
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier: WPp0JiNAUKoRYmgCvQdvwNle0tc4HBuC2pPRtkw7A2o=
Subject key identifier: 5C:5B:54:1B:03:DE:55:54:BC:3C:09:44:72:72:C8:45:64:4A:F0:F4
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial: 015B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number: 0141
Signing time: Tue 21 Apr 2026 05:12:04 +0000
Manifest this update: Tue 21 Apr 2026 05:12:04 +0000
Manifest next update: Tue 28 Apr 2026 05:12:04 +0000
Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: xA87i/wKb4q4L3P4HGdRnC7wI0HUOJ1cfPVqDNr1Iiw=)
2: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: 4OntrH0xrwV1zzqqBO/Cn0QwfwzE4k8t6Fo/4bzYPp0=)
3: 9FB99556604111EFB4652062C4F9AE02.roa (hash: IFZ00XVVSwazl9kpAzTwtPqVrs/aTpdslSHP9vmvZX4=)
4: B527A9C8604111EF97252962C4F9AE02.roa (hash: h95Yv9AB3i8q77GTOdJU5rDlDGE8OcZ/0wK0uNvvAcY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 05:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 347 (0x15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Validity
Not Before: Apr 21 05:12:04 2026 GMT
Not After : Apr 28 05:12:04 2026 GMT
Subject: CN=69e70724-699f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3a:ae:6f:b5:b2:36:cf:aa:35:78:0c:a9:d0:
ae:d5:8e:db:de:50:24:10:1c:24:e7:01:7c:7b:6b:
84:4d:46:75:8d:23:f0:af:08:1f:f3:ab:44:60:98:
dc:d7:6f:3e:50:d5:e3:7e:da:56:19:bf:cb:d7:4e:
10:44:ab:e5:aa:0b:be:1a:3f:11:47:af:bb:cf:23:
83:02:be:7f:35:07:f6:c1:46:8b:4c:42:7b:43:2b:
f0:fd:7f:bc:ab:39:ad:bb:b2:36:2a:87:a4:86:66:
00:1d:98:a4:54:81:9c:1a:b0:58:9b:8d:fa:c8:01:
ae:38:ac:29:f4:eb:8a:05:41:08:a7:31:a9:a4:0c:
8e:39:23:d4:51:24:85:91:50:4e:da:c1:fc:14:f1:
8c:2a:c2:84:39:bb:96:cf:c1:37:f6:c7:66:37:c3:
c1:c6:21:dc:0b:52:73:b1:52:18:ab:60:0b:00:62:
2c:36:38:2b:4c:e8:06:f4:d2:d8:60:80:2a:43:73:
9e:ca:3d:eb:6b:ff:d3:c3:ca:3a:93:9a:ef:03:32:
03:55:71:b9:5a:f1:ac:fb:ce:dd:b7:31:83:3c:f3:
b4:48:ed:e8:da:5c:68:94:5e:0f:b9:3e:6f:6b:ef:
9a:ea:30:ed:3b:ff:79:13:50:8b:26:3a:e5:07:d3:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:54:1B:03:DE:55:54:BC:3C:09:44:72:72:C8:45:64:4A:F0:F4
X509v3 Authority Key Identifier:
keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:5c:6f:4d:8f:bc:d4:4d:da:35:42:0f:26:0d:54:9e:2a:f0:
d0:40:29:41:77:83:fe:45:87:d8:43:01:90:ac:27:a5:5f:bc:
04:1c:c5:12:da:ab:fb:44:6f:30:7f:bf:55:7f:dd:93:8c:5a:
c3:39:f9:98:e0:6e:03:7e:89:86:5c:b5:b0:fb:75:95:0a:f7:
41:c1:c2:18:65:b5:a9:c3:b7:b8:d8:ad:88:2d:f4:45:bb:30:
5f:3b:f4:ce:01:a1:04:61:e5:df:12:8c:cb:c0:8d:16:57:17:
b9:0a:5d:96:6e:17:1b:15:d3:89:e1:b0:44:4e:a9:20:95:9d:
a6:af:c1:bc:e0:0b:eb:de:36:15:13:45:4a:5f:f1:b7:c9:d3:
57:e4:63:c3:ba:3b:78:fa:27:af:d0:89:0a:be:ea:d6:12:2e:
ae:6f:2e:89:23:78:6f:90:d5:cc:ce:1f:e9:eb:95:56:c7:cd:
e1:19:15:db:cc:56:e4:61:44:d0:3f:a0:02:26:30:57:a2:ee:
5b:0c:83:22:36:b1:4a:1e:c9:70:19:fb:45:05:4e:dc:74:13:
36:07:12:3b:6e:40:ba:99:9a:f4:88:ba:d7:9d:bd:3a:2a:3e:
b7:8f:61:ee:90:05:32:77:b9:91:f0:73:61:a5:13:62:d1:5e:
1f:cc:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 03:36:12 2026 by rpki-client