
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: lFujERGVYibCy1npjazE5zmNi8sSYhX6IcL5tsqwo9U=
Subject key identifier: 26:FA:43:8C:46:83:A7:18:29:38:97:69:B6:36:5D:18:EA:A8:07:D2
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 0380
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 0374
Signing time: Fri 17 Apr 2026 00:44:29 +0000
Manifest this update: Fri 17 Apr 2026 00:44:29 +0000
Manifest next update: Fri 24 Apr 2026 00:44:29 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: 9TVgWQHocoGzQmbFBrnhSm+9USNkX7mFF8X+pyB+MGU=)
2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 896 (0x380)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Apr 17 00:44:29 2026 GMT
Not After : Apr 24 00:44:29 2026 GMT
Subject: CN=69e1826d-5e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:87:34:68:26:c0:ee:97:0e:dd:48:30:36:47:
e6:62:fd:01:07:25:2b:68:de:a9:43:b8:19:a1:a0:
6d:35:40:7a:1f:b2:4c:c3:c1:2b:fa:da:5c:01:5d:
90:65:15:d0:be:24:2f:a2:37:09:2c:5a:c4:ed:49:
64:a7:e2:20:4c:be:8e:5e:aa:6b:f6:c5:4e:4f:f4:
cc:97:3a:3b:89:ee:35:6e:85:6c:1b:de:b5:91:14:
7e:56:36:33:ac:88:da:52:e6:46:24:77:6b:c1:af:
df:d3:85:4f:b5:36:22:31:03:d7:a0:d3:35:f8:83:
58:02:48:0e:97:38:47:ab:9e:7f:e8:60:d0:f8:56:
c2:f3:2e:16:3f:54:fd:ef:e2:0c:f3:79:1b:8c:5f:
4b:27:95:8b:c2:2f:9d:10:be:d0:85:8c:61:17:d3:
9c:db:2b:7f:8c:0c:ef:7e:f8:4b:ac:77:d8:61:54:
77:18:11:b1:05:6b:80:72:ed:d4:c5:69:68:83:bb:
ff:ca:1e:9d:dc:cd:37:88:58:92:7d:ab:99:28:af:
a2:79:73:2e:da:6c:c9:e6:b6:64:3f:ee:0e:b7:89:
75:5a:c4:7b:b6:9a:96:ec:8a:d5:1d:73:c3:7e:2b:
fd:8d:a0:5b:74:b2:28:c3:9b:75:b5:a1:39:b8:29:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:43:8C:46:83:A7:18:29:38:97:69:B6:36:5D:18:EA:A8:07:D2
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:02:80:8a:e0:e8:67:57:31:65:b9:88:a5:75:39:2e:8b:6f:
e0:5a:ef:8c:aa:22:51:a1:85:48:09:23:d4:ac:f7:b9:d2:6c:
26:52:b4:93:b5:02:66:83:77:99:65:05:ad:d2:3d:bc:4c:65:
8f:86:e1:46:e8:1e:1d:9f:53:7a:50:36:5e:6e:1d:54:c6:6e:
a2:ac:c9:29:f7:cd:af:64:41:f4:b2:27:fd:65:da:ad:5d:eb:
42:45:fd:2a:15:a5:53:06:16:3c:44:a8:f4:fd:3b:39:53:a5:
f1:5e:da:76:2b:da:66:d0:93:7b:7d:c4:b5:db:ee:6b:54:9d:
50:f2:e6:0a:e5:a8:9b:8a:79:46:4c:fb:3f:19:79:b7:a0:fe:
a9:4c:e6:75:e9:95:48:fb:58:6a:e6:8d:87:26:f9:44:e7:17:
a0:fd:70:e8:44:e8:47:46:08:43:a5:72:30:ec:d3:1c:3d:b2:
36:1d:1e:2d:0f:d4:51:0e:28:e5:2c:e0:85:6e:46:10:93:d2:
c7:99:b5:f8:ca:24:ce:fc:a6:4b:87:a2:43:9e:08:3b:59:9f:
da:fc:db:f5:39:de:34:3c:92:98:be:38:aa:64:e8:9a:6c:ed:
d0:a5:1a:c1:16:f2:80:ca:75:39:bf:42:02:fd:9f:04:e3:82:
09:2b:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:24 2026 by rpki-client