
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json)
Hash identifier: ClaySrd4xRnngIOYv7LDft+h87SJ2pE8cjyGqTQsnUs=
Subject key identifier: 0D:71:E7:6E:44:8C:00:68:9A:B4:58:C6:97:08:13:69:33:99:F9:21
Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
Manifest number: AE
Signing time: Wed 07 Oct 2026 07:39:13 +0000
Manifest this update: Wed 07 Oct 2026 07:39:12 +0000
Manifest next update: Wed 14 Oct 2026 07:39:12 +0000
Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: 0fRIR4rGyNHTGOdekaTbU6+QyoWnENYiLanPdKEgOeA=)
2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: OdFik9QbQwbDNwBO8NmeHTSCxxItyVwP3BUltpegtXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 07:39:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Validity
Not Before: Oct 7 07:39:12 2026 GMT
Not After : Oct 14 07:39:12 2026 GMT
Subject: CN=6ac5f721-fcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fc:c2:c4:23:46:c2:2d:b8:1e:e9:8c:24:ed:
c1:1a:fe:76:93:dc:6a:3a:34:99:da:20:65:be:66:
9f:7a:4b:83:25:42:28:aa:79:f4:6a:3e:e4:e0:30:
e1:69:ed:d5:c8:a6:99:32:43:bd:92:65:a0:f4:d3:
72:fe:0f:54:a6:59:ef:5e:50:9b:3a:d3:6a:6a:64:
f8:0f:50:79:0a:77:58:43:53:95:30:3a:b0:6f:8a:
e5:c7:01:18:d5:01:9c:d8:41:e1:ab:2b:0f:9f:a8:
81:e6:cc:33:5f:c8:06:f3:e7:39:e1:ca:a0:2f:28:
5c:56:c6:29:66:93:a0:d8:3c:18:cc:f9:99:01:13:
f4:08:36:ac:5f:f4:76:2a:b4:e0:23:76:ab:29:d9:
73:86:c6:25:2d:62:83:84:2d:9a:41:22:27:d0:d6:
f0:61:32:1a:4a:73:b4:a9:0b:c0:96:f8:4c:e8:c8:
5d:36:26:33:ff:41:5a:6a:1a:eb:54:f0:56:75:a1:
8e:6a:ef:05:af:c5:ce:12:45:df:41:f9:37:24:c0:
28:c8:a9:14:e3:b6:5f:a9:f7:3e:5b:6f:b2:3f:de:
65:9d:67:93:2e:a1:d2:a7:d6:9e:f9:81:d6:19:b3:
2a:2b:d7:b0:0b:9e:9b:aa:8a:81:60:e3:8c:85:63:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:E7:6E:44:8C:00:68:9A:B4:58:C6:97:08:13:69:33:99:F9:21
X509v3 Authority Key Identifier:
keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:05:5c:cb:7f:65:f5:a1:f5:5d:c0:b4:3d:a3:54:92:6c:c2:
67:07:58:95:d5:ef:d2:17:72:de:2e:b0:5d:60:d1:47:fb:af:
6a:3d:1b:3e:6d:36:2c:f2:14:ca:a9:c0:60:25:c5:53:35:7a:
e3:92:75:da:42:71:fa:89:43:f6:0d:7b:fb:8d:89:f2:49:20:
b2:96:8f:48:2a:89:d8:7f:5b:00:b5:3c:31:b2:3e:e5:76:d4:
da:05:f0:4d:e9:3a:8a:f9:1e:ac:ff:90:3c:35:29:28:49:e5:
8e:56:74:9c:d0:39:7d:08:54:9d:e6:50:2e:50:1e:70:68:8d:
68:04:06:93:4e:96:4e:9c:ec:d0:e9:3a:60:47:19:9b:89:16:
94:df:ab:e2:18:60:90:0e:0d:0e:b4:9f:f9:9c:1d:45:49:c7:
5c:42:de:af:c4:b8:eb:15:49:0e:60:b7:f2:33:be:a0:5b:ad:
bb:86:a0:1c:9b:25:aa:f5:a5:7d:7d:d5:67:b3:92:e1:c0:fd:
a2:95:ac:e5:32:06:37:48:7f:57:3b:fc:d8:ca:44:69:2a:89:
8f:9c:75:c3:1f:2a:d4:8c:68:d4:2c:74:22:3c:6a:44:0e:42:
74:51:47:f3:c7:54:7d:10:67:3e:08:c8:b7:b8:8a:ca:f6:d0:
db:4d:a9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 04:00:06 2026 by rpki-client