
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
File: VsaTBbXrpUJVXYx4xWGremzRqiw.mft (raw, json)
Hash identifier: SxsOqkPcGI/AT3vXDpBrwBvnOlEwQql2at1/W2t5BL0=
Subject key identifier: 2C:DE:E6:8D:2B:F7:6D:86:CA:63:66:3D:60:A3:D0:60:F7:4D:31:9A
Authority key identifier: 56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
Certificate issuer: /CN=A911EEF8/serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Certificate serial: 016B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
Manifest number: 015B
Signing time: Sat 03 Oct 2026 05:55:13 +0000
Manifest this update: Sat 03 Oct 2026 05:55:12 +0000
Manifest next update: Sat 10 Oct 2026 05:55:12 +0000
Files and hashes: 1: VsaTBbXrpUJVXYx4xWGremzRqiw.crl (hash: RgLsvJyRa1ye2SR64WnGoquEuMljd4ydVGaIJnCsuFQ=)
2: gOdVQ9J2eWJf1cJeZQOZe6XvSFQ.asa (hash: Ocu3aIGQKMx+hj+aiaSWl9HW4iTrwPqx0P7tXdOXMd8=)
3: 40C6FC26ABFA11F1BB867F9D6911F970.roa (hash: 2dqyZkRvza50oGysNw3pfGLRZQAvLoX2N8qymJzoCB0=)
4: 0D4DDB6CABFA11F1B7BA63886911F970.roa (hash: 33VriuErHaG0b/GKxxxWpnY6hl1I8dnm1gnLVL8F77U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 05:55:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EEF8, serialNumber=56C69305B5EBA542555D8C78C561AB7A6CD1AA2C
Validity
Not Before: Oct 3 05:55:12 2026 GMT
Not After : Oct 10 05:55:12 2026 GMT
Subject: CN=6ac098c1-ee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:35:1f:39:f8:60:c4:6e:9c:7c:62:17:d3:d6:
0b:05:39:88:f6:5b:d9:7e:19:4d:c6:3a:55:11:0b:
1b:6a:57:d9:cf:68:2c:3c:ea:73:ae:52:08:87:23:
73:95:e5:1e:3c:4d:44:df:96:1a:b2:2d:f4:27:e1:
3a:5f:17:e9:96:08:05:ad:2a:9a:0f:e1:87:17:9c:
20:84:6b:57:73:0f:44:e7:3f:f8:16:90:5f:42:87:
89:a9:3a:25:74:bb:88:8e:5e:50:32:b6:45:40:09:
b3:a2:32:97:fc:51:4d:48:c6:d5:e6:34:b5:e2:5e:
7e:74:6b:c3:63:7c:74:a3:dc:7c:d2:b3:62:f9:e5:
a3:31:74:14:55:95:55:50:06:4e:8c:91:a3:eb:5b:
77:f7:dd:38:65:e8:86:97:b6:d1:53:d7:d4:c2:f3:
00:fa:ae:fc:36:ef:94:84:77:46:08:eb:b8:7a:57:
0d:56:ff:e6:09:50:ab:39:8b:ce:7e:5b:02:7e:7b:
75:c7:62:31:23:5a:c7:25:a9:ad:ba:44:b5:e1:7a:
ef:f3:ed:8f:b9:28:66:05:cd:ad:61:b0:2c:d4:ff:
fc:73:92:47:f5:d5:95:88:11:33:37:b6:52:d9:c7:
94:6c:dc:00:2c:62:49:de:41:94:74:07:b8:1c:a3:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:E6:8D:2B:F7:6D:86:CA:63:66:3D:60:A3:D0:60:F7:4D:31:9A
X509v3 Authority Key Identifier:
keyid:56:C6:93:05:B5:EB:A5:42:55:5D:8C:78:C5:61:AB:7A:6C:D1:AA:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VsaTBbXrpUJVXYx4xWGremzRqiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EEF8/9799E6D0BBC411EFB985BE3FC4F9AE02/VsaTBbXrpUJVXYx4xWGremzRqiw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:e6:d3:b6:7c:ec:bf:59:fb:b5:d7:bb:8a:b7:64:a7:dc:97:
8a:45:e8:2d:00:0a:9d:02:53:68:37:81:d0:06:15:32:e3:20:
85:d1:67:27:20:80:b2:d7:69:ef:5f:d6:e3:44:29:aa:4b:d1:
ac:8e:20:ef:f6:82:7d:56:7e:ff:65:0e:c1:cd:79:fc:b8:26:
b9:ac:fa:da:93:f5:ef:3f:79:9d:ce:87:c0:20:1c:f6:c9:63:
18:ca:41:16:53:d0:c7:19:76:5a:74:07:b7:6f:48:64:09:60:
a6:88:58:81:6c:c6:db:f8:07:90:9c:a5:61:59:31:04:f1:49:
b9:30:0a:11:41:2d:e4:3a:ed:27:a7:f2:1a:27:b2:5a:70:15:
f0:76:30:bf:a2:dd:b5:06:e6:92:4c:a5:67:9a:ae:07:cb:d9:
fe:e5:a0:e4:38:84:8d:b6:9d:26:b4:86:48:ea:ed:f5:cc:bc:
82:80:7d:4d:e2:54:87:dd:76:32:e8:6f:4c:61:43:d7:a7:8e:
e5:b2:6f:91:25:57:01:db:68:c4:a6:bd:54:be:fa:05:c2:d6:
5f:60:31:3d:42:67:da:df:bb:00:3b:f6:e3:a8:8e:17:5b:66:
13:ca:de:ce:07:d1:6d:5a:2c:3e:d0:d3:f1:14:43:67:25:6d:
bd:cd:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:00:18 2026 by rpki-client