
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json)
Hash identifier: 3yRmgkht2XR7nrWCCakM8LuPyauynnrTuRey444hkAE=
Subject key identifier: 15:9E:65:03:B3:52:2F:0B:1F:3B:0C:4B:D1:D0:85:FC:B0:54:CE:DA
Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Certificate serial: AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
Manifest number: 2829
Signing time: Wed 20 May 2026 16:17:04 +0000
Manifest this update: Wed 20 May 2026 16:17:04 +0000
Manifest next update: Wed 27 May 2026 16:17:04 +0000
Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: eV3uWZIBMxVAXoEE1//Gt2I8XLVnob+gp/gi0VnlTTw=)
2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: 29h4sav8XLlbEtuBhOtdUbdYfYw0of12Y7UKNdoTihA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:17:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Validity
Not Before: May 20 16:17:04 2026 GMT
Not After : May 27 16:17:04 2026 GMT
Subject: CN=6a0dde80-fbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:eb:5e:4a:1e:f3:8b:4f:fc:34:18:50:33:
9b:7b:ca:48:7e:7a:25:bd:41:d9:11:e4:8f:c2:47:
1d:89:d7:35:58:15:11:9e:6d:9e:de:f1:48:4b:1a:
96:d8:ed:01:ba:67:42:5f:00:25:ea:77:4f:4e:8c:
0e:4b:ce:47:ac:41:41:3d:1c:46:4a:d5:8e:5a:51:
e6:38:4b:e9:49:e6:ea:25:88:81:89:56:66:5d:82:
be:32:da:7b:57:13:e8:c1:b4:78:e3:d8:ff:c6:72:
ee:83:85:3a:13:d5:f3:ad:db:67:d6:9e:99:92:20:
c5:ab:4e:f2:2e:58:16:9c:dd:ca:99:3f:0a:27:23:
58:a0:e7:d2:c2:dd:dc:79:e8:d4:28:bf:62:74:2f:
cb:fd:c0:6f:a4:fc:ad:b2:ae:be:98:4e:f6:5e:d1:
e3:2f:61:be:29:d7:ab:14:e2:82:ce:88:3e:43:b8:
a5:70:fe:56:2d:b7:4f:4c:1a:89:26:7f:48:7c:2a:
c9:2d:cd:a3:d1:5d:73:6d:5d:fd:bc:70:88:fc:3c:
d1:d6:89:72:81:78:af:25:8f:3e:87:d8:d2:d6:10:
41:b2:06:50:96:e3:b6:47:f8:83:df:b1:67:27:27:
78:78:72:03:69:4b:76:9c:57:f7:50:4d:21:6c:39:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9E:65:03:B3:52:2F:0B:1F:3B:0C:4B:D1:D0:85:FC:B0:54:CE:DA
X509v3 Authority Key Identifier:
keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:76:0b:60:d9:ac:23:2b:3c:7f:e9:3c:19:51:da:84:2d:5d:
bf:07:01:83:2b:90:b8:45:a8:64:c8:82:ba:37:e7:54:e3:15:
44:c8:c3:7f:71:19:e0:b5:00:69:ce:51:fa:c7:4b:84:97:3c:
aa:29:14:0a:16:1b:c0:1a:f5:fb:ae:5b:e0:d3:91:04:36:d3:
04:17:df:2f:f1:12:3d:95:ce:08:3a:09:44:13:5f:ac:f2:3a:
1f:dc:0b:e0:35:ae:d0:68:6e:65:72:05:29:24:2a:8a:63:7b:
fe:e1:51:83:ac:34:20:db:52:3e:7c:31:dd:d4:1d:92:76:0d:
84:d5:47:3e:5d:61:a9:b6:8e:06:5a:9f:11:d2:28:6d:34:47:
83:63:2f:05:4f:82:26:14:92:80:39:1c:aa:cc:fe:0c:97:9e:
00:6f:00:77:0f:0e:b5:96:97:d2:70:5e:8e:ae:39:d5:1e:93:
48:b0:40:9c:bb:37:6e:08:6f:47:98:91:0a:31:17:ad:70:73:
c7:ad:26:ed:ee:7c:c8:17:1e:f1:12:6e:bb:e8:c3:75:ea:d5:
ee:77:fa:88:f7:15:ec:54:74:4c:3f:da:a6:e4:62:9a:c6:e6:
5a:95:b5:5c:98:0b:b1:8d:ae:2e:7c:2f:72:61:3c:fb:e7:2c:
8f:d8:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:57 2026 by rpki-client