
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: mBNFd7jQPLqgQ9RvLR4fJ53WxizYwlqSMucbrrx2mbs=
Subject key identifier: 62:38:70:73:2B:8B:F0:19:DB:8D:EF:EF:71:7D:62:0E:C5:B0:08:45
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: AE
Signing time: Fri 17 Apr 2026 06:50:53 +0000
Manifest this update: Fri 17 Apr 2026 06:50:52 +0000
Manifest next update: Fri 24 Apr 2026 06:50:52 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: smc607pngydiDn6zZ59dA34OZaEfHaW0R8ZlFxnKuxQ=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: HtaHQbR4Ww0fWPU3P7Hu/E8dYBtv4LHASdo5cN8a0Fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:50:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: Apr 17 06:50:52 2026 GMT
Not After : Apr 24 06:50:52 2026 GMT
Subject: CN=69e1d84d-b531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:d1:c9:8e:f7:8f:6f:b0:e7:35:e7:2f:ad:
bc:33:f4:bf:73:e1:eb:4e:53:bf:75:30:9a:7e:5c:
e1:9c:14:a4:7f:ca:fb:92:59:4d:31:f9:20:8a:91:
2c:c6:79:6a:b5:dd:d2:fd:7b:7d:88:02:c4:f8:07:
d0:61:88:09:93:0d:1a:78:db:61:7b:1c:37:99:c9:
bd:6c:c7:4a:21:00:ad:8d:13:33:4f:96:cd:9b:d0:
34:7e:8a:74:88:ef:3e:cb:31:0e:7b:6c:f3:2a:41:
58:f2:b5:30:34:c3:f7:79:48:8b:27:57:f2:f3:4e:
db:61:05:f7:c4:95:a1:2d:d5:28:6f:a7:e9:45:a7:
1e:7e:bb:58:f4:77:72:b9:75:c5:a8:ad:2f:c6:62:
05:a5:10:2c:c5:54:8f:57:c4:c7:08:ab:6f:3b:24:
6f:af:3a:d7:17:ba:cb:54:43:bd:1f:10:b4:c2:65:
b9:b7:35:b7:5b:e5:72:d0:29:a9:cf:05:a3:ac:da:
f7:02:3c:2b:3c:83:3b:28:5b:81:11:35:0e:e7:f0:
2d:73:97:ec:5d:ef:45:5d:88:1f:6d:db:00:79:0e:
d1:a3:91:58:b5:66:f3:da:91:e7:4b:87:63:6c:3d:
82:4d:a0:d9:e2:e6:a8:b0:5d:35:9d:93:33:f5:5d:
00:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:38:70:73:2B:8B:F0:19:DB:8D:EF:EF:71:7D:62:0E:C5:B0:08:45
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ac:fb:68:bb:13:ae:4f:b2:7d:47:c4:6b:fa:d5:13:b3:92:
88:65:98:0f:e1:eb:2a:1f:4f:41:c5:f5:c0:c1:33:5c:46:c7:
14:09:54:64:8f:af:80:de:54:91:eb:d6:8d:43:e4:73:86:b3:
b8:fb:ad:e5:a8:aa:97:de:91:57:64:6c:2e:83:81:de:6c:a2:
63:8c:9c:d7:a7:05:8b:ce:dd:ff:b0:54:b5:3d:12:4e:ec:3b:
46:f4:b7:86:d2:4a:1c:fb:ed:ff:c5:76:36:26:2e:dd:a7:6c:
24:c9:71:33:0a:7c:1d:b2:4c:80:09:a9:6e:d1:ca:d4:fc:2d:
07:dc:c0:e1:72:e4:ed:bd:2b:a1:1b:93:45:70:bd:f9:ba:0e:
3d:88:a0:29:37:17:0f:36:74:9f:da:dd:ee:1d:13:f5:f6:2e:
0b:96:a4:a4:17:fa:4c:73:5b:23:ac:15:c3:cb:e5:fc:c6:d0:
c0:b9:51:45:4b:cf:0d:97:23:94:6a:2b:9e:c4:cc:b1:7d:b2:
65:29:56:ed:bf:30:b6:1e:f4:ff:42:e0:d4:96:fb:87:2a:47:
8c:7f:b1:75:5c:f8:68:7c:ab:3b:8b:d0:b1:03:62:df:9e:d1:
45:4a:3e:7f:9a:ac:ef:37:42:b1:e8:e4:dc:86:98:e6:57:97:
e8:15:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:12 2026 by rpki-client