
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
File: VR9YpoyP5pILLvCsbpCi0_NYinY.mft (raw, json)
Hash identifier: 5FPdAfeZLLZ+9iRWiFF+yBY7RbnDlfIMcL2pm9SleYA=
Subject key identifier: 33:BD:F8:EB:37:30:B9:71:BC:7D:10:2C:E2:98:5B:36:B1:95:89:A5
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Certificate issuer: /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial: 1137
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
Manifest number: 110C
Signing time: Wed 26 Aug 2026 17:15:51 +0000
Manifest this update: Wed 26 Aug 2026 17:15:51 +0000
Manifest next update: Wed 02 Sep 2026 17:15:51 +0000
Files and hashes: 1: VR9YpoyP5pILLvCsbpCi0_NYinY.crl (hash: QmoZk9rcQNEx68z48tDksaywW4wB7xCjrrx4kM5ehOk=)
2: E973A832656511EC85A7CA2CC4F9AE02.roa (hash: IumZ0R6VefcLEzWyHuLFXez1Y/5ve09Aewbd5wOI538=)
3: 5318EFAC6BAE11EBA5B87E56C4F9AE02.roa (hash: rZBquRvSRZzwF/cXOq40XWEHIK6p9WX2a250U/MbC2g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 17:15:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4407 (0x1137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Validity
Not Before: Aug 26 17:15:51 2026 GMT
Not After : Sep 2 17:15:51 2026 GMT
Subject: CN=6a8f1f47-d56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:12:a6:1f:49:57:86:e8:92:12:2c:0f:e4:
55:98:ca:b7:ec:f5:37:a9:42:3a:f8:1a:59:16:cf:
53:ef:4d:d5:8f:79:63:30:0e:b0:73:4f:df:25:53:
ad:29:84:59:02:18:0b:7b:cb:fa:93:08:cd:63:c8:
cc:71:fd:6e:7b:26:9e:0b:3a:eb:dd:35:48:5f:eb:
68:f0:15:25:aa:cd:8b:1c:10:00:26:1f:df:9d:3c:
37:ee:39:93:ac:54:14:90:b5:4a:b9:26:4b:84:0f:
b1:bb:a4:95:f2:9f:53:a3:66:5b:81:16:e5:ca:a3:
b4:c6:5f:aa:05:aa:a4:29:84:ab:9d:83:92:6b:85:
17:87:9e:00:52:68:7a:3a:8a:8f:4d:04:d9:a8:58:
1a:5a:a8:2c:6f:8b:03:94:37:28:0a:58:f1:58:d2:
97:46:b5:af:c9:5b:38:c0:f4:a5:e8:5a:81:34:3d:
0d:45:b7:80:2b:81:74:11:45:e1:42:8b:a7:6a:7f:
75:e9:45:b9:81:78:c1:c6:ee:47:d0:b6:9e:ab:17:
cd:2d:bc:a2:df:f2:68:2f:fc:0a:90:42:1f:de:a7:
8d:32:2d:01:df:e5:fc:55:25:a8:34:99:88:14:fa:
f7:76:b2:af:32:67:b3:64:ad:4c:3a:3a:0f:8c:3f:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BD:F8:EB:37:30:B9:71:BC:7D:10:2C:E2:98:5B:36:B1:95:89:A5
X509v3 Authority Key Identifier:
keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:c4:d7:8b:65:8c:f5:c8:5a:2f:03:ca:36:8f:fd:fd:12:4d:
9b:e6:28:17:a2:6f:d4:a1:4c:f3:cf:21:4b:58:8b:ac:e5:bb:
60:01:0f:7e:73:53:2b:e2:2f:d5:3c:3d:7a:45:80:f7:f1:af:
f0:92:6a:6d:d5:11:8e:78:3b:04:db:c7:4f:fb:20:4b:92:eb:
c5:12:c8:d7:36:1a:67:fe:15:c7:0f:fd:10:55:1f:c7:6c:89:
a6:37:38:9f:75:f2:88:cd:23:96:62:18:94:49:e6:92:ca:cc:
b9:c3:e3:96:fc:73:57:67:9f:45:9a:41:4f:13:ea:61:da:70:
eb:72:8a:74:61:7f:a9:9b:f0:6e:5b:22:40:6b:5d:84:b0:be:
d2:52:23:d2:40:4a:3c:1b:48:18:26:07:c2:d9:67:dc:58:c1:
5d:97:bd:35:fb:a4:b3:f2:f1:ed:af:02:88:76:3d:41:2d:a6:
9b:e6:0e:01:3d:c9:06:e6:67:88:50:71:d9:45:b2:90:86:cd:
6e:36:59:4a:e3:ea:0c:bf:f7:d6:8c:bd:26:ae:0d:a3:6a:2b:
3e:e6:15:6f:4a:3c:2c:fb:06:cf:fc:6e:5c:b1:ac:47:f1:66:
13:90:48:a8:31:a3:92:f7:f4:b0:ee:6e:05:f9:39:6a:b5:94:
f7:38:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:46:13 2026 by rpki-client