
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier: T3dORP0YArfnHt1VBU4kugfozNRFo3Ko+0hl2gUSzL8=
Subject key identifier: 6E:8A:9B:C2:D8:B5:00:B4:74:C3:C8:92:57:44:25:23:89:11:75:79
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial: 01AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number: 01A7
Signing time: Mon 27 Jul 2026 05:54:35 +0000
Manifest this update: Mon 27 Jul 2026 05:54:34 +0000
Manifest next update: Mon 03 Aug 2026 05:54:34 +0000
Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: pf5/LBYaXhv5lx0BZinM3HWkzb+vbQPU++fhU5gtY4c=)
2: 150427207ADC11F19849D5B474A30FBC.roa (hash: LPSfyrjFtmZd5dQ1E/AZ0uGCOSVP/h9k3xx6rrDu3bk=)
3: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: 80SnbVxPivXWHEwHHqV8hYnrOqhwI1EXSpGak/LvQw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
Validity
Not Before: Jul 27 05:54:34 2026 GMT
Not After : Aug 3 05:54:34 2026 GMT
Subject: CN=6a66f29b-9040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:24:7d:1c:f1:8f:50:2a:71:83:03:56:6a:
6d:93:97:8f:10:c2:80:5e:46:f9:ed:83:aa:57:6f:
b5:c0:d8:a2:bc:71:7f:8c:1e:5c:3a:e9:c8:ec:ec:
3e:07:f7:a6:38:d5:f7:0e:98:a7:e4:9c:3e:b7:bd:
5a:e3:b8:6f:fb:db:43:54:cc:f8:21:fb:10:ed:23:
77:db:8d:5f:cd:00:34:6e:d4:2d:d9:f2:12:41:78:
78:39:b7:0a:33:f1:3f:9a:a6:1a:a2:97:b1:57:57:
ce:5c:4d:b4:b6:66:b9:61:93:92:63:95:e6:0a:e7:
f9:ae:23:56:7e:9e:3b:0f:10:28:2e:fb:b1:a3:89:
db:fb:04:84:f9:28:46:ad:e9:cd:9c:d5:7c:db:c9:
7b:d8:9c:42:06:a0:7e:04:47:d7:ff:aa:3a:c8:1c:
7b:3e:9e:85:aa:a1:c7:e1:ba:2c:62:be:02:f5:49:
57:ee:c2:f9:b4:d4:9a:9a:e2:5b:6b:dc:c9:26:92:
85:83:c1:16:f8:e8:f8:ed:4b:c3:37:37:b7:91:a4:
e9:22:e4:dc:00:24:46:aa:df:72:82:38:33:1c:d5:
15:b3:42:fc:2a:2b:24:d6:fa:8a:d0:86:b6:91:bc:
ff:36:79:5e:96:43:2e:e5:32:28:37:d2:a4:c1:f6:
aa:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8A:9B:C2:D8:B5:00:B4:74:C3:C8:92:57:44:25:23:89:11:75:79
X509v3 Authority Key Identifier:
keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a5:41:60:33:0e:b1:a3:30:9a:7a:3d:55:e6:a6:52:ce:cf:
41:f7:d5:ab:b3:b7:e6:38:45:ab:49:51:fb:b0:1b:33:ba:26:
f5:c7:b1:b1:2b:35:12:e7:ae:7e:99:1a:fc:b9:74:96:82:fd:
97:5e:78:88:0f:36:2d:3f:e7:b3:e6:76:cd:06:85:63:aa:30:
e4:f6:9b:1c:db:e8:8e:3d:a3:4c:d1:bd:b2:5f:cf:be:3c:33:
36:ee:0b:f9:cd:47:ce:d3:63:f0:2d:92:e6:04:8d:e6:50:fa:
b3:15:85:1f:08:26:3d:b9:10:ca:05:ec:ab:57:b0:cf:ff:97:
85:3b:fb:c0:05:a5:1b:04:66:a2:39:75:d3:4f:fb:b5:19:ad:
69:e8:c2:0f:3e:fe:b2:bd:37:f4:c7:e2:95:4e:34:55:71:c6:
5d:15:5f:85:bd:6a:a0:c3:b3:fb:53:33:b6:95:9f:e1:fa:03:
80:10:80:9b:d7:99:0a:2f:9f:05:fe:01:96:8c:86:d4:d9:9d:
a7:50:c1:4a:fb:82:27:a6:34:c6:87:98:b1:c8:f4:59:2c:b8:
b9:40:ef:c0:44:e6:4f:37:33:3d:a2:79:67:6b:d4:1c:7b:7b:
f1:89:e4:ae:2b:2e:21:23:e5:b6:71:ba:6a:5b:41:d0:d1:69:
fe:9c:f3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:13:29 2026 by rpki-client