
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
File: VKpPIROg0aG37lUSvq5TcextpCE.mft (raw, json)
Hash identifier: Kb5rCA7sxPRWIeMDZAv3OTHiW8LubD04TyvirRRHVXg=
Subject key identifier: CC:4D:2F:BB:A3:46:A9:A6:AC:EB:CE:74:20:C7:21:BD:A8:57:36:C0
Authority key identifier: 54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
Certificate issuer: /CN=A9165556/serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Certificate serial: 0191
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
Manifest number: 018B
Signing time: Thu 21 May 2026 04:33:15 +0000
Manifest this update: Thu 21 May 2026 04:33:14 +0000
Manifest next update: Thu 28 May 2026 04:33:14 +0000
Files and hashes: 1: VKpPIROg0aG37lUSvq5TcextpCE.crl (hash: dBnmlWT2Ifj3z2tm/X58YaWVsshh/vZUGlswzQRRkKs=)
2: E135D94C04A511EF84B5D783C4F9AE02.roa (hash: R/+mpIF7D2Ei1AS7/k2esMe46P023CSHvwSxqyATt3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 04:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401 (0x191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165556, serialNumber=54AA4F2113A0D1A1B7EE5512BEAE5371EC6DA421
Validity
Not Before: May 21 04:33:14 2026 GMT
Not After : May 28 04:33:14 2026 GMT
Subject: CN=6a0e8b0a-9345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:16:28:92:d2:a1:49:0d:fc:79:0e:00:9d:b9:
6f:4c:a2:56:3a:b0:7e:33:2c:e4:a1:81:5e:d1:05:
31:71:b8:c1:55:7f:ad:70:80:ba:68:3b:e8:fb:a3:
58:68:9c:35:69:2a:8a:1b:b9:09:e8:e3:42:fe:c4:
27:43:26:3b:3b:44:e2:da:b9:e9:40:41:8e:4e:ef:
ff:61:16:17:df:41:2f:5f:35:4e:67:88:ca:f8:ff:
6a:eb:af:3d:f4:14:d0:ec:17:a1:b2:23:ba:c4:09:
f1:63:49:c1:2d:39:a1:ac:4d:64:7b:d7:5d:c1:d4:
bc:de:1a:96:1e:90:d9:21:c5:1d:d0:23:95:15:75:
52:63:ff:e4:0b:d1:36:e7:0d:66:3c:f9:93:09:5a:
18:2a:43:3d:8c:86:b8:f6:da:73:f1:8e:4e:e8:a3:
6a:5b:a7:15:13:ce:6e:e4:24:7d:7f:33:fb:28:50:
00:44:9e:29:e5:c4:16:27:23:bf:50:8e:a9:22:8c:
22:e9:f7:a1:25:5a:fe:be:42:ba:1b:9f:eb:cb:db:
fb:01:cf:de:8e:e8:da:62:29:9f:ad:21:19:3d:bf:
04:64:ad:18:b2:be:88:7c:9b:0c:74:79:e3:10:34:
cd:e6:8e:0a:9a:ed:ff:e1:d8:ae:f9:65:1f:95:45:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:2F:BB:A3:46:A9:A6:AC:EB:CE:74:20:C7:21:BD:A8:57:36:C0
X509v3 Authority Key Identifier:
keyid:54:AA:4F:21:13:A0:D1:A1:B7:EE:55:12:BE:AE:53:71:EC:6D:A4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VKpPIROg0aG37lUSvq5TcextpCE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165556/B145D02E017C11EFB864325AC4F9AE02/VKpPIROg0aG37lUSvq5TcextpCE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:60:2c:85:bf:26:67:a5:d1:ae:27:31:13:7f:0b:99:b2:
ee:bc:34:cc:c3:e1:10:cc:56:a1:b1:8b:17:a8:0a:f4:80:f9:
c5:fc:a2:52:f0:43:41:6b:5e:5c:06:68:1d:9c:c9:52:8c:6a:
e8:14:cf:e1:9b:a6:a4:b4:a8:d2:0b:7d:e3:7c:0f:2a:48:bc:
d3:dd:d1:c6:26:5d:a0:db:1b:c9:0b:89:e2:24:e7:67:7f:6d:
e8:f5:4a:90:92:2f:22:f1:51:f0:18:50:d1:d2:fd:4f:c5:3d:
28:ef:50:fb:b1:03:85:7a:a0:15:d3:6d:61:c5:ba:90:ca:08:
f6:a9:c2:ab:f6:52:48:7d:1b:c9:c1:b1:ee:10:32:c4:84:85:
10:b1:ec:d3:28:f4:a1:64:cf:98:51:b4:52:94:6b:9a:35:4d:
70:aa:95:d8:b8:d9:66:f8:e7:94:de:d4:c1:c1:ea:32:c9:2a:
f0:12:bb:76:e8:2d:d7:81:b3:92:be:a6:98:f2:bd:bf:2d:8e:
dd:c6:b8:61:bc:6c:bd:2b:05:3d:35:e8:fc:ca:dd:1f:24:0b:
26:a1:5c:2c:34:55:51:8f:54:dd:bd:ee:1a:34:2f:3c:a1:83:
0f:56:85:70:4d:cb:d0:46:49:1b:c5:41:21:32:24:3f:e8:fd:
e9:80:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:21 2026 by rpki-client