
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
File: VZvvzzSYaXPTvkWTUWF45MOs4os.mft (raw, json)
Hash identifier: 5u5/1HSOTZj16nNCTHtjYicRi2MimqB7pyc7tlENiLQ=
Subject key identifier: 20:5C:08:EB:F5:78:42:2A:AC:E3:97:4A:F0:7B:99:48:EB:A2:0F:4A
Authority key identifier: 55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B
Certificate issuer: /CN=A9167003/serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B
Certificate serial: 01B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
Manifest number: 01AA
Signing time: Sat 05 Sep 2026 04:02:09 +0000
Manifest this update: Sat 05 Sep 2026 04:02:08 +0000
Manifest next update: Sat 12 Sep 2026 04:02:08 +0000
Files and hashes: 1: VZvvzzSYaXPTvkWTUWF45MOs4os.crl (hash: jlkhMFnWL8Po7iXK647o4XLI7IWufuaM/CMAN8/pXMw=)
2: 7B6E133A61D911F0822B8C0CC4F9AE02.roa (hash: VZQ5HmNTBpwk9Ml5/WJR942fN8on4eqSYDwAFivaZPQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl
rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 12 Sep 2026 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167003, serialNumber=559BEFCF34986973D3BE4593516178E4C3ACE28B
Validity
Not Before: Sep 5 04:02:08 2026 GMT
Not After : Sep 12 04:02:08 2026 GMT
Subject: CN=6a9b9440-ee89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:c3:5a:11:74:e4:b6:cc:76:f9:34:d7:ff:
45:58:9c:9c:d0:e8:26:48:8c:7b:a4:3c:35:ec:ff:
5d:b6:08:19:3f:69:9d:2c:a7:a9:1a:0f:0e:4c:83:
b9:64:88:83:b3:78:85:f7:e7:a0:2c:89:82:d4:6c:
91:91:5e:d4:dc:7c:dd:8b:07:7d:9e:fe:22:03:89:
ec:77:10:ea:78:b3:3b:29:1c:8a:b8:9d:ee:4f:e2:
50:0d:00:40:e0:3e:71:bf:ce:94:bc:1b:8c:60:ed:
8d:0e:56:9b:3d:75:04:6f:5a:8b:4a:2b:10:14:dd:
5c:53:4b:e1:4e:a6:86:56:c1:75:83:c8:66:ed:c9:
b7:59:06:33:39:59:3f:30:24:53:af:a8:9c:f4:54:
45:51:1b:5e:f9:01:f3:7c:a8:39:c4:fa:62:d7:c8:
6e:b5:c0:00:a4:09:bb:91:ae:2a:07:69:51:f1:d2:
01:43:40:44:85:92:47:9e:85:f6:ea:e8:56:95:ac:
15:b5:3e:e9:7e:2c:49:f9:59:60:41:57:1e:5f:42:
b9:d1:61:ff:96:18:fd:8b:f5:6b:9f:11:76:38:f2:
c0:29:4d:9d:9e:c0:72:7f:cb:a9:43:05:97:38:90:
19:22:14:48:48:5e:1e:a2:a6:24:a0:1e:18:71:fc:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:08:EB:F5:78:42:2A:AC:E3:97:4A:F0:7B:99:48:EB:A2:0F:4A
X509v3 Authority Key Identifier:
keyid:55:9B:EF:CF:34:98:69:73:D3:BE:45:93:51:61:78:E4:C3:AC:E2:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VZvvzzSYaXPTvkWTUWF45MOs4os.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167003/2F93F5CC32BB11EFA83D612FC4F9AE02/VZvvzzSYaXPTvkWTUWF45MOs4os.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f0:59:53:db:81:2e:4b:2d:19:d0:ba:b5:e9:3d:a5:d0:73:
b9:16:ad:5f:a9:b9:02:bc:43:2c:db:23:da:a1:f2:57:57:45:
a0:55:78:4e:96:65:d6:26:24:0b:2b:b4:f3:7e:1b:5a:7f:c0:
89:7e:7d:5c:6f:07:53:07:59:7e:c2:a9:32:f6:16:56:4a:6e:
d0:65:c4:56:a5:51:c2:a3:d5:f3:88:1d:a3:1d:3c:e8:8e:94:
7e:1e:a1:b4:94:18:12:c5:f5:39:66:18:f1:fc:eb:94:11:4f:
7d:b8:7e:b5:55:84:6f:4b:0a:3a:93:47:50:38:55:81:1e:b8:
e2:ce:6e:2d:ec:b3:28:a5:cb:4a:be:e3:0c:24:a1:8a:7d:f5:
35:57:87:97:35:70:e9:22:d0:33:da:be:20:13:4a:20:41:00:
21:c1:fe:8a:e5:f7:65:70:bb:99:b0:6f:77:55:8a:e8:3c:cd:
c6:35:40:73:04:7f:d0:82:51:32:39:8e:b2:b6:50:f8:8c:58:
f5:bb:6f:6e:64:2b:67:9b:34:31:47:76:21:ca:c0:4f:5d:29:
66:f7:ea:40:d3:10:24:0a:44:9d:6b:e1:91:71:9a:10:82:0b:
77:d2:45:3a:39:23:f6:3e:f1:48:7d:6d:7d:3d:67:8f:bb:3f:
55:66:4d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:40:20 2026 by rpki-client