
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
File: vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft (raw, json)
Hash identifier: tvBchBgBg3JxcpcI3+kFTkBT949tsiodQqjyO7dCos4=
Subject key identifier: A8:1C:A8:49:1A:0D:E2:EF:9A:D1:06:47:AA:85:ED:6F:5B:15:DA:B4
Authority key identifier: BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
Certificate issuer: /CN=A9113C02/serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
Manifest number: 2996
Signing time: Sat 10 Oct 2026 16:16:13 +0000
Manifest this update: Sat 10 Oct 2026 16:16:13 +0000
Manifest next update: Sat 17 Oct 2026 16:16:13 +0000
Files and hashes: 1: vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl (hash: 0HDfThSqu18po73VEMbscxCW8RekLi+4VSgSJ0CpWzU=)
2: 00CB73CC5B1011F08269C50FC4F9AE02.roa (hash: 29h4sav8XLlbEtuBhOtdUbdYfYw0of12Y7UKNdoTihA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 16:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113C02, serialNumber=BE764EFEF53D869C44F6070996113E0A1818411B
Validity
Not Before: Oct 10 16:16:13 2026 GMT
Not After : Oct 17 16:16:13 2026 GMT
Subject: CN=6aca64cd-1129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7e:06:8a:5c:fd:37:68:9b:29:eb:03:3d:d0:
7c:4a:83:f6:fa:aa:52:d1:ac:51:1b:52:43:8e:77:
9f:9d:11:23:56:3b:ff:69:44:da:fc:9c:63:33:5d:
76:0c:cc:2f:72:72:a6:eb:b2:79:73:7a:e9:7e:62:
41:61:04:9b:53:2c:74:2f:6e:05:01:d6:3a:fb:dd:
b9:13:0c:43:25:9f:2e:07:87:70:15:61:a4:1a:c3:
97:d6:42:15:66:89:78:4e:0d:1e:d7:29:1d:07:40:
a6:b7:3b:ea:c1:28:56:53:6a:ec:29:ed:5a:55:20:
e4:66:34:3f:f2:31:66:2f:ea:32:cb:7c:3c:9a:f7:
3b:a6:e5:73:d9:47:e9:b2:62:fb:df:e3:66:68:fd:
8f:6c:f4:ff:e5:1f:5b:67:e8:ca:1f:16:bf:cd:25:
a9:86:d8:b3:8c:6c:61:7a:19:35:16:e4:71:2a:9d:
b2:20:fa:5a:1b:ce:ce:19:be:ee:5e:84:93:91:e5:
46:dd:87:64:b1:60:a4:de:7a:24:24:db:cd:f4:1c:
60:09:bc:1f:e5:47:49:0f:d9:ba:e3:0b:6f:27:d0:
cb:58:2e:a5:dd:8d:4a:45:a8:8e:83:8f:6c:ea:32:
67:ba:6e:1a:5f:34:e3:07:87:b1:99:b0:63:30:3d:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1C:A8:49:1A:0D:E2:EF:9A:D1:06:47:AA:85:ED:6F:5B:15:DA:B4
X509v3 Authority Key Identifier:
keyid:BE:76:4E:FE:F5:3D:86:9C:44:F6:07:09:96:11:3E:0A:18:18:41:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vnZO_vU9hpxE9gcJlhE-ChgYQRs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113C02/4C406FB6405611E7AF041A35C4F9AE02/vnZO_vU9hpxE9gcJlhE-ChgYQRs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cd:52:36:55:36:34:1a:cd:53:42:99:5d:fa:7c:52:f5:30:
11:a2:82:07:8f:07:08:5d:2a:ae:65:9e:7d:0e:a8:0e:c7:bc:
80:cd:31:43:84:eb:ac:b6:95:12:6b:6a:95:1f:79:7b:bc:13:
10:ed:fe:87:57:dc:89:39:4d:25:21:ac:9a:4e:fa:9e:40:38:
c2:37:c4:43:83:33:c7:36:ad:68:d8:c3:85:bc:c4:39:dd:fa:
5c:1a:1c:90:61:5f:2f:13:41:70:cc:45:44:49:c9:f4:47:d0:
bb:30:fb:3a:59:ae:f4:da:d2:e3:e0:be:3c:2b:28:40:32:f2:
07:a6:6e:f0:77:2e:38:df:7f:13:f5:76:a9:00:79:a2:27:7c:
f6:9f:d9:aa:7b:13:78:01:d0:0c:3f:aa:e1:87:86:5b:78:e8:
d4:f1:5a:be:3e:04:0b:e4:a3:4c:8e:47:fa:c7:7d:92:21:81:
36:c6:06:10:4b:e1:56:87:6c:13:63:6c:fb:d2:8b:02:bf:df:
8e:11:78:54:ab:0a:f3:55:3d:98:20:ea:2d:92:27:8a:88:5a:
70:30:b0:07:93:4a:77:25:ca:0b:2b:0e:8a:00:84:da:08:55:
a4:29:ec:a5:1a:6d:f1:8f:41:15:1e:b6:3f:ec:72:40:f2:9c:
e1:f4:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:47:16 2026 by rpki-client