
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier: uMecNfQWZ//MBnoWFFZNbr+idZHQD+CcSdhQjnc5JKk=
Subject key identifier: 43:CD:83:8E:6D:CC:4D:1F:B1:4C:9E:8F:87:80:92:AC:2B:DE:A9:30
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial: 0D31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number: 15FF
Signing time: Sun 20 Sep 2026 18:09:47 +0000
Manifest this update: Sun 20 Sep 2026 18:09:47 +0000
Manifest next update: Sun 27 Sep 2026 18:09:47 +0000
Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: R9FDzlJh5RSgBEkXBt49+2tM2GNJ7dKUdcZVNdG7lhw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 18:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3377 (0xd31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Validity
Not Before: Sep 20 18:09:47 2026 GMT
Not After : Sep 27 18:09:47 2026 GMT
Subject: CN=6ab0216b-5654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:4e:01:1c:3e:c5:a8:99:2f:15:b6:c9:bb:
58:9c:7e:20:5f:65:01:a7:4a:3e:33:f7:d9:32:d7:
0a:94:4d:67:6e:c3:f6:0f:d8:74:d7:54:1f:e7:a7:
5c:79:97:77:10:aa:bf:3d:d9:1e:cd:1a:d4:0a:cb:
3f:63:1b:89:ee:3f:74:27:8c:39:40:16:c0:23:b8:
04:5f:24:97:33:3d:38:3c:0f:c3:3a:c3:ed:97:c0:
da:c7:a4:e3:4d:a2:f3:d7:9f:bd:1f:9f:9e:ba:d4:
27:57:52:73:cd:16:20:03:bd:7a:8c:ad:74:53:84:
d8:11:a1:44:83:4f:01:35:72:48:2a:1d:c5:30:24:
9b:c6:55:da:a9:3f:ed:f7:22:17:b5:fc:12:b7:37:
d1:8f:ef:8c:72:e3:72:cc:ff:7f:de:7d:38:c6:32:
20:ad:80:d7:3b:78:1b:e3:fb:d5:de:08:4a:68:d4:
7c:07:da:19:d7:79:2b:5a:73:fe:ad:07:dd:d9:71:
53:52:5b:24:ca:93:ef:13:e7:24:51:f3:14:0a:b6:
8d:7e:e7:a1:b0:77:c6:bf:15:04:89:0f:0d:a3:1f:
8d:a9:4f:df:b8:b7:9f:77:7c:5a:3c:18:15:4a:36:
97:7a:aa:d9:19:3c:cd:74:d3:d2:ba:74:7c:c7:dd:
0b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CD:83:8E:6D:CC:4D:1F:B1:4C:9E:8F:87:80:92:AC:2B:DE:A9:30
X509v3 Authority Key Identifier:
keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:8e:d1:ca:0e:b2:a2:00:0c:a1:1e:e4:e6:41:e9:a8:6a:
13:ad:8f:ba:42:5e:de:18:49:c3:66:7b:a9:bd:b9:64:1d:f5:
5f:3a:4f:71:87:bb:3e:95:80:44:f3:71:ae:ac:28:bb:b7:e2:
8b:60:fe:09:63:40:18:09:28:c4:f8:f0:22:c4:bb:ed:f3:3c:
35:1a:cc:f5:7c:a2:00:f4:be:44:1b:a0:c9:e3:70:e2:ae:50:
e7:3d:73:d7:5c:bd:9e:99:3d:b6:7f:b4:fc:4f:66:8a:4a:c6:
70:a9:25:5b:69:f9:7b:bd:c5:4a:25:b3:0a:9a:16:cb:a4:1b:
84:d4:a0:c6:d5:8a:af:66:e1:d1:9f:d1:03:38:ad:31:8f:df:
62:e4:db:83:e9:74:00:af:53:fc:39:89:5d:62:1a:59:e7:84:
36:80:6e:2e:94:9c:eb:f5:e5:10:82:4a:45:ae:98:6d:e6:19:
af:7c:03:cd:9d:bc:a9:ba:04:06:1e:26:4c:23:a5:0d:d2:ce:
80:04:46:70:51:d9:c4:63:20:69:aa:c0:22:d1:a3:20:8f:72:
41:ae:4e:a6:94:49:a3:99:24:a3:66:0c:f5:a0:97:07:69:ba:
56:00:52:01:f0:85:5f:ba:39:ea:25:a8:09:db:82:cd:43:9e:
96:1a:66:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:26:59 2026 by rpki-client