
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
File: VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft (raw, json)
Hash identifier: JfEpS3PoSEw2PDtzrrabCtE8wRigUrT2X70c5sRAHKQ=
Subject key identifier: 5C:A0:DB:45:11:28:13:54:02:9D:66:E3:01:3E:19:97:7B:1A:65:74
Authority key identifier: 55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
Certificate issuer: /CN=A913E614/serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Certificate serial: 8A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
Manifest number: 84
Signing time: Fri 17 Jul 2026 08:54:01 +0000
Manifest this update: Fri 17 Jul 2026 08:54:00 +0000
Manifest next update: Fri 24 Jul 2026 08:54:00 +0000
Files and hashes: 1: VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl (hash: r4LewcDbyjAc7gvxRqBpmFwIwZlPzebdqvlpE3XTQA0=)
2: 390B7BFAC62311F092B8183CC4F9AE02.roa (hash: OdFik9QbQwbDNwBO8NmeHTSCxxItyVwP3BUltpegtXI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:54:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E614, serialNumber=5573C568AE014814D1B4DEAF68FA464F49523661
Validity
Not Before: Jul 17 08:54:00 2026 GMT
Not After : Jul 24 08:54:00 2026 GMT
Subject: CN=6a59eda9-708b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:5e:a1:6c:cf:a1:b7:f0:2b:d6:97:33:fa:
a8:50:ab:1b:7e:5a:7c:a2:4e:3f:77:4f:78:86:5e:
1f:7c:fb:6f:1c:a1:fa:35:d8:52:69:7c:62:88:e1:
4e:ae:3d:e7:a3:64:80:89:c8:c1:9b:11:4b:5c:ac:
b2:53:85:1c:fe:23:c4:3f:6e:15:98:4a:be:75:4d:
c7:27:cc:83:b3:24:13:61:85:d6:a2:f6:73:54:0c:
7d:ae:9b:0a:c1:ab:fe:8d:a2:1a:4c:ec:f3:a1:0f:
d4:f8:68:0b:3d:c5:37:d8:8c:14:ea:1c:e7:72:6a:
6e:1f:57:fe:74:fa:a1:a4:cf:26:5b:3a:32:0f:52:
15:e4:fb:29:1b:10:52:9d:0b:06:ba:d8:27:2a:3e:
f3:c0:36:59:98:6b:9f:a8:49:2d:65:c0:38:92:a4:
a7:1e:a9:96:a6:2f:f3:98:79:dd:e7:5a:e2:d6:b2:
3b:f9:50:1d:38:03:35:f6:58:ae:a8:2c:34:ce:eb:
b2:0d:c3:04:55:39:56:27:30:2f:fc:ba:bb:4b:d1:
3c:02:96:1d:14:af:41:f4:b2:e5:6f:ce:17:e6:0b:
62:e9:ff:25:c0:ca:68:6e:a5:cc:2f:78:cd:1d:7f:
30:27:25:79:4a:c7:d3:40:b9:89:e3:99:f4:cb:7f:
ab:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A0:DB:45:11:28:13:54:02:9D:66:E3:01:3E:19:97:7B:1A:65:74
X509v3 Authority Key Identifier:
keyid:55:73:C5:68:AE:01:48:14:D1:B4:DE:AF:68:FA:46:4F:49:52:36:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXPFaK4BSBTRtN6vaPpGT0lSNmE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E614/2FD900E0C3A111F09B1BC339C4F9AE02/VXPFaK4BSBTRtN6vaPpGT0lSNmE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:0e:56:b5:88:fe:f6:5a:4b:67:cf:a3:28:2f:aa:2c:e0:e2:
9e:04:9f:54:68:27:0d:0e:34:b0:d4:2c:83:76:ca:13:6e:20:
59:71:97:29:72:92:f5:92:d9:1e:a1:4e:d4:ba:13:5a:6c:a0:
70:9f:db:bf:bd:7a:5e:55:0e:00:28:dc:32:3e:26:e6:e1:f1:
ae:17:83:c4:fd:3d:da:19:c4:81:80:a7:2d:b9:6d:49:99:a8:
7e:43:9a:c1:ef:be:ae:a8:95:a5:1d:53:f6:b3:30:c8:62:4b:
33:f1:cd:e0:eb:86:d7:ec:14:ac:64:5e:9e:fc:5a:37:62:b5:
7c:be:3b:2c:d7:72:ac:b3:3c:c4:90:40:94:88:64:10:86:89:
83:56:bf:a2:4d:fd:a4:96:99:c3:bf:86:28:ec:05:e5:d5:aa:
71:d9:ab:89:71:4f:5d:87:ce:3a:2d:90:8a:bd:aa:6c:c3:8d:
cd:ac:42:91:94:47:c7:13:a8:bc:0a:e0:65:6c:08:af:72:19:
e5:fa:d1:54:a3:e4:f1:65:0c:c8:2e:3a:8d:fa:ef:b4:3d:c1:
27:08:2d:d7:50:50:96:19:e3:cf:0d:1a:72:bb:41:df:57:c8:
e8:8c:41:cb:e6:ae:e5:dc:57:d6:6b:e3:cd:7e:52:7e:94:2e:
9c:8f:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:24:29 2026 by rpki-client