
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
File: vJfyb7J4ln3TyjnFndCMaiwjBvk.mft (raw, json)
Hash identifier: qt9KcjaMOd/kYiVulY7HnQodV5SETbMqb56iBfoTZpY=
Subject key identifier: 91:2B:7B:10:0E:46:87:A2:3B:00:50:8E:AD:42:FA:4F:40:A3:16:30
Authority key identifier: BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
Certificate issuer: /CN=A9171845/serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Certificate serial: 05F5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
Manifest number: 05E5
Signing time: Mon 26 Oct 2026 22:53:12 +0000
Manifest this update: Mon 26 Oct 2026 22:53:11 +0000
Manifest next update: Mon 02 Nov 2026 22:53:11 +0000
Files and hashes: 1: vJfyb7J4ln3TyjnFndCMaiwjBvk.crl (hash: hlwZHYPSwWbYkOjicsbuQcjswrvvQ6IIXGYd48SMUkk=)
2: 8B91EDB420CD11EC97292B78C4F9AE02.roa (hash: RjP1SjVYlpextmQWA6WLR//gniORCU8M6e6l6bHmv1w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171845, serialNumber=BC97F26FB278967DD3CA39C59DD08C6A2C2306F9
Validity
Not Before: Oct 26 22:53:11 2026 GMT
Not After : Nov 2 22:53:11 2026 GMT
Subject: CN=6adfd9d7-3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:99:4f:dd:65:03:b2:31:0d:ec:86:6c:f3:
d0:56:2c:29:cc:4d:d0:22:f2:ae:48:3f:aa:34:a3:
6d:2e:90:68:f4:74:3c:87:61:ae:98:0d:dd:dd:ba:
af:14:7e:70:c1:0b:c8:e6:ce:7a:0e:58:1e:34:a7:
24:ba:34:75:30:69:0c:f5:41:35:68:a6:67:93:d3:
bf:cc:e6:34:0a:51:cc:9e:de:04:ed:d8:86:16:ec:
c3:b1:29:da:09:13:e3:13:fb:7f:c5:d4:dc:6d:f4:
4d:f8:09:80:4b:45:dc:9c:b8:ba:ba:7b:72:18:61:
6d:87:ec:67:59:e6:bd:cb:9c:51:72:e0:68:55:ae:
bb:30:7e:44:1f:c6:9f:f0:b1:02:b4:3f:04:29:05:
35:43:66:bc:15:44:41:8a:eb:ed:df:4f:91:95:c4:
e2:52:c0:d5:2c:63:7e:b5:91:b0:db:28:03:c6:bc:
9e:3e:02:ff:7c:2c:89:c2:e3:39:09:d0:13:19:94:
b3:c8:dd:8d:ea:4a:62:be:78:69:d2:42:d8:e6:b8:
1a:bb:65:40:a1:85:f8:9f:91:71:f8:f4:d4:43:de:
6c:46:ba:9b:29:9a:27:cc:3f:d6:bd:05:9f:6e:a1:
8c:4d:71:b7:6d:f8:35:66:87:93:6f:65:9f:21:ba:
54:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:7B:10:0E:46:87:A2:3B:00:50:8E:AD:42:FA:4F:40:A3:16:30
X509v3 Authority Key Identifier:
keyid:BC:97:F2:6F:B2:78:96:7D:D3:CA:39:C5:9D:D0:8C:6A:2C:23:06:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vJfyb7J4ln3TyjnFndCMaiwjBvk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171845/7B62C80820CA11ECB66C1452C4F9AE02/vJfyb7J4ln3TyjnFndCMaiwjBvk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:35:a4:d1:ea:c7:12:f3:cc:15:99:cd:3a:62:c5:4c:35:28:
71:da:30:b3:70:c8:79:53:76:59:5c:77:87:eb:76:4a:e0:66:
3b:a8:17:2f:b5:bb:23:24:fd:87:3f:2c:0a:45:29:fa:b7:c3:
c9:d3:b4:ee:c0:1a:dd:e0:32:69:8e:44:2b:fa:b7:e9:cb:72:
8f:50:c3:4e:8e:fe:7c:a0:e3:14:e5:51:f9:f1:52:fa:a9:bb:
2b:d1:e1:bd:7d:8b:4c:cb:4b:72:9c:78:14:07:c5:63:c7:13:
a7:a2:83:64:c8:23:30:56:6e:a8:6c:fb:cb:34:08:8c:cd:c5:
b8:71:e9:99:82:49:66:5d:da:b0:f7:e5:ec:e4:2a:43:53:a6:
a1:bc:7e:2c:94:db:21:df:b6:89:0f:26:c8:c8:17:89:33:15:
ef:cc:f0:79:30:b4:ce:52:fd:81:d4:4d:2b:31:3f:14:76:01:
4b:3e:1c:07:d6:45:5d:6f:4b:d6:0d:de:a6:8d:85:b0:26:f3:
57:3d:5b:5f:34:e0:d1:e7:04:8c:68:d3:74:f5:14:f4:db:bb:
37:d0:62:93:9a:16:2b:2b:3b:b6:36:de:86:1a:35:b4:e6:04:
df:36:06:f3:ba:c6:d1:7b:eb:2a:f3:3d:a2:b1:10:a0:f8:b4:
90:02:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:29:04 2026 by rpki-client