
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
File: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json)
Hash identifier: xFezgcXuScC16Bt08G9WrU+g6FNNmFVMWy/q0rqyvYI=
Subject key identifier: AA:AA:5B:7F:8C:0B:85:34:CD:FA:5B:0F:C5:FB:B9:59:02:EB:C0:EF
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial: 56
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
Manifest number: 4E
Signing time: Mon 01 Jun 2026 09:10:02 +0000
Manifest this update: Mon 01 Jun 2026 09:10:02 +0000
Manifest next update: Mon 08 Jun 2026 09:10:02 +0000
Files and hashes: 1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: yNV9JVfJHwKYfCvvOpSXjHoH29FGEwF6/eFO7srcIdw=)
2: 95303322F20511F0873139314A6F56BC.roa (hash: 1sNl2GKaplu72shhpID3R2WKIOZVHmc3EWv5WEQWdk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 09:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Validity
Not Before: Jun 1 09:10:02 2026 GMT
Not After : Jun 8 09:10:02 2026 GMT
Subject: CN=6a1d4c6a-6fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:46:23:11:22:b6:d5:94:4f:90:00:72:4f:80:
f1:52:4b:1d:8e:18:06:d0:d9:38:8a:b9:32:40:c8:
d2:61:8c:79:2d:d4:68:81:1d:2e:26:76:5f:0b:25:
eb:ff:5f:02:02:58:d5:62:de:91:72:e0:45:ab:3a:
4a:2a:a3:23:ae:87:28:ee:c7:e8:fc:b6:98:04:7c:
6b:94:9a:18:fe:44:c9:d1:6c:6a:ca:1c:39:58:34:
a4:3a:58:f5:fe:b7:6c:67:81:00:2b:be:19:fc:d7:
42:ed:39:00:95:bf:ba:94:a3:69:42:39:f2:6d:46:
7f:09:e7:fe:19:b0:a0:bd:be:76:35:22:fc:c9:46:
ce:ef:41:7f:cb:0c:1f:6f:50:c7:22:2d:46:0b:c6:
82:0b:9b:b1:54:60:0f:20:d4:fd:a7:29:da:74:52:
b5:fb:de:24:81:41:3a:32:1a:ff:10:b5:ab:ca:bb:
58:9b:36:4e:c0:f4:04:72:d7:97:df:9b:d2:51:22:
6d:23:2b:85:27:fc:22:fb:56:7b:86:14:d5:14:f7:
cc:66:4d:83:c2:af:66:43:f7:7a:f7:c5:af:48:a1:
b6:91:da:69:18:df:ec:d5:88:8a:7b:eb:ae:86:45:
6a:30:ce:fe:b2:b5:65:9b:5d:4c:eb:57:50:37:67:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:5B:7F:8C:0B:85:34:CD:FA:5B:0F:C5:FB:B9:59:02:EB:C0:EF
X509v3 Authority Key Identifier:
keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:35:57:e5:04:83:d5:dc:36:5b:c9:39:b4:a8:95:7f:39:05:
24:db:7f:8d:58:67:6b:08:cf:0b:b1:23:ed:bd:da:8a:83:b2:
13:12:10:3d:1c:ae:8a:89:eb:2d:ba:9e:cd:9a:e8:b8:52:37:
5f:f7:59:f2:09:7e:e8:b4:c8:9a:74:9e:73:57:70:17:db:1c:
48:05:17:db:e7:87:c7:cd:ac:2d:49:9f:a8:0f:ab:e6:68:03:
09:74:05:89:8b:94:74:fb:3a:f4:50:c3:5f:ce:0f:4c:bf:ff:
8c:9e:c9:44:67:69:55:31:5b:27:ba:56:d0:bd:69:21:14:f0:
06:c7:af:d6:90:a5:c0:16:fd:a1:21:82:18:67:6b:c1:97:a2:
d5:28:58:0a:8f:61:39:f5:90:a3:ad:69:b9:e1:5c:66:7e:9c:
73:54:1e:65:4f:eb:f3:d7:03:a2:48:36:51:a0:b8:af:f2:6f:
bf:8c:25:70:9a:d3:0c:d0:6c:3c:3b:45:da:29:b6:f3:89:ea:
02:76:d8:a8:54:b7:de:4a:cb:8f:2b:95:a9:4e:a2:2b:2c:6f:
f3:cd:84:3d:98:81:ed:e1:46:36:46:f5:9c:9c:43:a7:cd:4c:
bb:8f:cb:d5:f3:6e:d7:88:b6:cf:90:8c:ad:39:50:f0:81:0b:
85:0e:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:33:55 2026 by rpki-client