
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
File: VN6ZlQt_yVgf6KyWHze3iY81zcM.mft (raw, json)
Hash identifier: 0EhXabSnqaORxJi1XOsz0aAQgAAxFIb7Po02Styu2ek=
Subject key identifier: FA:C8:0B:FF:72:DC:2E:F7:E9:FA:50:4E:F6:56:B2:9F:80:0B:DF:84
Authority key identifier: 54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
Certificate issuer: /CN=A917E458/serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Certificate serial: 99
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
Manifest number: 96
Signing time: Sun 01 Mar 2026 08:42:19 +0000
Manifest this update: Sun 01 Mar 2026 08:42:19 +0000
Manifest next update: Sun 08 Mar 2026 08:42:19 +0000
Files and hashes: 1: VN6ZlQt_yVgf6KyWHze3iY81zcM.crl (hash: gtk5caOXR0k0Nq5HOUGPM9dMP72RM44mWI5p6WuQffc=)
2: 8F8A915C590C11F0AC0A3639C4F9AE02.roa (hash: HtaHQbR4Ww0fWPU3P7Hu/E8dYBtv4LHASdo5cN8a0Fc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:42:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E458, serialNumber=54DE99950B7FC9581FE8AC961F37B7898F35CDC3
Validity
Not Before: Mar 1 08:42:19 2026 GMT
Not After : Mar 8 08:42:19 2026 GMT
Subject: CN=69a3fbeb-9136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:19:44:ab:bc:65:9c:d1:a9:03:3d:dd:70:
9d:05:c2:93:47:4c:66:af:63:80:d7:c7:26:a5:5d:
ee:31:88:98:37:aa:bf:e4:04:2c:82:e9:fe:19:fe:
3b:4a:08:ee:4a:b0:8e:41:d1:94:9d:92:2d:17:dd:
22:62:e4:a2:2d:59:5a:dd:f7:07:9c:45:fd:d7:eb:
16:a2:d6:24:3c:87:4c:c9:16:2c:70:26:67:34:38:
a3:87:6d:5a:66:d5:34:eb:2f:81:81:46:ae:c3:68:
fe:de:e8:ef:74:f3:fa:d6:c6:ba:57:a9:b8:d9:a9:
44:52:f3:7e:3d:f5:6d:da:01:b7:bb:cc:5b:f2:21:
db:fb:1e:ea:fd:b5:41:3a:83:81:c4:5b:b3:1a:27:
07:25:aa:3b:ec:68:b5:60:4c:fd:05:d8:ef:fa:f0:
52:fa:ad:74:1e:8d:97:fd:0d:90:eb:98:69:78:6e:
9e:2e:2e:fc:f8:be:05:57:40:da:95:ec:b4:15:03:
bc:75:8c:c4:3f:81:ba:39:5d:1a:5d:09:32:8d:ac:
7b:b4:a0:53:e7:c6:c4:49:34:5e:f1:a7:5a:19:17:
0d:3e:a4:28:03:e1:25:d3:e1:9f:c0:98:dc:12:19:
0a:09:8c:20:1b:7c:e9:c6:45:5f:14:6a:3f:c7:0b:
a8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C8:0B:FF:72:DC:2E:F7:E9:FA:50:4E:F6:56:B2:9F:80:0B:DF:84
X509v3 Authority Key Identifier:
keyid:54:DE:99:95:0B:7F:C9:58:1F:E8:AC:96:1F:37:B7:89:8F:35:CD:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VN6ZlQt_yVgf6KyWHze3iY81zcM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E458/1EC72F2230D811F0A7BE2E4FC4F9AE02/VN6ZlQt_yVgf6KyWHze3iY81zcM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:b1:ae:ef:ff:67:a9:39:0c:66:3e:c7:73:c5:5d:12:93:22:
83:ce:64:1b:f0:87:d4:b3:ba:bc:79:37:f1:bf:44:98:6e:d7:
91:1c:42:54:34:a2:db:69:fe:7c:06:54:7d:a2:4e:62:4c:49:
85:ca:ef:d0:69:fd:08:c6:78:9a:47:50:11:16:30:b9:35:96:
f2:d2:74:bd:00:c4:f1:0f:4d:5e:16:68:72:89:f9:de:6e:97:
34:3e:45:3e:ed:92:62:fd:3c:a8:9b:cc:b1:ba:23:7c:d5:af:
1a:f1:2f:53:cc:3e:6f:ec:bf:ac:a4:1b:ba:be:04:b5:74:97:
11:d1:98:e7:1c:3b:97:42:38:3d:a7:b2:1b:58:74:e7:44:ed:
75:d4:94:76:93:e7:89:1b:37:14:ee:93:62:7b:b9:69:82:35:
c9:fe:66:49:8d:32:fe:34:92:ab:cc:9c:40:b1:81:0d:ce:4a:
08:c4:44:70:79:0c:91:d4:f8:25:98:43:40:84:9b:07:72:a2:
48:ae:45:4d:35:0c:a9:48:90:f6:a3:9f:3d:39:34:31:d5:3e:
84:1c:12:46:c4:b0:17:8b:67:8f:62:d2:cc:05:16:ed:28:eb:
66:fd:12:b2:67:0d:bc:78:8b:ea:9d:28:9c:27:e1:43:1c:18:
91:7f:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:17 2026 by rpki-client