
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
File: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft (raw, json)
Hash identifier: hBhYunrhPZGeui3/CEQgt1CDetKgu8Wof7w5x1aUc5M=
Subject key identifier: 75:0F:88:8C:94:D3:5B:E5:01:81:BB:BB:C5:AF:78:EF:96:68:B3:78
Authority key identifier: 56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
Certificate issuer: /CN=A9155001/serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Certificate serial: 0171
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
Manifest number: 0157
Signing time: Fri 05 Jun 2026 05:25:40 +0000
Manifest this update: Fri 05 Jun 2026 05:25:39 +0000
Manifest next update: Fri 12 Jun 2026 05:25:39 +0000
Files and hashes: 1: VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl (hash: nZPnu0HIilr8C1kWy3ha+nz1dyygmGvWuz+91RZsDDg=)
2: B527A9C8604111EF97252962C4F9AE02.roa (hash: h95Yv9AB3i8q77GTOdJU5rDlDGE8OcZ/0wK0uNvvAcY=)
3: 18E15164604011EF82C9CE5FC4F9AE02.roa (hash: 4OntrH0xrwV1zzqqBO/Cn0QwfwzE4k8t6Fo/4bzYPp0=)
4: 9FB99556604111EFB4652062C4F9AE02.roa (hash: IFZ00XVVSwazl9kpAzTwtPqVrs/aTpdslSHP9vmvZX4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 05:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 369 (0x171)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155001, serialNumber=565C8EC4E83447ECFFA69E1DEE1637C15F45A3FE
Validity
Not Before: Jun 5 05:25:39 2026 GMT
Not After : Jun 12 05:25:39 2026 GMT
Subject: CN=6a225dd4-59f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:07:33:a8:95:39:bf:13:d8:62:95:53:90:
5d:ed:d1:6b:fd:9c:25:9c:9e:7b:d9:04:52:0d:0b:
d8:48:2d:c0:10:31:5c:ab:8f:d2:9a:fb:ba:7e:de:
53:a7:ab:37:2c:b9:5c:a0:32:85:8b:a3:90:fb:25:
38:e3:4e:dc:7d:04:d1:6e:a7:21:b7:0c:b0:0c:ad:
c8:b2:ac:50:21:f5:42:2c:f4:1c:7d:10:71:38:78:
f6:4c:c0:e8:c0:86:d4:a9:02:ec:23:7c:ae:78:a8:
c7:a5:b9:64:8f:ed:ea:41:dd:fc:01:f0:99:2f:e9:
3a:88:5e:50:de:6f:f7:7a:bd:14:f3:4a:23:e0:8f:
9d:cc:f5:a3:c8:bb:73:2d:35:e8:ec:2c:53:8c:cf:
dc:b7:77:8f:6c:94:56:77:47:c7:14:96:4c:e9:21:
ba:eb:9e:40:4a:87:87:cc:e0:d0:11:3f:9c:c9:1e:
fb:82:b8:a2:e8:9f:9b:c8:dc:67:f4:2c:25:f2:5f:
4e:77:0a:eb:56:8e:a2:b4:df:8b:4c:b5:28:53:0d:
97:af:5d:e6:b2:1c:52:c2:1a:74:e0:d6:c5:0f:5a:
2c:f7:0d:07:35:f4:e3:8b:31:b5:fc:2a:e4:54:a2:
ae:c0:07:99:f0:72:1a:c5:54:d5:6b:f3:7a:6e:93:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0F:88:8C:94:D3:5B:E5:01:81:BB:BB:C5:AF:78:EF:96:68:B3:78
X509v3 Authority Key Identifier:
keyid:56:5C:8E:C4:E8:34:47:EC:FF:A6:9E:1D:EE:16:37:C1:5F:45:A3:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155001/DD1CBD72603E11EF866FE83EC4F9AE02/VlyOxOg0R-z_pp4d7hY3wV9Fo_4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:80:54:24:72:ac:24:3e:83:17:fb:75:de:3d:8e:b6:eb:dd:
aa:7d:99:df:02:85:c1:15:f7:53:65:f2:9f:dd:9b:64:59:4e:
72:77:0e:2e:b2:79:41:89:7c:49:cb:85:4e:a3:50:14:92:f7:
1b:f1:23:74:72:6b:ca:7a:c8:ff:4d:d4:08:bf:ca:50:60:04:
03:5b:18:a4:2c:38:43:c1:51:b7:30:30:b4:3e:98:b7:92:34:
35:f7:b2:24:2c:2f:14:1c:93:fc:52:08:f2:cc:54:7b:89:91:
1b:0a:4d:52:32:29:9e:30:a4:b5:1c:46:7e:8b:b7:46:7a:c9:
a9:cd:00:22:8b:e8:e0:4e:25:d7:ee:fb:2f:c6:08:f4:38:09:
ea:65:27:e1:34:70:53:b8:63:01:b9:aa:01:8b:4a:7d:76:4e:
b8:e6:26:c1:f7:a0:80:7b:f2:c5:8e:f1:df:ec:b6:8b:72:57:
7f:70:44:35:fa:1c:45:10:8a:de:fc:25:cf:e8:06:d9:b4:40:
c1:d7:b4:32:21:2d:70:7f:8b:0f:c7:c7:d5:03:c2:d7:ae:99:
f4:71:dd:08:ce:54:33:44:e0:da:46:ad:0c:b3:f0:39:c5:42:
25:74:d0:68:6c:2f:fd:f0:62:d7:a0:d3:55:e8:ea:ee:9f:fa:
bd:53:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:13:28 2026 by rpki-client