
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
File: VJnONj3wXJSTIjSIKXmbEO_x05I.mft (raw, json)
Hash identifier: TIft/RZgHKWg2QbdVqFzRWzpC68VZwupMdHPUQ1qQPQ=
Subject key identifier: 9E:35:F6:C4:3E:29:7A:1F:13:9C:26:A6:CE:F0:1E:4B:A6:9C:20:B8
Authority key identifier: 54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
Certificate issuer: /CN=A912DB83/serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Certificate serial: 03AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
Manifest number: 039D
Signing time: Thu 27 Aug 2026 00:28:14 +0000
Manifest this update: Thu 27 Aug 2026 00:28:14 +0000
Manifest next update: Thu 03 Sep 2026 00:28:14 +0000
Files and hashes: 1: VJnONj3wXJSTIjSIKXmbEO_x05I.crl (hash: Ffi9C3a8mnfXTJqrUMfFQkgDyyFJmcVnnaIj6gc5HUk=)
2: 8698FF1E541811F0A468570BC4F9AE02.roa (hash: Q5BQwN/PPkIsr7xi5UZqC/JjxBSQW4yJruIR//oJ9Eg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 00:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 941 (0x3ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DB83, serialNumber=5499CE363DF05C949322348829799B10EFF1D392
Validity
Not Before: Aug 27 00:28:14 2026 GMT
Not After : Sep 3 00:28:14 2026 GMT
Subject: CN=6a8f849e-3152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:c6:77:c4:7d:58:f6:04:fb:97:be:fc:12:
05:67:41:55:29:27:a9:06:8f:d3:a7:e7:bc:13:9f:
57:91:0e:f7:c9:e1:7a:dc:04:0f:84:79:a6:fb:de:
d8:90:ea:68:4a:95:ee:8e:fe:82:17:aa:4f:a5:0c:
3d:47:13:a0:dd:12:79:e4:fe:5e:d1:bd:86:c2:31:
7a:8a:23:e7:ee:09:b1:ad:e6:90:8d:bd:59:2c:e6:
52:65:ec:f0:43:d3:01:4e:4c:4a:f1:69:60:b4:30:
88:dc:d9:9c:65:a3:79:5a:c8:49:b2:09:50:4b:88:
62:51:39:1b:91:d3:52:6e:db:c6:65:13:cc:39:3a:
89:a2:5a:e5:24:e4:93:3f:49:29:eb:51:5c:35:34:
08:0a:d2:ec:29:ab:a6:28:f9:9a:46:02:4a:cf:49:
f2:32:56:f6:d8:df:1a:84:71:73:86:c1:ed:37:24:
e2:44:fd:cb:c0:c4:65:1c:13:76:7a:a4:51:bf:83:
a3:75:53:89:28:65:5a:eb:32:76:eb:aa:7d:10:30:
87:c3:b1:5a:03:2a:22:58:a1:45:f9:f7:ff:e3:f8:
10:0b:91:0b:d2:35:8c:24:b5:7a:5f:7a:0a:13:77:
74:35:9b:8f:fe:7f:68:9d:49:c7:29:f3:71:02:b6:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:35:F6:C4:3E:29:7A:1F:13:9C:26:A6:CE:F0:1E:4B:A6:9C:20:B8
X509v3 Authority Key Identifier:
keyid:54:99:CE:36:3D:F0:5C:94:93:22:34:88:29:79:9B:10:EF:F1:D3:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJnONj3wXJSTIjSIKXmbEO_x05I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB83/1EFE292CFB5D11ECBB610C85C4F9AE02/VJnONj3wXJSTIjSIKXmbEO_x05I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:9b:91:78:3a:8f:a2:b2:ae:86:93:4e:76:c8:69:86:b2:2c:
cc:6c:79:64:9f:5f:09:82:98:d0:63:cd:7a:d4:b1:5c:80:26:
e0:50:04:26:1a:c2:0f:57:45:06:e5:bd:51:0f:22:7e:17:73:
4f:9a:b1:e4:5a:14:f3:56:7f:dc:2e:97:fc:d7:18:f1:40:94:
0c:e8:69:d2:53:70:24:7f:c3:6a:95:dd:b9:71:30:d0:46:96:
23:f8:d7:02:8c:84:84:97:79:81:3b:09:51:35:6e:d3:eb:81:
34:81:83:ba:de:e3:d1:cc:ba:a5:dd:5c:5a:15:b4:e7:9b:70:
b1:dc:51:96:8d:8a:f7:28:78:9f:6b:a1:34:ec:2a:71:1b:d5:
c0:ed:12:75:8a:af:07:e1:cc:ad:45:bc:5e:dd:f7:76:a8:20:
7a:42:3a:8c:55:60:e8:f5:64:50:a1:a5:47:40:c3:a0:1e:2d:
a0:77:22:c7:13:5f:02:e4:c2:f7:b7:af:db:59:c0:b5:1a:ac:
72:1d:52:f7:ba:7d:59:bf:fe:f5:0a:bf:31:98:43:12:05:60:
2b:e2:ba:ac:e0:44:33:06:76:47:ec:55:8f:1d:3a:4b:07:20:
28:f2:0d:6f:49:00:70:8b:ab:d3:cc:fa:ec:e7:89:d5:c8:61:
3d:2a:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:08:42 2026 by rpki-client