
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File: rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier: QWjRPFb7GaGHTHnYkQz/tZxInqIbm5hGVYM/H+Jzxnc=
Subject key identifier: 24:D3:A7:BF:65:5B:6C:C0:45:73:90:D6:2A:77:D8:39:0A:39:8D:CC
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer: /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial: 016F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number: 0165
Signing time: Sat 17 Oct 2026 05:40:16 +0000
Manifest this update: Sat 17 Oct 2026 05:40:15 +0000
Manifest next update: Sat 24 Oct 2026 05:40:15 +0000
Files and hashes: 1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: 5O0cVljhGjWGLgFS3z+LA5DT4ydpb/oRow7wP6GyvI0=)
2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: Ym98AGZEM1BksP4Y3kvzDkvtm38BxUohqAh//gTG7x8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 367 (0x16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Validity
Not Before: Oct 17 05:40:15 2026 GMT
Not After : Oct 24 05:40:15 2026 GMT
Subject: CN=6ad30a40-6b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:c0:6e:64:7c:09:ff:1a:c9:07:40:fa:16:
db:a2:2e:1c:36:ad:53:6b:2a:24:55:1a:b6:f4:82:
59:e1:6f:8e:8f:43:de:50:fa:50:99:b0:c7:36:82:
57:4d:cd:0c:ea:36:b3:8f:c7:b0:c0:63:05:eb:b6:
8a:50:f3:7e:c3:69:88:ab:9f:e3:fb:35:d7:7e:b1:
20:7c:58:d5:26:84:a6:7f:e8:f1:75:02:06:72:f3:
92:84:e6:31:0f:f0:4e:5e:34:87:a4:39:7b:ea:aa:
52:7c:d4:ef:5b:c7:62:0c:b0:98:0b:69:9a:a3:0b:
a6:f6:aa:95:ef:17:d9:f4:14:1d:38:6d:fb:ce:01:
5f:a2:10:3b:ee:32:b9:f7:b5:31:a5:03:96:04:5f:
95:be:6c:1b:36:88:3e:cb:30:3b:55:9e:89:86:88:
64:60:e1:9e:af:1e:05:d4:1f:58:a8:5a:ad:73:a2:
44:34:ce:10:6e:15:18:e5:67:20:de:d8:28:a7:d0:
44:3d:b9:39:a3:5d:9a:2c:5b:67:4f:a5:51:32:14:
10:f6:72:cd:d2:e7:99:d9:23:51:2c:92:98:d9:fc:
31:8a:bb:8b:cf:9e:ac:f6:b2:1d:2c:93:f7:99:9e:
37:21:69:26:b6:82:14:80:78:ae:7d:6b:f8:4d:2c:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D3:A7:BF:65:5B:6C:C0:45:73:90:D6:2A:77:D8:39:0A:39:8D:CC
X509v3 Authority Key Identifier:
keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:46:58:c0:6a:4f:cf:f3:95:cd:c5:1c:85:58:38:98:d8:c0:
b7:b9:6a:09:ae:18:6d:09:20:46:a3:0f:cd:56:f5:0e:5b:44:
8f:e4:29:b4:19:3a:dd:fc:27:5b:a9:10:47:47:fb:ca:a0:d4:
c6:75:8d:53:d4:42:af:1f:ff:2a:a4:07:31:65:83:dc:58:1b:
81:96:b7:45:3f:d0:55:77:c0:5d:a6:a1:0f:1f:57:32:9f:b1:
9a:8f:fb:19:c1:e9:91:9f:cf:9e:84:5a:03:46:cc:5b:eb:b4:
c0:2b:e8:64:df:e2:0c:df:c4:9b:1c:43:33:42:ae:47:21:77:
86:c9:ac:66:64:97:22:06:2b:3b:08:97:6e:29:8f:69:77:cc:
ba:f6:5f:f8:f8:8f:50:51:12:13:a5:30:af:a9:72:80:38:43:
6d:12:8d:38:0b:bb:4d:8b:14:7e:a6:ee:96:76:40:57:4c:d0:
f7:82:33:50:8e:1b:6e:01:0e:b9:00:2a:98:9e:57:dd:8d:5d:
f7:22:bb:10:14:d7:d4:93:21:c3:2d:07:40:46:3e:e6:5e:4c:
18:82:3a:93:a5:a6:0c:4d:ac:e9:1f:77:d8:09:7a:48:2a:c8:
60:67:91:84:f0:13:71:2d:a9:ea:15:9d:1c:52:00:cd:45:32:
09:cf:f5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:45:47 2026 by rpki-client