
$ rpki-client -vvf rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
File: VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft (raw, json)
Hash identifier: dyhefaYh59Sb4JdIpI6nIttTSr3cFpQ5Nk6wGnwU0PM=
Subject key identifier: 61:8B:C1:4B:11:B0:69:45:6B:DE:1E:8C:BD:CE:3D:AD:0E:CF:95:45
Authority key identifier: 54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
Certificate issuer: /CN=A9159BAE/serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
Manifest number: 68
Signing time: Wed 19 Aug 2026 08:42:22 +0000
Manifest this update: Wed 19 Aug 2026 08:42:21 +0000
Manifest next update: Wed 26 Aug 2026 08:42:21 +0000
Files and hashes: 1: VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl (hash: 3YMnVC1Ufoy7VYPNnPAN81lgAxiOyl6WqaqHX2xvCbc=)
2: 550BEEB0000311F1893529AE3C6F56BC.roa (hash: 2Te1NMqIJ2B9pmKNpdjXQir35QqlPCZ8GX9jF3OrH3Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 08:42:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159BAE, serialNumber=549049D5761EC61D304B389F586BB3F5EE8AA3C3
Validity
Not Before: Aug 19 08:42:21 2026 GMT
Not After : Aug 26 08:42:21 2026 GMT
Subject: CN=6a856c6d-f2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:59:8e:7a:14:44:ca:9e:03:36:a9:d7:ba:
6e:0a:b7:ae:30:31:e3:58:4d:df:01:d8:e7:74:0a:
17:c4:78:dc:eb:73:e3:f8:cd:8a:16:c6:a0:3b:71:
9c:55:9a:f9:7f:43:3e:74:2c:ca:60:88:24:d3:81:
be:8c:ec:e1:71:fe:d8:09:65:a1:bf:53:21:fc:7d:
ea:b3:6e:4a:52:70:d2:96:f5:a3:1d:7a:a1:9d:b8:
6d:e7:e3:01:67:0a:c3:2e:35:00:0a:04:d8:b1:a8:
00:38:ea:c8:f4:c5:23:ed:f0:17:4a:30:5b:86:79:
39:ae:6b:71:5e:15:04:4d:f4:c8:68:7e:15:81:f1:
96:02:33:d9:f0:65:aa:3b:7f:68:75:bb:51:e4:51:
2c:15:89:6a:c7:b6:c2:e9:dd:78:b0:8b:01:6a:16:
c0:0b:da:a9:fb:35:74:e6:72:e4:4a:69:ca:ed:6d:
08:10:37:c2:58:13:07:ca:0f:95:55:a8:8b:84:fc:
07:0f:cc:f1:d4:30:89:7e:d0:a1:af:ed:bc:07:de:
e0:7e:4a:bc:03:8d:23:35:e5:eb:df:40:ab:2c:0f:
29:f0:7f:d4:6e:6e:3c:06:c1:ea:b5:aa:c8:8d:c0:
57:cb:a9:5d:bd:3d:87:90:25:f4:f8:9f:bd:fc:a8:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8B:C1:4B:11:B0:69:45:6B:DE:1E:8C:BD:CE:3D:AD:0E:CF:95:45
X509v3 Authority Key Identifier:
keyid:54:90:49:D5:76:1E:C6:1D:30:4B:38:9F:58:6B:B3:F5:EE:8A:A3:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VJBJ1XYexh0wSzifWGuz9e6Ko8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159BAE/F2EE257C000211F1853A7DAD3C6F56BC/VJBJ1XYexh0wSzifWGuz9e6Ko8M.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:04:b1:96:bf:dd:49:25:b1:e4:df:1f:c7:6f:04:01:8b:
76:78:d6:20:c9:cd:89:d5:0f:4d:00:6a:bd:ce:c8:b7:60:a5:
4f:e8:37:92:8f:6b:24:bf:f6:cd:9c:aa:be:e6:fe:09:01:56:
f8:7b:87:cf:96:9c:1d:52:02:93:70:c9:af:1e:1b:00:a6:57:
c9:6d:b9:34:ea:99:ec:b5:69:5e:4e:67:5b:dd:2b:0a:23:4a:
aa:d2:54:17:5e:cd:7e:6f:8f:3c:e4:02:52:94:cb:af:89:62:
63:5b:61:c9:e0:77:94:9f:44:25:31:09:a6:71:cb:a6:52:1d:
43:ee:e0:ca:bf:19:89:f0:3f:8e:4a:91:c6:05:28:5d:62:b8:
6b:4e:19:2e:dd:5f:a4:00:96:c4:c7:58:20:51:77:96:05:a5:
c7:98:59:2e:fd:0c:6e:dc:58:a5:6f:62:e4:f0:81:e9:89:c9:
68:91:a2:76:35:82:02:c5:bc:63:25:0a:5a:dc:1d:5b:64:9e:
58:08:87:39:a1:58:55:bd:79:a6:5a:19:b3:dd:50:e9:d5:9b:
4d:17:54:6d:10:38:bd:fb:ba:bc:3a:48:ac:8b:36:a9:77:71:
54:8f:8c:80:9b:ba:5b:5e:02:c2:d2:51:9b:eb:25:1d:39:6c:
0f:f3:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:59 2026 by rpki-client