
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
File: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft (raw, json)
Hash identifier: 2JHOznyPVqmJd2/Kw/E6me82UH1xAQA9BwX+Su6gXd8=
Subject key identifier: A6:FE:41:2F:75:B9:B4:8C:E1:B1:98:B5:AF:1D:80:1B:66:59:7E:4F
Authority key identifier: BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
Certificate issuer: /CN=A918E1C4/serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
Manifest number: 9E
Signing time: Mon 21 Sep 2026 07:24:36 +0000
Manifest this update: Mon 21 Sep 2026 07:24:35 +0000
Manifest next update: Mon 28 Sep 2026 07:24:35 +0000
Files and hashes: 1: vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl (hash: lIMrUxgEgNaWVl8VuVPgNlTNECOVzVDpw6ncNRRwmpI=)
2: F30027F69C9011F1893698345711F970.roa (hash: D+j1sM6eCYVgN9wCNM0rcIbl0hAUaUHWwy+gzdAQe8o=)
3: A32543BA9BEB11F190BD09186411F970.roa (hash: 9WaHx+LUDXVMm3BI2K4FD2A1kDHdB0yt3Gwu4DhlqgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E1C4, serialNumber=BD89781656D9D158347B7B14C04AD9EA441CC997
Validity
Not Before: Sep 21 07:24:35 2026 GMT
Not After : Sep 28 07:24:35 2026 GMT
Subject: CN=6ab0dbb4-4b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:36:85:f0:2e:93:dd:f5:ff:ff:24:a4:8f:
4c:29:bb:ca:9b:2d:6f:0b:f6:6d:fd:a2:c4:04:32:
39:1e:62:f1:4b:d7:62:9a:43:5b:d1:53:77:f9:85:
9e:d5:81:5a:ce:b3:bb:3f:3f:59:6a:73:68:3f:61:
95:5d:a9:38:22:84:75:36:a3:2b:eb:43:d3:f6:48:
14:a2:6a:3d:f1:52:a1:b3:41:ad:53:19:14:aa:4a:
e9:a5:f9:6b:c9:1d:27:e2:60:8f:7d:81:b7:60:31:
1e:4c:de:08:d7:10:6b:8c:21:b4:98:a4:55:01:10:
20:e3:ed:56:76:95:b6:05:a2:49:42:ef:d6:af:40:
d0:6a:ab:02:59:8d:e3:9e:6b:2b:42:e9:63:c7:23:
8f:14:de:41:f2:23:c5:c6:1c:bf:b1:6a:73:84:cc:
d3:0d:f0:b6:f2:b6:29:7e:39:b3:d8:13:35:73:89:
9d:90:57:69:1f:86:9c:c3:83:c7:b9:ce:f8:ca:83:
d9:9a:a0:ea:c4:36:f0:47:19:35:f2:53:37:18:ad:
bf:cd:bd:ce:96:1d:15:36:b3:88:f5:11:fc:47:05:
57:6d:68:3c:b4:7b:98:a6:f5:dc:8a:ce:45:1d:c0:
5a:0d:38:54:92:1f:91:bb:81:58:10:6f:17:27:22:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FE:41:2F:75:B9:B4:8C:E1:B1:98:B5:AF:1D:80:1B:66:59:7E:4F
X509v3 Authority Key Identifier:
keyid:BD:89:78:16:56:D9:D1:58:34:7B:7B:14:C0:4A:D9:EA:44:1C:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E1C4/0C71E7FACE9311F088AB1524C4F9AE02/vYl4FlbZ0Vg0e3sUwErZ6kQcyZc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f6:92:8a:64:05:ea:c9:83:1d:6f:3b:7f:3c:6d:a7:cd:b1:
70:e9:0f:8d:be:62:25:d1:6b:f4:9d:fd:6b:92:f1:ab:5e:75:
51:75:51:ef:8d:96:3c:f7:7a:09:1f:f5:3e:4f:7f:f5:40:00:
1a:6a:1f:60:7c:a6:fb:b2:10:56:a7:45:64:84:06:65:1a:9c:
fe:68:8a:f9:96:59:9d:9c:dc:a5:6a:9b:2a:38:2c:c3:f7:f3:
2c:76:c6:3e:ed:98:2e:fe:0b:80:0d:bd:df:57:5e:d9:7f:e9:
88:25:d1:63:73:27:e8:df:11:48:44:65:ad:5e:f5:78:c3:af:
11:94:93:7a:50:98:8f:67:a8:4d:ba:3d:ea:12:63:8e:41:82:
33:87:c8:95:66:3f:e8:67:27:68:f2:ed:1c:8a:ea:46:fe:64:
e7:79:78:b1:b0:d2:cf:a5:a0:51:d4:d7:29:34:1b:4e:90:fa:
87:36:c2:f7:81:f6:1c:a3:c1:50:2f:4b:e8:31:39:ce:2e:d6:
54:eb:c7:99:c3:46:7e:0a:da:79:aa:51:c3:ca:b5:27:96:9c:
c6:28:71:83:c4:34:71:d3:5f:b2:cb:a4:96:99:9e:1f:d7:d6:
9e:32:b1:d7:94:0a:a8:8a:b8:a6:18:51:48:db:ca:c1:88:a7:
eb:1d:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:19:20 2026 by rpki-client