
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier: L7869KZQubf5oEaeuSRcdN4hu4pAwZzK+UHh7keGdEM=
Subject key identifier: 32:9B:88:72:79:4D:36:17:61:F8:66:0E:9B:CE:E3:8D:F0:A3:44:D7
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial: 018D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number: 0170
Signing time: Tue 21 Jul 2026 06:22:23 +0000
Manifest this update: Tue 21 Jul 2026 06:22:23 +0000
Manifest next update: Tue 28 Jul 2026 06:22:23 +0000
Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: Zpmw2O8C2pTi2Gv+4XnFuEy0CIKdC9bpIU3xAJtPjt8=)
2: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: Gw0jFmA84rZ18sx/7QrnbJxTgZTCnUYn+soLzQH1wKk=)
3: B527A9C8604111EF97252962C4F9AE02.roa (hash: zljNGxAqLeUku4CTzDmhSDwisDsF8PGy5rmaV56Sx6w=)
4: 9FB99556604111EFB4652062C4F9AE02.roa (hash: k4xjdnoEdJ4ZINBwfRdnO6KbApSD649BXEVODGAn848=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 06:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397 (0x18d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Validity
Not Before: Jul 21 06:22:23 2026 GMT
Not After : Jul 28 06:22:23 2026 GMT
Subject: CN=6a5f101f-c650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:93:67:38:55:67:d8:4a:84:b4:b0:72:98:
77:23:a4:7b:c0:fd:85:9f:37:40:f2:03:19:20:b4:
50:8b:b0:68:a4:f6:a7:23:be:c5:53:fe:be:0a:d6:
9a:8c:7e:5e:20:1a:8b:2c:4e:6c:0e:79:ed:2d:77:
6c:6d:ff:b4:71:3c:cb:4c:14:5a:a3:75:f1:da:fb:
bc:e3:31:da:90:6e:a7:4c:7b:56:12:00:95:0b:b6:
c8:16:c3:4e:2e:85:b6:ff:ab:ba:21:4b:99:19:f4:
a1:f1:d3:aa:7a:bc:9a:2b:8b:b3:43:c8:ca:87:24:
b8:8f:d7:fb:97:51:c5:31:40:93:53:f3:82:9f:ed:
ef:36:fa:44:ea:f3:f9:ed:10:09:9a:8c:95:8e:ec:
7d:22:5e:2a:45:07:d8:61:d3:18:59:4a:8a:b0:f4:
3e:4c:a4:9c:09:06:5d:24:70:87:2f:cf:94:7f:45:
f0:52:d8:d9:20:59:66:28:d7:80:26:fc:ee:8a:a4:
43:2a:4c:47:b8:49:73:3a:7e:ed:bd:94:21:83:af:
4c:f1:67:48:00:42:38:4a:e4:a0:62:47:6b:1c:0a:
1c:64:a2:8e:5f:1e:8d:82:6c:73:de:22:f8:38:1f:
97:29:ba:c9:40:4f:6e:8e:07:e2:56:06:2b:60:43:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:88:72:79:4D:36:17:61:F8:66:0E:9B:CE:E3:8D:F0:A3:44:D7
X509v3 Authority Key Identifier:
keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:f8:f2:46:75:77:e8:99:60:f6:63:e1:94:1e:f1:ea:a4:1a:
e3:12:da:4e:b7:d8:8d:5b:46:c5:73:69:6f:39:db:e0:b1:70:
04:e9:7d:11:44:c5:41:79:30:a3:47:b5:3e:00:ab:51:0a:52:
0f:17:1e:3c:4e:26:5a:0e:d3:ed:60:83:1f:05:ae:65:f9:36:
d0:b7:b0:8c:9a:39:89:1e:94:a4:46:77:db:22:ae:63:25:bd:
28:61:78:4c:2e:6c:f4:5c:d4:e6:77:17:06:ef:cd:c5:f9:01:
a4:ac:23:80:72:93:ba:10:0c:41:ab:bf:98:9f:16:73:8e:65:
f1:98:db:e6:5f:87:57:c2:e1:47:63:ae:2f:c1:aa:0e:29:c7:
5a:8f:50:90:a0:c8:77:71:8b:06:5d:63:08:5a:2f:05:65:48:
23:0c:11:24:26:e2:8f:55:7b:1f:e7:58:93:de:11:96:68:50:
22:92:2e:ae:08:a3:7c:03:85:c4:1c:1a:11:bb:3b:20:57:66:
69:2d:67:e7:1b:17:30:f3:af:23:3e:5b:74:dc:ea:fe:3d:db:
e7:05:a1:98:a2:ce:b1:43:3d:b4:79:a9:1a:e3:a8:c6:16:5c:
46:25:cd:72:ee:93:2f:3b:11:67:58:16:18:07:76:1e:e0:a6:
0a:2f:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:57 2026 by rpki-client