
$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
File: vcSlFjMX9zCX8CejQrhgp5LX8dw.mft (raw, json)
Hash identifier: w1a388Y/DJr8kfgGUiBkQSkSoWx/ekM794QQUSItA1g=
Subject key identifier: 20:E4:83:71:FE:6E:2E:A2:D2:0F:AF:BA:B9:3F:46:99:70:08:A7:9B
Authority key identifier: BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
Certificate issuer: /CN=A9179F64/serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Certificate serial: 0127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
Manifest number: 0122
Signing time: Sun 01 Mar 2026 06:48:29 +0000
Manifest this update: Sun 01 Mar 2026 06:48:28 +0000
Manifest next update: Sun 08 Mar 2026 06:48:28 +0000
Files and hashes: 1: vcSlFjMX9zCX8CejQrhgp5LX8dw.crl (hash: ETmwNoITOyqK22nYtYMsYL4tphzJJ60S/+r3C3ziXto=)
2: DEF27D12B32111F0B1CD4673C4F9AE02.roa (hash: KSK87NNXC+G0msQF41JpGQoKY5onOaTJMTRkPWJH/M0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:48:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 295 (0x127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179F64, serialNumber=BDC4A5163317F73097F027A342B860A792D7F1DC
Validity
Not Before: Mar 1 06:48:28 2026 GMT
Not After : Mar 8 06:48:28 2026 GMT
Subject: CN=69a3e13c-7da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:04:b3:95:9c:ee:2f:28:5c:8b:97:88:4d:
1c:33:17:52:00:c9:fc:be:e1:79:85:0c:90:93:02:
40:9b:1f:34:8d:af:6a:34:d7:bb:bd:d6:64:70:09:
6b:0b:12:cd:ff:0f:e1:cb:e4:32:41:cc:0b:39:99:
55:b0:ec:50:8d:03:e8:d1:13:38:01:6c:a0:e5:81:
05:bc:c9:55:52:75:af:3a:14:e7:58:3c:25:25:0a:
f8:b9:62:93:f8:fd:c3:57:58:97:42:2e:b4:81:8b:
02:0c:d8:6e:a7:c4:fb:2d:23:72:79:1c:eb:1d:a8:
26:20:3b:81:06:0f:1e:14:62:55:1b:b1:12:f2:c4:
4f:aa:e8:4e:79:63:b1:c2:dd:35:47:06:a8:77:d7:
7a:0a:94:02:60:b7:e5:01:31:c1:6d:7c:64:65:95:
ac:51:4a:57:67:c8:c7:b4:17:4a:86:1f:87:08:e9:
6b:03:c6:a7:54:17:8c:f9:39:de:93:2a:7d:37:5c:
dd:a6:d4:ca:26:8d:d8:be:bf:53:af:75:ad:23:b4:
86:b9:a3:5e:a1:e4:fa:8b:82:cd:ce:fd:93:b6:93:
08:82:0b:40:35:5a:32:39:4d:7f:1d:75:f5:09:f6:
82:9c:59:a6:2a:7a:a7:3c:bb:d3:ab:8f:fc:66:d3:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:83:71:FE:6E:2E:A2:D2:0F:AF:BA:B9:3F:46:99:70:08:A7:9B
X509v3 Authority Key Identifier:
keyid:BD:C4:A5:16:33:17:F7:30:97:F0:27:A3:42:B8:60:A7:92:D7:F1:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vcSlFjMX9zCX8CejQrhgp5LX8dw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F64/80938464624B11EFAB120F4FC4F9AE02/vcSlFjMX9zCX8CejQrhgp5LX8dw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4e:13:42:1a:5e:dc:ba:f2:d9:6d:5f:a5:51:f1:bb:7b:ea:
b3:ca:fb:81:03:0e:16:92:f8:90:94:37:f4:73:17:05:28:53:
65:00:7e:1b:1c:1d:bf:65:92:14:29:17:df:a0:c4:e9:fd:7a:
29:47:6c:65:d4:80:1b:9f:bd:67:27:3b:5c:c3:06:b7:4d:ce:
6b:8c:4f:f9:17:e5:83:6c:c0:62:1f:06:ae:2a:13:6f:25:c3:
ab:2b:79:a3:08:ef:d9:42:84:75:d7:c4:19:13:1d:c4:ca:a5:
9c:5a:07:3d:ec:52:4e:1b:6c:1b:65:1e:34:fc:d6:00:8c:32:
cc:db:e8:fd:fe:aa:cb:e2:a7:b7:58:31:2a:b0:4e:13:da:3b:
c6:17:84:d4:11:c0:f8:39:b3:e2:f7:b1:70:68:06:73:7b:69:
90:84:c1:81:10:11:00:92:86:a0:a6:fb:21:41:cb:d4:63:b6:
06:da:a2:ae:8a:0a:02:6b:d5:d8:cd:5e:ee:26:e9:53:a3:be:
fe:b6:ec:9e:63:df:3e:56:54:2f:23:68:b6:80:b0:de:3b:cb:
13:94:12:72:50:9a:8b:62:27:37:4e:d7:29:cc:33:59:df:6f:
89:ef:ce:dd:17:e1:ab:a4:01:82:e3:eb:c4:50:51:13:f4:26:
cd:6b:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:05:27 2026 by rpki-client