
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier: 7nat6qmCQDqHg75C15e83SFYYoAJ4jc+tQead0FmRro=
Subject key identifier: 53:36:6C:DB:D0:5D:EA:71:F1:74:3D:6D:84:E8:D6:D7:A9:89:EC:18
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number: 0158
Signing time: Sun 01 Mar 2026 06:02:42 +0000
Manifest this update: Sun 01 Mar 2026 06:02:41 +0000
Manifest next update: Sun 08 Mar 2026 06:02:41 +0000
Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: XkKMDym84Qf6NddI5QHRMpzPk+FRJnai7Yal+OT9zec=)
2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: hQsClVPo6k6KSQkrPXRux2ZE6YMvDs1XKFlnN0n+rhg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 06:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
Validity
Not Before: Mar 1 06:02:41 2026 GMT
Not After : Mar 8 06:02:41 2026 GMT
Subject: CN=69a3d682-0e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:d1:c3:c1:c3:b0:d3:0d:7d:c7:d1:26:c9:
9b:05:3f:26:40:dc:e4:56:f8:4a:34:24:a0:d7:dd:
83:5b:f4:22:43:9c:16:85:c8:c1:e7:6b:f1:fd:d3:
e4:07:6b:86:eb:be:69:f5:ba:a7:65:3d:9e:5d:26:
1b:00:14:17:16:ec:39:16:6e:b8:aa:81:a8:24:68:
8f:bb:5a:64:f4:1c:8f:ce:93:b7:7e:9c:b4:bb:ee:
b9:ba:db:37:21:14:6d:b6:3f:e7:e6:b6:f0:f0:5d:
d5:2d:ae:d3:ac:e4:42:2f:0a:64:99:fd:d1:f1:e7:
64:97:74:15:04:4d:8c:94:bd:bf:27:2b:d4:5b:0a:
71:ca:14:a2:b7:e1:c4:d5:f5:f2:98:56:49:66:91:
bc:a4:6c:41:49:c1:d5:42:6e:84:fe:21:20:c2:0a:
37:3e:37:05:d7:1f:49:55:ac:54:11:8e:b4:33:48:
60:46:1b:19:55:cc:0c:a0:5b:c4:2a:c8:87:b2:16:
37:aa:80:b0:6c:e9:ad:70:d4:cd:1f:45:7a:96:b2:
47:11:c9:44:85:a9:34:bf:1a:cd:48:76:24:c7:ff:
26:8f:57:12:80:94:c6:2e:65:97:2d:c5:78:f9:9e:
8a:6b:a5:3b:7a:ac:81:06:06:e2:b1:43:ce:ea:01:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:36:6C:DB:D0:5D:EA:71:F1:74:3D:6D:84:E8:D6:D7:A9:89:EC:18
X509v3 Authority Key Identifier:
keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:87:56:b7:ea:0d:cd:a8:6a:29:1a:ee:52:32:27:92:53:85:
bd:28:c8:2e:03:e9:51:63:2b:b6:85:d0:6f:31:a3:79:70:a6:
43:52:14:0b:7b:07:1d:9e:ab:dd:69:29:b2:f5:30:1e:59:34:
cf:01:a4:55:06:33:04:65:06:dd:71:d5:a6:aa:4d:7c:cd:0d:
43:32:c3:ce:b8:b8:9c:fd:45:ca:36:1f:b2:36:68:05:75:c8:
69:9d:06:fe:39:d4:7f:40:36:62:1d:5c:f2:0f:54:24:96:78:
c0:32:5b:81:9a:46:61:a2:88:da:75:48:8d:61:90:58:9a:2b:
b4:95:b0:aa:36:10:bb:ee:14:0a:cf:85:97:50:d7:19:68:37:
66:82:08:29:f4:58:2e:a6:9b:44:88:fa:50:c9:05:aa:1c:59:
f7:19:0f:64:cd:87:00:1d:e5:c2:3f:e3:39:1c:d8:84:63:bf:
6d:8c:5e:5d:a4:8d:a8:42:34:61:8a:ca:c8:77:80:c0:c2:62:
9b:e8:b6:bf:eb:c1:1b:b3:4d:c3:70:8e:cd:73:26:62:21:fd:
ea:db:12:6b:5a:e9:10:09:d1:b8:01:e4:1d:8d:74:0c:36:8e:
69:38:e0:14:b2:67:c5:1b:2e:20:60:0a:62:94:f4:2c:09:9f:
02:29:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:40:08 2026 by rpki-client