6e:
c2:af:a1:91:f3:14:a6:58:11:9f:63:02:ad:31:bf:4e:4d:e5:
03:96:24:c5:51:17:ec:37:fb:39:20:2d:83:8c:62:c6:af:c7:
30:0b:31:b9:60:26:33:50:9f:36:a7:51:e6:9f:63:94:43:38:
90:7b:2d:f3:c0:04:fd:2f:3d:79:d5:7d:29:23:a1:ea:90:70:
e2:85:a5:a5:a4:7b:6d:7d:17:6e:00:ac:41:d2:58:0f:9d:81:
96:1c:f5:7c:ce:bf:2f:65:76:de:72:4f:86:1c:70:d5:36:66:
42:81:9e:3d:55:bb:47:19:37:a4:15:5f:60:0a:32:91:43:63:
8e:37:34:07:f5:6a:2e:b5:71:bd:29:d5:af:10:ea:12:be:cf:
88:b0:06:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:56:19 2026 by rpki-client