
$ rpki-client -vvf rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
File: VvkoxypXKMF6mCUQm7u3IQMTu8o.mft (raw, json)
Hash identifier: CKXrdzhI1kmdjWpi9BvkWkCyPJhFVXJxwtBpwzBsx54=
Subject key identifier: 4A:C8:DF:AF:7A:9A:D3:DF:7F:AC:70:2F:7F:ED:0A:78:66:94:32:F2
Authority key identifier: 56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
Certificate issuer: /CN=A91229A5/serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Certificate serial: 020D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
Manifest number: 01F9
Signing time: Thu 11 Jun 2026 05:33:38 +0000
Manifest this update: Thu 11 Jun 2026 05:33:37 +0000
Manifest next update: Thu 18 Jun 2026 05:33:37 +0000
Files and hashes: 1: VvkoxypXKMF6mCUQm7u3IQMTu8o.crl (hash: 3HeLs1z6UtuF1xmMuzA+Cj3d47BsQTyhDmXce9Gvero=)
2: EE44E774314411EF956C0046C4F9AE02.roa (hash: mSB8uynASz5JULPqU2um7D00gtNkbXdaEHU3YnsuCGU=)
3: 0BB29428314511EF9B1F4B46C4F9AE02.roa (hash: nhgX20QyBAliVjR34gYeCpAPvjxaRsYtwg9FMkMe0f0=)
4: 22C2DBA66E7511EFA80C0F12C4F9AE02.roa (hash: v276QOnwKRfPbFy/NDP7PYynjy4E6kAsd497Z2Qjh9E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 05:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 525 (0x20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91229A5, serialNumber=56F928C72A5728C17A9825109BBBB7210313BBCA
Validity
Not Before: Jun 11 05:33:37 2026 GMT
Not After : Jun 18 05:33:37 2026 GMT
Subject: CN=6a2a48b2-3089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:d6:fa:08:c5:97:a5:8f:84:98:bb:0d:ae:
13:f5:09:48:36:fd:2e:a1:15:d0:0a:cc:0a:db:ec:
11:83:4c:4f:4f:6b:a3:cb:39:3b:90:a3:50:12:63:
12:28:38:29:21:24:9c:a9:5b:f8:8b:ed:44:01:d7:
fc:19:3d:2e:a7:b8:9e:57:e8:d2:fc:62:53:85:f6:
5c:9b:c4:a3:c6:a2:6b:0f:bf:a3:40:b1:8f:eb:7d:
15:03:ab:a5:b3:62:ba:0a:d0:7e:c7:a8:f3:11:28:
c5:8c:e6:3b:9e:44:4d:ac:65:c4:b2:69:f4:07:8f:
87:99:9d:83:58:64:60:71:02:91:92:80:fe:cc:bc:
42:de:1c:a9:3a:9d:32:dc:c0:27:fe:34:f1:73:ca:
40:c4:ad:1d:20:8e:de:94:33:2c:61:ea:5e:b2:5c:
e3:5a:09:2c:a2:fa:93:27:4a:35:6a:35:85:c8:32:
94:ce:a8:73:2e:e4:cb:7d:83:8c:cc:35:ba:82:8d:
4c:b4:a2:10:cf:4e:4e:8f:17:dd:3c:11:a6:c0:27:
a2:8a:76:b5:2c:8f:a1:86:42:11:71:3e:7f:74:78:
20:5f:e1:11:0c:0c:4f:37:50:ac:3d:20:2c:fe:6d:
7d:83:fa:a3:71:2c:c9:b0:f8:81:d7:b4:fb:02:ab:
c7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:DF:AF:7A:9A:D3:DF:7F:AC:70:2F:7F:ED:0A:78:66:94:32:F2
X509v3 Authority Key Identifier:
keyid:56:F9:28:C7:2A:57:28:C1:7A:98:25:10:9B:BB:B7:21:03:13:BB:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VvkoxypXKMF6mCUQm7u3IQMTu8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91229A5/E29E73607A1311EEABA15069C4F9AE02/VvkoxypXKMF6mCUQm7u3IQMTu8o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3d:f3:13:70:b5:2a:6f:e9:62:60:b9:aa:3d:0c:2b:14:1b:
65:f3:7f:17:67:cc:00:dc:e2:a6:e3:a1:9d:6d:3d:ec:f7:84:
78:d3:6e:44:57:bb:9f:35:d8:f6:2e:18:4e:40:a9:8b:5d:2a:
46:e9:b7:34:55:5a:19:bf:46:f0:1f:06:6e:e9:f2:f0:ff:46:
0c:c5:a4:1b:30:55:87:03:92:63:4d:9f:56:d6:03:ce:79:b1:
52:6e:92:f2:03:ba:7f:7b:92:c5:0e:b8:da:3f:b6:6c:df:5d:
8f:f6:d7:37:67:70:cb:6d:4f:bd:2f:f9:c6:83:82:ae:93:2d:
02:62:a4:c4:35:78:c7:22:c9:73:a5:96:1b:e3:08:9a:5a:1b:
eb:67:5c:00:f5:33:ef:5a:40:f5:e5:6d:b2:2f:a8:f2:07:99:
f8:a8:97:fb:ba:94:57:34:5e:42:d5:c5:ca:99:56:ec:17:51:
c7:47:b8:50:3a:6b:4c:0d:d6:a4:b7:68:e3:2f:30:e2:1a:df:
c0:b5:c9:fe:a8:bd:97:1f:bc:4c:2c:bf:99:92:09:9b:bf:6d:
c8:16:10:28:ab:3c:fc:bc:3c:90:1b:91:f7:40:0b:3e:d0:10:
49:1d:91:af:b8:72:35:af:0f:78:cb:75:fa:50:f6:03:3e:de:
15:23:29:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:54:03 2026 by rpki-client