
$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json)
Hash identifier: mp61GZ1N4gnysPnExaFbOWCJzeZcUusl/pFi5C/yA2Q=
Subject key identifier: 6F:E5:94:27:44:60:B5:F9:17:C6:41:D7:85:E1:B1:A0:30:EE:FD:D7
Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
Manifest number: 02A4
Signing time: Sat 13 Jun 2026 02:23:03 +0000
Manifest this update: Sat 13 Jun 2026 02:23:03 +0000
Manifest next update: Sat 20 Jun 2026 02:23:03 +0000
Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: bP+x7Fl+s06XWxSBvGDofJrcKeCwNXRWa5g3DVtUTec=)
2: 05F505961AA311F0A475D464C4F9AE02.roa (hash: oQQPkdpT5DDBLU1PWyqZU8Cg3jPky7F7z6ow8HBZGoM=)
3: 232F9552F80D11F0AED4E007706F56BC.roa (hash: eD9gDioCM5S2wQWIRX8fMwbM0baYsT5u8C/4wCogM+E=)
4: 23852F72273711F1B6AB5B98AD833773.roa (hash: ektQBShXJ5BEKzyA8visW0s0Qg76mbW8+8RclzWr6k4=)
5: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: fZlLSWyhk+jtQ34uhpkIw+sRdlD+d7ZiPx48gzF1SuI=)
6: 020607A2498711EFBB260663C4F9AE02.roa (hash: TsRQV86ABpakyFtq/EQ6oWMagaNXmmZwXudJvyvhgkQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004
Validity
Not Before: Jun 13 02:23:03 2026 GMT
Not After : Jun 20 02:23:03 2026 GMT
Subject: CN=6a2cbf07-07f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:0c:f8:ea:84:1f:be:61:05:0d:ec:c1:23:
ef:c4:af:f4:3e:dc:60:8c:55:ac:ea:aa:94:ba:7c:
da:ff:e9:ab:c4:d1:ba:0e:91:dd:4c:1c:13:c3:e6:
fc:e8:ad:ba:ab:7e:da:8f:db:70:3f:43:4e:db:8d:
40:dc:82:15:e9:54:3b:db:6b:0b:9f:f8:97:c0:47:
e2:e6:ff:e5:94:23:d7:01:71:40:c3:0e:b7:cb:1b:
c7:b2:43:cf:75:03:17:87:11:c6:63:2f:c8:15:d0:
3a:42:1e:31:74:e7:92:62:65:30:9c:2e:35:4d:ea:
f6:9a:20:62:ee:24:88:33:24:54:eb:9a:10:59:0a:
1d:3f:49:2f:4a:f7:29:bb:a0:ba:e3:3f:62:fb:e3:
87:17:3c:66:73:d4:7c:25:1e:68:4e:cf:df:57:30:
0e:20:18:15:e4:2b:64:27:56:52:b3:b9:fc:ec:a3:
b0:9c:17:85:34:aa:1c:bc:a8:99:84:54:0f:f6:fe:
8b:ea:b7:62:1e:c7:87:e5:6d:15:41:84:99:55:58:
e2:a6:3c:0e:d0:64:27:c5:70:c3:19:de:77:b8:bf:
3b:10:03:ff:90:22:9b:f0:b9:6e:22:07:dc:a6:8c:
8e:97:53:b8:3a:32:4e:61:37:9b:97:56:6e:4e:bb:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:94:27:44:60:B5:F9:17:C6:41:D7:85:E1:B1:A0:30:EE:FD:D7
X509v3 Authority Key Identifier:
keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:94:51:76:27:63:22:29:28:e7:66:a0:70:4a:d0:4d:6b:84:
fb:53:2f:40:17:d3:cc:fd:37:4a:73:21:20:ec:78:1a:11:3d:
82:8d:59:a9:6a:d9:d6:fb:4e:1b:91:ac:b8:a5:f8:4a:ef:16:
b5:cf:f0:19:37:65:3e:c9:1f:d7:fe:53:fa:e6:a7:50:ad:4e:
3f:20:a8:4a:7d:88:76:da:40:02:68:39:80:09:ff:09:37:4b:
50:ef:2e:53:e6:1f:95:fe:88:cc:04:2b:3e:0a:3f:94:f6:b3:
36:74:c8:2b:f7:a4:d8:92:fd:60:2e:b1:2a:3c:f0:6f:34:56:
ed:ab:15:95:25:4f:10:3f:33:f8:92:2f:b4:f8:9d:b4:fb:86:
f9:45:54:77:45:26:05:15:9b:67:62:2d:99:2f:07:e3:47:7e:
66:85:1d:66:be:e0:11:ce:8f:a6:a7:75:ba:11:4f:1a:91:7f:
b2:b6:f1:26:15:a9:90:2c:55:57:8c:68:24:eb:c7:bb:53:24:
fd:bb:77:2f:c8:b5:d0:f1:82:72:1d:dc:1c:fc:4b:be:89:a5:
3e:67:35:29:7d:09:f3:4e:50:a5:1f:6a:63:fb:aa:b3:8b:b7:
cf:16:1a:3d:e9:64:d8:b1:fe:21:fb:27:3f:56:d2:47:0c:5c:
16:1e:44:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:14:27 2026 by rpki-client