
$ rpki-client -vvf rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
File: VRHewp3K7aF782u_M5UycVnxSoE.mft (raw, json)
Hash identifier: cbao5UILaWtX0oS4OmZhjz/GX+evQhfPlJhFNudBHHU=
Subject key identifier: 15:77:BE:08:9B:EF:3F:A2:0E:B7:C3:13:F2:56:38:A1:26:25:52:57
Authority key identifier: 55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
Certificate issuer: /CN=A9192248/serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Certificate serial: 0D64
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
Manifest number: 0D4A
Signing time: Tue 28 Jul 2026 18:11:15 +0000
Manifest this update: Tue 28 Jul 2026 18:11:15 +0000
Manifest next update: Tue 04 Aug 2026 18:11:15 +0000
Files and hashes: 1: VRHewp3K7aF782u_M5UycVnxSoE.crl (hash: VIleY2uio0hHdGnW35wMnhKmQDYKnSmMAoiCVc5YsVY=)
2: F2B52DF6CBB611EB94FE6E68C4F9AE02.roa (hash: Xmjn71gL/YQIzR03KwfjQ2azJG6B5XbTMAuZDitsX1c=)
3: F3E543B4CBB611EB94FE6E68C4F9AE02.roa (hash: wX/LG4PCY+hN9kkQeun4KuKXF3q4iW90Y5Az5gpzISI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:11:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3428 (0xd64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9192248, serialNumber=5511DEC29DCAEDA17BF36BBF3395327159F14A81
Validity
Not Before: Jul 28 18:11:15 2026 GMT
Not After : Aug 4 18:11:15 2026 GMT
Subject: CN=6a68f0c3-a3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:70:f6:51:61:bf:b8:23:6b:a5:56:59:55:
7a:ce:06:c1:40:03:9f:a3:06:73:6c:91:4a:ad:6b:
b1:13:47:91:1e:dc:a1:73:2d:38:0e:23:cc:03:a7:
b1:b9:64:9c:40:66:45:2b:82:fd:50:a3:67:35:96:
1e:6c:5f:10:9d:e4:e3:ff:79:c2:d8:3d:ed:9d:10:
40:9a:27:d6:02:66:78:7f:f9:35:5f:c2:e4:7b:5a:
76:aa:3f:b3:41:f1:17:cf:18:38:10:a6:19:e7:3b:
6b:df:2f:bf:7b:e9:45:ba:cc:f7:2a:15:be:d0:c7:
5b:4f:1c:69:57:e5:c8:25:25:1b:27:9b:97:dd:d9:
43:e8:40:16:ff:c9:66:99:62:4d:9b:be:b5:6c:0b:
7f:2b:b1:0c:f0:71:06:4f:ef:c0:a4:12:cf:c7:c6:
a8:7a:9c:ac:17:de:55:d3:b1:19:85:b9:b6:f5:15:
b9:d8:09:3a:e8:6a:31:e5:87:d1:1b:9f:e5:15:b7:
57:60:47:97:35:bb:15:da:4f:1f:4b:4e:6e:f0:c5:
84:79:fa:a6:fb:6f:c1:df:ca:de:fd:df:cc:80:b7:
37:64:a3:f6:4a:ab:da:ad:68:09:c1:df:99:ce:3c:
f3:71:42:fd:8b:9f:7b:c2:48:db:4d:29:66:4e:63:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:BE:08:9B:EF:3F:A2:0E:B7:C3:13:F2:56:38:A1:26:25:52:57
X509v3 Authority Key Identifier:
keyid:55:11:DE:C2:9D:CA:ED:A1:7B:F3:6B:BF:33:95:32:71:59:F1:4A:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRHewp3K7aF782u_M5UycVnxSoE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192248/C798A0FAFF0011E99586AB21C4F9AE02/VRHewp3K7aF782u_M5UycVnxSoE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9b:bf:c1:17:94:f0:56:ff:6e:ef:fe:e1:aa:06:af:0e:cb:
25:9a:45:67:8b:da:e9:77:8a:70:c1:e2:cb:18:6f:8e:a3:61:
01:0f:72:0f:66:cb:ea:a3:9f:f2:ad:47:0b:8c:dd:9c:ac:96:
0d:b0:84:d8:bd:2a:d4:bb:f9:74:fc:78:30:f0:c1:df:03:51:
df:5e:20:e3:82:7c:90:17:ec:2a:ff:fc:3f:38:9d:80:ca:07:
c7:78:de:d2:05:4c:3d:cf:fc:3c:01:10:7e:6d:c3:4e:43:3b:
c2:be:8d:91:88:95:c2:34:f0:fc:70:21:c8:29:1a:d2:9f:83:
8f:b2:4d:8e:dd:54:a1:a8:a5:92:aa:0e:c9:07:8d:f3:9e:f2:
ad:b3:b2:05:ca:3f:7e:8a:7d:94:52:02:e0:7a:5c:f3:24:cd:
ef:23:9b:17:29:aa:a9:71:e8:c1:e5:03:a9:ce:7f:47:28:fc:
02:bd:7e:28:cc:f2:9e:09:ba:4a:51:f5:24:a4:b0:69:c2:02:
eb:1c:56:13:6a:44:ce:75:94:40:a7:2c:5a:09:e0:7b:9f:0b:
78:d9:89:95:21:2a:53:39:d6:d8:5b:bd:f9:d8:df:6c:9c:2f:
93:fb:fe:62:01:ab:7c:f8:4c:98:32:61:7d:68:6d:c9:64:cb:
f9:29:fd:a7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTIyNDgxMTAvBgNVBAUTKDU1MTFERUMyOURDQUVEQTE3QkYzNkJCRjMzOTUzMjcx
NTlGMTRBODEwHhcNMjYwNzI4MTgxMTE1WhcNMjYwODA0MTgxMTE1WjAYMRYwFAYD
VQQDEw02YTY4ZjBjMy1hM2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHpw9lFhv7gja6VWWVV6zgbBQAOfowZzbJFKrWuxE0eRHtyhcy04DiPMA6ex
uWScQGZFK4L9UKNnNZYebF8QneTj/3nC2D3tnRBAmifWAmZ4f/k1X8Lke1p2qj+z
QfEXzxg4EKYZ5ztr3y+/e+lFusz3KhW+0MdbTxxpV+XIJSUbJ5uX3dlD6EAW/8lm
mWJNm761bAt/K7EM8HEGT+/ApBLPx8aoepysF95V07EZhbm29RW52Ak66Gox5YfR
G5/lFbdXYEeXNbsV2k8fS05u8MWEefqm+2/B38re/d/MgLc3ZKP2SqvarWgJwd+Z
zjzzcUL9i597wkjbTSlmTmPsuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBV3vgib
7z+iDrfDE/JWOKEmJVJXMB8GA1UdIwQYMBaAFFUR3sKdyu2he/NrvzOVMnFZ8UqB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjI0OC9DNzk4QTBGQUZG
MDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdhRjc4MnVfTTVVeWNWbnhT
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSSGV3cDNLN2FGNzgydV9NNVV5Y1ZueFNvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MjI0OC9DNzk4QTBGQUZGMDAxMUU5OTU4NkFCMjFDNEY5QUUwMi9WUkhld3AzSzdh
Rjc4MnVfTTVVeWNWbnhTb0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKpu/wReU8Fb/bu/+4aoGrw7LJZpFZ4va6XeKcMHiyxhvjqNhAQ9yD2bL6qOf
8q1HC4zdnKyWDbCE2L0q1Lv5dPx4MPDB3wNR314g44J8kBfsKv/8PzidgMoHx3je
0gVMPc/8PAEQfm3DTkM7wr6NkYiVwjTw/HAhyCka0p+Dj7JNjt1UoailkqoOyQeN
857yrbOyBco/fop9lFIC4Hpc8yTN7yObFymqqXHoweUDqc5/Ryj8Ar1+KMzyngm6
SlH1JKSwacIC6xxWE2pEznWUQKcsWgnge58LeNmJlSEqUznW2Fu9+djfbJwvk/v+
YgGrfPhMmDJhfWhtyWTL+Sn9pw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:10:34 2026 by rpki-client