
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
File: VaNt8khLtGWsMwGcBws5J0UkAic.mft (raw, json)
Hash identifier: f/A591luKJW4GQJFN7d+vLcy4hVOTnh87V6UYS3CxxA=
Subject key identifier: 7E:04:04:72:06:DB:F6:B8:5A:3C:19:82:52:9E:A4:41:52:BC:FD:0B
Authority key identifier: 55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
Certificate issuer: /CN=A9134167/serialNumber=55A36DF2484BB465AC33019C070B392745240227
Certificate serial: 0166
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
Manifest number: 0161
Signing time: Thu 21 May 2026 05:01:43 +0000
Manifest this update: Thu 21 May 2026 05:01:42 +0000
Manifest next update: Thu 28 May 2026 05:01:42 +0000
Files and hashes: 1: VaNt8khLtGWsMwGcBws5J0UkAic.crl (hash: B692Cm5Igs0Hg42izScOfEg2z+KAgWWiL3bc7xOQHrM=)
2: A1A1946E3E8F11EF90A1D97EC4F9AE02.roa (hash: /ld513D22vtDsKI/GzmgQ3EYNXuMSF+WLy8acFoQpVY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134167, serialNumber=55A36DF2484BB465AC33019C070B392745240227
Validity
Not Before: May 21 05:01:42 2026 GMT
Not After : May 28 05:01:42 2026 GMT
Subject: CN=6a0e91b7-3549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:8f:d2:ea:f6:75:34:2d:b7:2c:75:2d:2b:d5:
94:19:95:38:86:3f:cd:da:c2:b1:96:4b:8a:51:8a:
4e:3e:8e:1f:c0:34:9e:76:8d:4e:33:53:91:bd:ac:
4c:72:ad:82:5c:92:3d:b4:ec:74:82:eb:c1:8a:58:
2d:4b:e5:56:7c:d6:9c:42:0b:3b:32:f0:9e:dc:06:
78:d0:da:53:b1:7e:c0:32:23:17:7e:38:cd:bf:b4:
5f:d8:9c:b9:49:ee:93:22:4c:ea:4b:7c:4f:25:02:
83:d4:6b:ca:89:c1:3b:c2:2b:03:1c:f5:2f:67:63:
3c:8a:23:c1:7b:9a:2b:36:eb:74:a0:c2:3c:c7:84:
93:37:1c:e8:be:81:0a:c8:18:60:91:f2:75:3f:11:
bb:31:de:29:9d:a3:54:81:25:29:98:7c:c4:2c:f4:
64:57:6c:c4:4a:62:82:88:bf:ad:49:90:29:85:12:
d1:38:d2:5b:25:7c:63:a5:78:4c:6e:7e:94:65:25:
2d:b7:67:61:76:ed:e4:4c:7e:c9:c1:df:f6:d8:50:
e0:de:52:c1:41:73:17:d2:b0:1e:f5:14:4f:9c:e3:
b2:b0:24:23:0c:1f:46:a7:bd:f0:09:8b:7e:b2:0c:
af:f1:99:52:5f:34:5b:28:cf:bd:41:0c:f4:9b:c0:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:04:04:72:06:DB:F6:B8:5A:3C:19:82:52:9E:A4:41:52:BC:FD:0B
X509v3 Authority Key Identifier:
keyid:55:A3:6D:F2:48:4B:B4:65:AC:33:01:9C:07:0B:39:27:45:24:02:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VaNt8khLtGWsMwGcBws5J0UkAic.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134167/B42267F43E8E11EF97A8557DC4F9AE02/VaNt8khLtGWsMwGcBws5J0UkAic.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:1d:15:f7:e9:de:55:2e:3e:2a:7e:aa:55:83:46:73:e1:
7f:a8:22:2c:aa:ca:77:74:d1:db:87:ac:81:de:88:05:70:d0:
2b:1c:58:23:b8:9e:46:58:8c:20:53:00:26:21:bc:ae:ba:ec:
4f:89:10:8c:7f:08:0a:fb:fc:04:d2:e5:86:f7:df:14:6a:fd:
63:c9:e6:1c:09:a9:66:df:23:14:5d:d7:21:3d:5d:8e:d0:d1:
88:ce:1e:40:d0:89:70:79:71:20:62:b5:56:05:1d:f6:22:21:
e2:6a:2f:15:2b:bf:9c:9f:d3:13:e1:b7:be:3d:02:8b:e4:c4:
74:4a:8c:f8:05:8c:a1:86:c4:2b:ab:8e:16:79:90:c7:b3:50:
ea:ac:81:58:56:4a:0d:e2:01:09:dd:da:95:bc:cb:cb:b6:79:
be:b9:5f:2a:d3:1e:b8:5e:24:29:a8:fd:3b:6d:9f:ab:c7:7b:
a2:3b:ae:4b:d1:07:86:e6:72:f0:b9:3e:af:65:f2:14:0a:36:
90:63:b8:bd:55:78:ac:b6:c0:f7:f9:b7:d2:53:ec:1c:b4:01:
05:4f:85:6a:b3:53:8b:23:3c:52:98:09:ef:a0:43:ee:e9:56:
e1:81:76:b4:29:08:7f:7d:cb:a9:25:21:55:23:e5:3c:c2:cd:
b4:83:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:54 2026 by rpki-client