
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
File: vmOANw9kBuY_dG-vUrxQHsTQvVI.mft (raw, json)
Hash identifier: OM3+2j7OygvEFwOYbk785BcMxPXDtKGdExf0OP0aWME=
Subject key identifier: 4B:A4:5E:E7:9C:C6:EF:21:2F:32:7C:40:93:BF:A8:58:25:DF:7B:48
Authority key identifier: BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
Certificate issuer: /CN=A9171B8D/serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
Manifest number: E1
Signing time: Thu 21 May 2026 06:41:23 +0000
Manifest this update: Thu 21 May 2026 06:41:22 +0000
Manifest next update: Thu 28 May 2026 06:41:22 +0000
Files and hashes: 1: vmOANw9kBuY_dG-vUrxQHsTQvVI.crl (hash: IXos6f/0+sQvADOuuSyzJ+pzxFGLghFwxjQvAbpZcnc=)
2: 394CC63C2D2F11F19323886DBB833773.roa (hash: 45eCaBsMYY5Dq3/DduTYtQquofDXNyzGbOAJxOjVzdY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 06:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171B8D, serialNumber=BE6380370F6406E63F746FAF52BC501EC4D0BD52
Validity
Not Before: May 21 06:41:22 2026 GMT
Not After : May 28 06:41:22 2026 GMT
Subject: CN=6a0ea912-713f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:81:cb:e0:3e:08:45:da:ec:80:4d:89:53:52:
92:75:4c:94:18:8c:66:78:2a:19:77:72:56:95:9a:
8d:88:be:09:44:e6:54:ba:21:26:06:80:8b:59:be:
b0:a5:36:57:22:a6:ff:05:11:08:cc:24:2c:47:b8:
48:95:93:91:66:4b:7b:04:87:0a:61:e9:80:62:df:
71:9e:16:2a:b5:d6:a9:c4:de:33:3b:8f:06:4d:73:
a8:d8:a3:f5:8c:f8:a9:d0:ae:62:bc:67:1a:54:59:
ef:96:1d:76:ce:c8:d8:39:16:78:bc:77:34:3d:f0:
79:cc:d7:f4:bf:13:8b:cc:73:27:7d:4a:73:c2:1a:
5f:2c:c3:b7:9f:53:76:d7:d9:00:e2:37:27:c5:91:
96:e3:d4:6b:a3:4e:05:e1:ce:f8:41:6b:95:d7:6a:
87:d4:ad:b3:bd:1d:ae:91:59:25:1e:7c:37:db:fb:
cb:95:34:38:f6:3f:01:44:a5:4a:d9:0e:ad:a4:27:
a6:30:e3:e4:54:91:c5:ad:30:59:f1:f5:77:6f:6b:
4a:d2:02:07:fa:e5:57:12:d0:0f:c0:10:32:f4:39:
ea:d4:a5:6e:ca:f9:7c:c6:03:94:7c:10:79:a9:b7:
8e:33:16:9b:d2:0e:9f:12:04:54:16:ac:96:f8:81:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:5E:E7:9C:C6:EF:21:2F:32:7C:40:93:BF:A8:58:25:DF:7B:48
X509v3 Authority Key Identifier:
keyid:BE:63:80:37:0F:64:06:E6:3F:74:6F:AF:52:BC:50:1E:C4:D0:BD:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vmOANw9kBuY_dG-vUrxQHsTQvVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B8D/1CF9A87A03D111F0B234BC15C4F9AE02/vmOANw9kBuY_dG-vUrxQHsTQvVI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:1b:27:71:47:4e:62:68:a8:b4:9a:7b:0b:61:8c:79:5b:c0:
69:34:06:f9:a2:3f:85:59:00:12:c5:43:b5:e9:45:08:ed:8e:
ea:b2:4a:22:34:17:76:a4:ec:8d:58:f7:d0:1b:79:ba:ba:8f:
b3:2e:8d:17:9e:14:1a:7e:52:e0:3f:6f:0e:a5:58:b9:7a:90:
5a:86:09:ce:53:80:79:ca:df:eb:71:53:f3:98:8c:7d:a8:4e:
21:30:e3:7d:69:1c:af:8d:95:95:02:4d:c1:dd:25:93:e9:f5:
95:c3:4e:87:84:83:2c:b3:6a:71:55:74:40:80:fd:df:a5:a9:
f9:1f:0b:da:b6:54:a5:db:38:4f:bc:b1:4d:dc:84:37:13:cf:
34:a7:eb:6b:a0:32:f4:cd:63:67:85:6d:39:fe:86:c8:58:65:
7e:84:d7:55:a9:2d:e5:e3:1b:80:08:5d:06:47:f6:7a:8c:3f:
29:c8:1f:9c:ba:79:15:28:18:fd:9b:e0:93:49:a5:ce:42:f9:
d1:62:98:05:c2:e2:e4:4d:06:c6:5c:39:54:3b:fe:9f:a7:19:
52:28:60:19:b6:6a:49:d5:7e:e8:3c:4a:65:a4:b4:ac:a0:3c:
fe:fa:dc:0b:2f:52:76:3d:b1:e4:0a:6f:64:70:e7:c7:7b:ad:
b5:0c:1d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:07 2026 by rpki-client