
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json)
Hash identifier: QjHlo0+zyLMvG7so+km8xKfZJxakqmv0SbGfsr14N/Y=
Subject key identifier: 04:C0:92:76:8C:FF:2C:6C:3A:0D:AA:50:99:1D:8C:2F:6D:1F:C0:30
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: 0104
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
Manifest number: 0102
Signing time: Mon 27 Jul 2026 08:15:43 +0000
Manifest this update: Mon 27 Jul 2026 08:15:42 +0000
Manifest next update: Mon 03 Aug 2026 08:15:42 +0000
Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: R3sNfnI5MIzUwFMhbEvqoG+2F9R3mCM0vzFT/fLyQvo=)
2: 394CC63C2D2F11F19323886DBB833773.roa (hash: 45eCaBsMYY5Dq3/DduTYtQquofDXNyzGbOAJxOjVzdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:15:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 260 (0x104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: Jul 27 08:15:42 2026 GMT
Not After : Aug 3 08:15:42 2026 GMT
Subject: CN=6a6713ae-fde8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:d8:f7:40:69:2f:0c:0e:93:07:f0:a0:d1:
33:ff:76:0b:5e:cb:1e:5a:05:56:98:4d:cf:7e:39:
02:59:4d:4d:da:07:15:06:7f:3b:6b:c0:2e:32:db:
75:d1:51:5f:3e:19:4a:4b:18:6e:75:5b:97:e3:a4:
37:ec:17:e3:5d:4e:0b:3f:da:e3:da:90:44:2e:32:
b0:f7:37:4a:bc:a4:42:08:9c:d9:f5:35:f4:30:9b:
48:3e:ce:21:29:d1:69:67:c1:a7:33:89:ff:04:84:
1f:43:51:28:8c:d9:b0:c7:5a:35:38:63:2b:89:38:
1b:c2:eb:6b:56:22:2a:ff:d8:25:d2:b4:24:28:de:
46:64:ab:b7:d7:46:4e:43:8f:40:f8:db:0c:00:04:
dd:8c:2f:03:db:d7:51:41:38:4a:02:ef:3a:61:84:
b1:8b:b0:f0:ba:eb:bc:67:17:0d:d9:c8:af:94:99:
b1:98:0c:46:dc:ca:9b:3f:08:61:95:7d:35:e1:bf:
6a:ee:f2:88:60:40:79:b2:56:9c:74:0a:73:0c:ad:
64:56:99:7a:f5:1c:0c:0b:57:a8:2f:13:e3:f1:f7:
28:b1:31:bc:87:72:6b:d2:92:58:45:cb:e4:9b:7c:
e0:0b:22:ee:72:cd:49:85:5e:c2:b3:6b:3d:bb:34:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C0:92:76:8C:FF:2C:6C:3A:0D:AA:50:99:1D:8C:2F:6D:1F:C0:30
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ea:ae:30:12:7b:12:64:cc:2d:9c:14:42:34:a6:9c:ed:d9:
46:8f:98:3e:9c:8a:4a:a7:03:a4:db:37:5f:22:7e:24:12:92:
b8:64:14:b5:7d:61:aa:27:03:7c:41:44:97:2f:19:68:f7:0b:
a7:a5:2c:25:9d:8a:a5:69:09:89:40:2e:0d:56:96:f5:44:c0:
ce:e0:08:7a:fa:fc:02:57:ea:de:23:3f:44:73:9d:86:01:36:
1b:9e:e4:35:36:a0:e2:fa:b4:36:1c:37:7a:ee:21:0f:35:c7:
7a:67:b2:fe:1a:91:1d:79:82:d2:5f:d1:bb:8a:ae:97:62:fd:
8c:b7:fe:7d:f7:25:a8:51:8f:02:cf:d5:2c:dd:b1:84:b0:9a:
f1:70:98:d0:9c:34:51:2e:ca:ea:37:10:d3:c8:7c:65:28:66:
e4:dd:50:da:a2:06:a7:3f:a9:9d:c6:d3:82:33:70:37:87:75:
3c:85:5f:74:bc:1c:93:41:8d:a7:a6:80:6d:9c:a5:a0:ce:d3:
62:3c:d0:48:d0:a9:d9:55:1c:51:79:b7:c0:18:ad:f6:ce:8f:
e5:d6:8e:a9:fd:79:ce:6b:54:20:32:ba:f5:4c:6d:8f:87:4f:
1d:10:15:22:d2:fa:24:fa:e8:2a:00:38:1b:45:55:2c:8d:ec:
7b:12:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:23:39 2026 by rpki-client