
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: 2yZ+rWA9P+NmZYgFEmT5MfZgnXLF4Tpaaj/JzUtCSzo=
Subject key identifier: 39:6E:15:E5:06:6E:C4:65:B8:A6:B5:02:31:99:2B:66:23:56:EA:3B
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 03B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 03A8
Signing time: Wed 29 Jul 2026 01:25:29 +0000
Manifest this update: Wed 29 Jul 2026 01:25:28 +0000
Manifest next update: Wed 05 Aug 2026 01:25:28 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: WvCsK2ox9KZRLct9rYl7eNhPt6Yea4g9YDw0fNkTqKc=)
2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 01:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Jul 29 01:25:28 2026 GMT
Not After : Aug 5 01:25:28 2026 GMT
Subject: CN=6a695689-9084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:c9:b3:80:06:c7:16:06:03:6c:84:51:a3:
ec:b7:93:81:ad:75:37:ab:ef:15:e6:a8:09:05:25:
c5:54:7a:53:6a:0f:5d:6e:f1:64:48:fd:57:45:ec:
45:bf:e2:a8:d6:75:96:05:51:29:89:bc:07:fc:33:
48:be:28:0f:d1:cd:bf:24:37:19:0f:a5:2d:29:7b:
10:52:91:78:2d:14:34:ce:8f:ce:86:90:64:1e:fa:
f9:a2:01:49:04:90:6e:fb:94:67:2a:06:f6:4f:1b:
5f:2f:cc:3c:fd:14:4a:55:91:12:b8:c8:b6:d5:98:
35:8a:17:e3:51:ca:e9:b9:fb:1b:7a:73:f2:b4:f4:
f8:cb:6e:81:23:54:78:f1:71:a0:6a:b1:33:36:03:
f4:61:d7:65:35:0c:95:8e:8e:c2:ea:e9:72:5a:8e:
26:cf:8e:a2:64:16:22:05:c7:b3:23:73:20:60:d8:
fb:4a:ef:0d:df:05:07:f4:00:46:47:99:e1:57:18:
18:b3:ea:20:66:39:e0:ee:4c:69:0f:54:75:48:18:
59:51:81:66:94:22:19:8d:3b:4d:9a:34:b7:49:27:
35:d1:9c:18:8f:59:d2:24:85:74:59:e6:5b:54:c5:
9d:c7:c4:0b:ff:dd:30:99:53:01:17:19:22:52:66:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:15:E5:06:6E:C4:65:B8:A6:B5:02:31:99:2B:66:23:56:EA:3B
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:b2:9c:ff:58:80:0e:57:77:9c:16:6e:f8:f2:e0:7e:10:c9:
8d:ac:9b:2c:1b:43:78:12:d6:38:fd:8c:f2:82:3a:8d:e9:5c:
1b:46:b2:cf:13:fa:93:53:c3:f1:a6:94:41:54:1c:1e:7f:cb:
b3:63:87:9d:a5:1c:a4:88:d3:dd:74:28:91:ad:c8:81:01:9a:
da:e7:98:0a:14:f6:dc:ed:1b:65:4f:65:81:bf:ef:47:79:45:
b5:33:4d:e4:1c:e3:15:f6:d0:73:3b:7c:c0:10:23:e4:df:bb:
4b:d4:78:99:29:04:f8:7a:bc:8e:a0:9e:da:d8:54:dc:08:33:
bd:fc:34:00:8f:4e:47:92:ed:d3:3b:73:b2:a6:e0:f9:ae:c7:
ba:71:99:f0:57:52:64:10:f6:a5:5e:eb:5c:fd:7e:69:81:ce:
71:c1:52:fd:49:c9:2c:28:46:52:9f:37:9c:b1:fd:0c:9e:fb:
f4:f8:e3:d3:ff:3b:0f:00:f7:64:3a:89:81:81:ab:05:c6:70:
16:f1:ee:54:0e:c8:b1:a2:0a:32:7c:ab:17:33:44:5f:d8:44:
6e:d4:af:be:53:a4:78:66:98:72:df:95:e9:f9:78:18:36:67:
e0:58:30:14:2b:f3:2e:f8:18:d4:33:bc:6c:33:e5:98:5a:ab:
15:4b:b8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:53:51 2026 by rpki-client