
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json)
Hash identifier: Mfk/ojs9h2OZq5MyQql/l8Sz4u0qWoi9VInQ/SklWRo=
Subject key identifier: 7D:A7:05:38:63:FC:5C:14:EC:1B:8C:C8:2D:8C:76:27:34:18:37:D8
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: 012F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
Manifest number: 012C
Signing time: Tue 13 Oct 2026 06:24:18 +0000
Manifest this update: Tue 13 Oct 2026 06:24:17 +0000
Manifest next update: Tue 20 Oct 2026 06:24:17 +0000
Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: yA5Z42R9rDBpGCcu7RjUxJpDO/Fowkm/IlqJybiP46M=)
2: 394CC63C2D2F11F19323886DBB833773.roa (hash: UcIR8DxPXmcFWmxr+PON26bbeeLTamW0ObYvmvntKx4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 06:24:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: Oct 13 06:24:17 2026 GMT
Not After : Oct 20 06:24:17 2026 GMT
Subject: CN=6acdce92-8c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:fe:98:cc:0b:cd:4e:b1:22:ad:66:fb:67:
4a:f6:8e:37:11:e7:49:ff:07:a6:55:31:09:eb:83:
b1:79:3b:1a:40:a9:99:2f:77:7b:5f:7a:15:52:ce:
34:42:dd:dc:5d:21:43:51:3f:4b:85:05:84:68:03:
84:49:b3:23:c3:5c:ab:be:dc:15:0d:a9:ad:7a:47:
f6:b8:50:93:78:a5:98:70:03:b6:f4:8d:db:53:32:
b8:f3:89:a1:42:4c:cc:e3:61:63:33:b8:90:b3:37:
da:4e:58:5f:99:3f:c5:39:6d:f1:9a:a8:6c:aa:0f:
23:1d:0c:20:54:16:51:57:db:5a:35:9a:cb:fd:f4:
65:2e:dc:0c:c9:09:be:55:32:11:a3:06:ad:59:57:
31:1e:b3:74:75:95:2b:1f:ad:e1:40:7e:e2:89:7c:
59:e8:54:05:b9:40:37:3a:9d:9a:d5:dd:af:cb:73:
ff:a0:da:d5:5d:d8:bd:0a:16:30:e5:62:3a:b2:51:
0d:3a:9d:ae:64:7e:36:56:c8:29:40:79:50:ad:34:
f1:1e:af:4d:dc:08:53:65:10:e0:32:d3:84:0e:48:
1f:a6:9b:28:a7:65:7c:a8:22:c4:1a:29:20:ed:e3:
01:e3:63:25:8f:b6:73:09:e2:d5:b7:ea:3e:c5:ee:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A7:05:38:63:FC:5C:14:EC:1B:8C:C8:2D:8C:76:27:34:18:37:D8
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8f:4e:dc:f6:39:40:de:3e:06:c9:8a:ae:bf:e7:f5:be:31:
09:b5:74:46:ef:3b:37:88:5f:8c:e9:d9:e5:5a:d8:73:56:3a:
af:bb:21:ea:b8:c0:34:60:81:bd:9c:34:a5:ef:1e:8c:bc:3a:
ec:f0:96:5c:fd:49:01:71:b5:c1:c6:10:a7:64:a0:14:00:60:
1e:98:a0:0e:94:be:bb:ed:9a:fb:4e:3b:5a:bb:c8:c1:6a:85:
40:1f:91:30:7f:76:66:cf:6f:de:4d:b6:3c:7e:25:2a:3b:d2:
e4:91:48:53:02:f3:31:31:cf:87:d8:40:0e:5d:91:3f:53:c5:
0a:72:77:ae:bf:f8:a3:da:7a:29:f5:86:ed:45:27:27:f8:2f:
03:9e:e3:c2:07:85:a9:e4:60:82:29:39:80:f7:b8:64:00:bf:
f9:38:fb:f9:c1:91:78:75:d3:fb:a2:11:cc:a8:23:02:3e:8b:
0f:8e:8f:ed:86:27:7f:d7:73:69:10:99:e9:5b:02:d2:5e:17:
79:6f:2f:a9:02:d0:81:0e:2c:50:68:1f:25:cb:ba:c3:f9:af:
64:67:53:18:ef:25:da:c8:38:84:4f:5d:7e:1c:67:ba:10:7e:
19:f8:ef:88:a7:7e:9c:6b:b3:28:4f:ca:c0:d6:e6:f0:6e:39:
87:ae:be:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:39:38 2026 by rpki-client