
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
File: Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft (raw, json)
Hash identifier: c2K+x2am1a8BsIfhBUpmxgoCFxjtFPcXzOdzy+/S/Ew=
Subject key identifier: 70:E9:B7:E9:85:B4:CB:9C:42:03:1B:01:0F:E4:5E:54:EE:FE:85:0E
Authority key identifier: 56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
Certificate issuer: /CN=A9171172/serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Certificate serial: 0868
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
Manifest number: 0868
Signing time: Tue 06 Oct 2026 21:00:41 +0000
Manifest this update: Tue 06 Oct 2026 21:00:40 +0000
Manifest next update: Tue 13 Oct 2026 21:00:40 +0000
Files and hashes: 1: Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl (hash: 1qpTsOI+fnIqh3zC6QGQyDJkUxY8l1VS6Y4aqv5Ez7Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2152 (0x868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171172, serialNumber=560BBD6006CECD7300D1524C8A27439ABBF1597E
Validity
Not Before: Oct 6 21:00:40 2026 GMT
Not After : Oct 13 21:00:40 2026 GMT
Subject: CN=6ac56179-62fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:38:69:06:5d:1e:64:f8:7d:bc:9a:31:f8:
bd:ec:c4:25:1a:a7:a6:59:b5:b6:35:95:03:d9:ba:
d0:02:29:0f:f6:a5:35:d2:c8:da:70:98:64:e4:84:
ae:df:5e:9f:d6:53:b5:e6:cb:0c:e8:0d:f0:ee:c6:
cc:bf:b4:0e:c3:73:4c:3c:47:0c:77:e5:af:a7:1b:
3d:19:2a:ea:f9:4a:1a:99:34:69:08:22:95:dc:de:
81:13:7e:bf:9f:43:78:9d:0a:9a:9f:09:ac:35:ab:
2e:21:db:9f:c7:f1:04:2d:a5:fb:aa:5a:c7:35:c2:
ca:40:77:f8:cc:e7:bb:4f:3b:e2:c1:d0:c9:55:37:
0d:96:a2:92:3b:dd:e9:b2:52:50:a2:21:4c:c4:74:
4f:2c:e1:5d:37:99:b6:d1:0f:ac:c4:59:21:7c:4f:
01:af:56:cb:3a:7c:29:55:e8:88:a2:45:d2:52:47:
38:a0:ad:2c:8a:0c:6d:86:69:02:c9:b3:bb:80:6f:
c1:d7:a3:b6:26:98:d8:4b:85:44:23:27:c8:27:e8:
7a:4f:d4:d7:93:c5:f2:c0:d6:f2:a3:35:94:0c:f0:
0c:3f:73:20:ee:71:68:b5:50:0f:17:a3:82:29:94:
93:e5:99:cd:a8:64:41:e5:01:bc:54:f5:f5:93:53:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E9:B7:E9:85:B4:CB:9C:42:03:1B:01:0F:E4:5E:54:EE:FE:85:0E
X509v3 Authority Key Identifier:
keyid:56:0B:BD:60:06:CE:CD:73:00:D1:52:4C:8A:27:43:9A:BB:F1:59:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vgu9YAbOzXMA0VJMiidDmrvxWX4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/886B9A1C18BE11EBAC10DE46C4F9AE02/Vgu9YAbOzXMA0VJMiidDmrvxWX4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:03:cb:f5:58:56:e8:1d:32:03:70:11:40:a5:38:47:77:18:
36:af:3d:6b:73:42:f3:53:05:35:fc:f0:90:bc:76:40:ac:70:
2e:55:e7:00:5f:8e:3b:0c:6d:c0:ce:16:52:6c:27:10:4e:bb:
7a:70:07:0e:11:3a:c6:57:03:62:61:53:06:61:72:ef:93:95:
c0:93:fb:74:fe:aa:25:27:1a:53:5c:37:42:48:87:cd:b1:77:
76:a2:ee:1b:9c:13:49:e9:41:62:d3:a9:67:8c:16:86:0a:be:
5d:7a:3a:ac:af:8f:41:c1:6a:5b:f8:05:0b:37:f8:20:31:c6:
ca:66:74:b0:be:e9:84:85:44:13:d7:ef:d9:56:cd:97:94:ad:
76:2f:8c:90:c2:0a:fe:1d:51:91:15:dd:17:b4:f8:ae:38:8f:
e7:68:1c:b7:af:89:b5:13:37:c4:7b:2a:f3:76:4a:4b:14:82:
57:83:64:2d:f1:0d:ef:80:17:27:de:d5:43:a2:92:c9:e1:0f:
d1:8d:13:bb:3b:f3:2d:cb:cc:a4:f5:4d:f0:7f:d6:04:fa:9c:
00:8d:07:62:ef:57:0b:8a:96:df:97:a9:0c:1c:ff:e6:76:f3:
03:3d:f3:b9:c4:a0:63:2a:72:d2:87:45:e9:2f:37:c5:94:e1:
d2:10:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:04:49 2026 by rpki-client