
$ rpki-client -vvf rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
File: VTOnxXv02x5Tj5534LSGi4-QxYI.mft (raw, json)
Hash identifier: Kmm3J/ILvUQI7qaRyT3eAFKn74XpUTgXVnWHI3K61Vo=
Subject key identifier: 04:19:ED:32:AC:2B:EF:13:EF:51:7A:E4:99:EB:68:E3:89:55:FA:5E
Authority key identifier: 55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
Certificate issuer: /CN=A91276FA/serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Certificate serial: 0167
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
Manifest number: 0153
Signing time: Fri 17 Jul 2026 06:17:27 +0000
Manifest this update: Fri 17 Jul 2026 06:17:26 +0000
Manifest next update: Fri 24 Jul 2026 06:17:26 +0000
Files and hashes: 1: VTOnxXv02x5Tj5534LSGi4-QxYI.crl (hash: bLh8XO0yBaXlaOF3R2cfQqoAV3ftq4+P/lFWaJHz5ac=)
2: 5D8DFB5684CA11EF9F92574DC4F9AE02.roa (hash: ui+QIvOSSm4JsqVWIgvAnE+tPuj6skIC4z/Y5KBBL/w=)
3: 7EC9705C84CA11EFA41F8D4DC4F9AE02.roa (hash: VkfTGGoNVUsbEcJxM7s1vcrxda5Fy3LpRVjxl0XTbMI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:17:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 359 (0x167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91276FA, serialNumber=5533A7C57BF4DB1E538F9E77E0B4868B8F90C582
Validity
Not Before: Jul 17 06:17:26 2026 GMT
Not After : Jul 24 06:17:26 2026 GMT
Subject: CN=6a59c8f7-7851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7d:2f:25:3b:8f:de:a5:53:98:f9:6e:66:af:
b5:48:df:e9:63:ca:08:0c:28:f0:8d:59:c2:d3:3a:
2e:57:b2:0f:a5:c3:9e:dc:2e:b9:29:f1:42:1c:6d:
9b:d0:d7:8a:c7:53:cc:65:4c:d6:72:82:ef:73:b8:
b9:b8:f6:4e:ae:51:3d:92:a4:bb:1f:53:92:80:2c:
b9:2f:ec:d1:de:32:31:c5:36:77:a2:21:29:f7:8d:
42:41:af:7b:e9:20:25:df:9c:60:eb:3c:28:fd:b9:
10:b2:52:f2:31:cb:a1:9f:ba:2f:99:75:1f:85:c6:
56:0f:be:51:99:99:6f:5a:89:a2:ed:c0:df:43:52:
a8:d6:e4:6e:4e:69:e5:0c:4e:ae:02:02:00:9e:68:
0e:eb:4d:93:73:38:5e:2a:03:3f:1c:1f:26:78:fe:
a6:19:29:20:17:fb:31:b0:d1:6c:c6:eb:f9:ef:b6:
e8:f2:c1:00:0e:b1:1b:00:b2:17:f0:ee:94:5a:10:
1d:bf:de:3c:c5:db:1d:bd:a0:64:08:4a:4a:6d:39:
91:54:fe:59:8f:23:cd:56:e3:28:81:a8:17:15:00:
d0:84:fd:ad:61:c0:98:7f:a5:f4:72:f0:a7:73:f6:
21:37:5e:d6:16:0b:d5:b7:ba:79:c6:3e:86:48:db:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:19:ED:32:AC:2B:EF:13:EF:51:7A:E4:99:EB:68:E3:89:55:FA:5E
X509v3 Authority Key Identifier:
keyid:55:33:A7:C5:7B:F4:DB:1E:53:8F:9E:77:E0:B4:86:8B:8F:90:C5:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTOnxXv02x5Tj5534LSGi4-QxYI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91276FA/9C52A7E884C911EFB54D0C49C4F9AE02/VTOnxXv02x5Tj5534LSGi4-QxYI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:8c:f8:90:ff:c8:f7:fe:0a:3f:aa:fe:74:92:af:99:7d:
c5:8c:2a:5c:bb:b3:de:b1:92:af:78:65:64:f7:9f:13:37:0e:
8f:4f:90:56:c2:9f:ad:e0:92:57:f1:82:12:e7:ed:d1:65:ab:
9e:a0:a5:ae:af:30:7e:83:b6:48:9b:a5:77:09:78:a0:6f:28:
55:f0:83:cf:6b:ef:a5:8a:cc:38:1e:42:8b:fb:03:c8:27:c7:
07:80:e8:43:d7:3a:91:ac:29:10:9b:8a:8f:fb:25:b4:6b:8f:
ec:15:cf:e9:2d:51:3e:82:75:de:10:ee:de:9a:18:20:d6:9b:
fa:78:dd:30:86:c0:79:fd:57:20:50:11:e5:ac:dc:04:bf:00:
86:f7:bc:0e:df:c7:44:70:97:8f:66:72:d1:26:c0:4f:13:d1:
72:83:dc:76:be:18:3a:54:ad:53:24:d8:86:43:9e:bd:5e:76:
e9:47:13:10:bc:00:81:8c:e6:b7:f1:6d:f6:61:f1:aa:87:e9:
ff:d8:72:45:55:8c:61:37:03:f8:07:8c:29:c6:c2:ef:bd:fa:
8f:23:2b:35:7d:2f:0f:a9:bb:1c:54:fd:f6:2b:aa:53:dd:ae:
43:ca:f0:a2:19:63:0d:c6:55:14:78:a2:54:ad:d0:3c:4a:73:
26:cf:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:56:00 2026 by rpki-client