
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier: Y9QtnSqtauYKA0P2ffCt+TUfPWqSQWJNDszPR5uUh0c=
Subject key identifier: 87:F0:8F:48:44:11:FF:A9:EB:2A:D1:39:0E:DE:58:65:69:3E:A5:10
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial: 01CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number: 01C6
Signing time: Fri 25 Sep 2026 03:53:28 +0000
Manifest this update: Fri 25 Sep 2026 03:53:27 +0000
Manifest next update: Fri 02 Oct 2026 03:53:27 +0000
Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: JfA39vDymOHsjGVxeWNaTbOmctfetNpTVj+Q70KorSc=)
2: 150427207ADC11F19849D5B474A30FBC.roa (hash: LPSfyrjFtmZd5dQ1E/AZ0uGCOSVP/h9k3xx6rrDu3bk=)
3: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: 80SnbVxPivXWHEwHHqV8hYnrOqhwI1EXSpGak/LvQw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 03:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 462 (0x1ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
Validity
Not Before: Sep 25 03:53:27 2026 GMT
Not After : Oct 2 03:53:27 2026 GMT
Subject: CN=6ab5f037-0caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:ec:56:6e:95:de:d4:af:93:58:db:69:29:
6e:ee:bd:0c:e4:d6:fd:4a:a3:5a:78:85:58:3e:43:
54:da:d6:61:10:32:d7:4c:df:6a:fe:a9:b5:06:20:
cc:65:0d:e3:38:99:fb:08:ca:7e:dd:bf:11:ca:e2:
e9:b6:59:b6:be:cc:98:28:14:cb:fa:93:b5:78:d1:
7e:03:7d:ae:a7:c6:27:2f:d8:bf:df:fe:44:da:5d:
f4:fc:93:52:3f:d5:82:ad:15:fd:d3:e8:bb:54:37:
4a:f1:ab:fa:c2:ea:9c:3e:63:42:c2:d5:d3:a5:97:
2c:01:c9:5b:a4:7f:7d:72:49:90:d1:31:8b:ab:2d:
c7:81:8d:8d:b6:02:b0:17:06:90:0c:5f:3b:a4:c8:
c1:11:4e:26:8b:37:6c:c5:d4:0f:a7:6e:b4:c3:7c:
91:d0:a6:a2:f1:74:15:cd:58:92:9b:16:d3:bb:2a:
4f:7e:11:ab:74:3e:64:8a:ad:2b:94:28:50:ba:d4:
c7:67:ad:1a:c3:75:a6:a5:a6:b2:c8:88:1a:92:16:
ac:b2:69:7e:cb:0b:50:39:a1:35:c9:4e:13:38:60:
2c:25:a7:dc:5e:d6:bc:20:d3:2f:64:b7:37:c0:70:
8e:85:2e:07:1b:d8:97:8a:a9:23:d4:58:b3:2a:e0:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F0:8F:48:44:11:FF:A9:EB:2A:D1:39:0E:DE:58:65:69:3E:A5:10
X509v3 Authority Key Identifier:
keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:91:2c:bb:00:bf:ab:26:6f:db:53:7d:f2:38:a8:ff:4f:c1:
7a:31:6c:72:3f:c7:0c:9c:0b:2f:de:e5:6e:89:bf:4c:a1:2e:
25:df:62:3c:c5:3a:54:5a:b9:7e:9f:dd:cc:d0:a8:0b:f0:6b:
51:54:59:2f:11:f2:7d:57:d0:92:9b:d4:b2:7f:31:77:14:71:
f6:b9:a7:80:7f:3d:1b:48:ef:2c:e3:4d:e9:d4:37:f9:5a:0d:
81:1d:2b:6e:ff:ce:3d:82:cd:29:3a:37:df:2e:55:b8:cc:ac:
ce:d9:de:36:91:6f:d5:6d:c3:64:94:8e:e9:99:dd:49:2d:c9:
96:ef:b9:ee:c9:50:72:36:e6:e3:26:ed:51:5f:4d:67:4b:e8:
e1:88:27:ad:29:02:12:ac:ae:ad:cf:08:4a:31:b9:b9:4c:53:
98:fa:fd:67:11:85:4e:3d:18:97:8c:fb:24:77:c8:15:e9:7c:
4a:a3:1d:d9:b9:36:15:40:b9:c6:b5:ff:6a:3a:8f:a1:99:85:
11:84:fc:6c:ce:ef:23:f4:7c:fb:75:31:24:2a:fb:91:f3:4a:
13:7c:6a:66:21:b5:3e:f7:79:b7:3a:7b:1d:86:67:dc:7e:72:
3c:9c:ca:c9:7b:8e:ff:0c:19:35:d2:f5:8f:65:7d:c2:30:6d:
12:8d:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:20:18 2026 by rpki-client