
$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File: Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier: OqNvtyJ8YopcPU4/lYC01DdRZZPuY3UTzcFGN+bgapY=
Subject key identifier: 28:5E:55:07:B5:AD:38:47:0E:B8:3B:75:81:72:42:EE:63:07:B7:F6
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer: /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial: 03C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number: 03B5
Signing time: Wed 19 Aug 2026 00:58:31 +0000
Manifest this update: Wed 19 Aug 2026 00:58:31 +0000
Manifest next update: Wed 26 Aug 2026 00:58:31 +0000
Files and hashes: 1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: 2jY9NfYjkYcTPOO+HP7ZH99Zf4mLsyRQmq9bcCjwrSM=)
2: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: tZN6ZhlBaJlSeqZvecE5/VxMhbLZpXKbOog3hKIU06c=)
3: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: AQR2AqdqPiSLigHSVYMCJz3V0m5doAkibsu5b67EN18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 00:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 963 (0x3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Validity
Not Before: Aug 19 00:58:31 2026 GMT
Not After : Aug 26 00:58:31 2026 GMT
Subject: CN=6a84ffb7-ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ac:ca:ca:8b:64:75:fa:47:d3:c0:52:a4:6a:
06:ff:dc:d6:a7:08:fd:2a:2e:79:dd:24:93:e8:0a:
11:dc:1f:0f:ee:3d:4e:87:d0:55:26:49:b3:cb:4b:
0f:92:e1:67:bf:a3:42:6f:28:39:3d:1d:66:20:66:
4a:99:22:1a:de:eb:4c:76:4b:4b:ba:22:2e:89:56:
85:ae:1b:24:86:09:7d:ae:3c:a4:65:f8:ae:2d:b4:
c2:34:aa:ea:85:ba:b1:07:76:17:9b:b0:1a:30:62:
13:58:86:0b:f1:2e:b2:a9:63:39:31:05:04:ab:ed:
3b:09:7f:33:46:45:ea:c8:c5:8c:ff:90:ef:6f:36:
91:09:ec:05:d2:47:b4:c7:43:db:db:9a:3a:d6:b9:
bf:be:9e:e8:8e:ae:0a:8e:03:37:48:00:86:08:54:
e5:c2:22:a5:49:1c:3c:0f:29:aa:d8:98:fb:f3:7e:
34:a9:ad:3e:ad:c0:64:c3:2c:42:45:e6:87:9f:15:
ec:33:14:12:e3:e4:f3:03:37:e8:5f:d4:8b:9d:43:
62:12:92:e8:a6:1c:b6:14:4c:65:1b:d1:4f:c4:4f:
f2:12:a5:81:9d:65:8d:67:97:b3:b5:cf:68:65:ed:
b6:22:4d:7b:8d:2d:80:48:56:97:24:11:56:df:b9:
73:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5E:55:07:B5:AD:38:47:0E:B8:3B:75:81:72:42:EE:63:07:B7:F6
X509v3 Authority Key Identifier:
keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:02:b5:a5:1a:d5:c4:97:5a:7c:75:ee:02:00:11:f0:de:13:
04:6e:c8:80:2f:96:80:28:c3:6e:b6:4f:fd:82:32:f0:96:b3:
28:c7:ab:85:dc:78:48:ad:aa:8c:5e:c4:5a:39:9a:56:78:07:
12:9a:bb:1f:65:44:7a:e5:8d:62:7f:d5:7e:7d:ad:9f:60:ef:
be:af:4d:be:6d:2b:2a:21:f1:d6:5a:6b:a5:c0:20:34:4b:26:
f8:48:50:9e:a5:1a:b7:0f:86:28:00:7c:ab:b8:05:75:51:f9:
86:8e:11:5a:a3:3d:8f:f5:df:99:ac:72:d5:34:29:fe:29:94:
ac:ee:67:23:ad:d3:c6:db:4b:e8:a6:b2:cc:25:53:b8:b0:ce:
dc:fa:40:e7:a8:fc:08:20:bd:2d:3c:ee:8b:6c:db:72:87:94:
13:d5:6c:34:b3:da:4b:01:e4:05:89:82:c0:97:6c:84:f2:d2:
60:f4:f1:d3:83:40:cc:87:4d:fb:67:7a:0f:8a:a6:54:ed:14:
4b:01:30:a8:ed:ce:82:35:a1:af:d9:a9:a5:1c:b0:6b:f5:20:
c0:97:45:71:0b:fd:74:0c:48:0e:cb:dc:01:03:21:0a:c1:f1:
e6:83:42:56:43:06:04:8d:de:c1:8b:f8:e3:78:7d:60:ee:98:
e7:bb:b4:36
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA8MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0FDOEMxMTAvBgNVBAUTKDU2M0YzMjk0OEVCQzFCMzkwRjMyQTBBQTNGMzYxNDc4
NUFGQ0U3QzIwHhcNMjYwODE5MDA1ODMxWhcNMjYwODI2MDA1ODMxWjAYMRYwFAYD
VQQDEw02YTg0ZmZiNy1jZTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk6zKyotkdfpH08BSpGoG/9zWpwj9Ki553SST6AoR3B8P7j1Oh9BVJkmzy0sP
kuFnv6NCbyg5PR1mIGZKmSIa3utMdktLuiIuiVaFrhskhgl9rjykZfiuLbTCNKrq
hbqxB3YXm7AaMGITWIYL8S6yqWM5MQUEq+07CX8zRkXqyMWM/5DvbzaRCewF0ke0
x0Pb25o61rm/vp7ojq4KjgM3SACGCFTlwiKlSRw8Dymq2Jj78340qa0+rcBkwyxC
ReaHnxXsMxQS4+TzAzfoX9SLnUNiEpLophy2FExlG9FPxE/yEqWBnWWNZ5eztc9o
Ze22Ik17jS2ASFaXJBFW37lzvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCheVQe1
rThHDrg7dYFyQu5jB7f2MB8GA1UdIwQYMBaAFFY/MpSOvBs5DzKgqj82FHha/OfC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUM4Qy84OTk2NkRDQUVC
QjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6a1BNcUNxUHpZVWVGcjg1
OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZqOHlsSTY4R3prUE1xQ3FQellVZUZyODU4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QUM4Qy84OTk2NkRDQUVCQjkxMUVDOTlFNTYxMEVDNEY5QUUwMi9Wajh5bEk2OEd6
a1BNcUNxUHpZVWVGcjg1OEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZwK1pRrVxJdafHXuAgAR8N4TBG7IgC+WgCjDbrZP/YIy8JazKMerhdx4SK2q
jF7EWjmaVngHEpq7H2VEeuWNYn/Vfn2tn2Dvvq9Nvm0rKiHx1lprpcAgNEsm+EhQ
nqUatw+GKAB8q7gFdVH5ho4RWqM9j/Xfmaxy1TQp/imUrO5nI63TxttL6KayzCVT
uLDO3PpA56j8CCC9LTzui2zbcoeUE9VsNLPaSwHkBYmCwJdshPLSYPTx04NAzIdN
+2d6D4qmVO0USwEwqO3OgjWhr9mppRywa/UgwJdFcQv9dAxIDsvcAQMhCsHx5oNC
VkMGBI3ewYv443h9YO6Y57u0Ng==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:18 2026 by rpki-client