
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier: M1fNbjLHLW9TmUiJzoW3Qc0/xwPWXCagq5aj/DARWkA=
Subject key identifier: D7:7E:8E:90:60:57:35:BF:F0:93:73:05:D0:B8:55:2C:01:D6:B1:B9
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number: 018B
Signing time: Mon 01 Jun 2026 05:13:15 +0000
Manifest this update: Mon 01 Jun 2026 05:13:15 +0000
Manifest next update: Mon 08 Jun 2026 05:13:15 +0000
Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: WKOAK64eNMWJvabe2UEU71SfMmBVwp/X40ZZ23jllXE=)
2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: 80SnbVxPivXWHEwHHqV8hYnrOqhwI1EXSpGak/LvQw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Jun 2026 05:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
Validity
Not Before: Jun 1 05:13:15 2026 GMT
Not After : Jun 8 05:13:15 2026 GMT
Subject: CN=6a1d14eb-ed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:32:96:91:e3:27:2f:bd:01:72:45:f6:0a:
f9:e0:1e:75:48:cb:1b:e8:67:9d:54:ff:11:9b:af:
77:5f:bd:c3:66:f5:92:b9:93:2b:10:a6:d0:e7:70:
43:67:1d:db:b5:ef:5f:0b:2d:01:0a:7b:ae:48:21:
6d:46:8b:08:da:ae:d2:e8:7d:9d:6b:d9:57:1a:62:
97:34:d0:a6:5b:36:bb:71:ca:f3:ca:ff:e3:fe:98:
6d:bd:e2:03:31:9d:34:b9:ca:b5:88:09:12:46:14:
87:9a:61:f1:cd:64:27:c5:82:77:8f:db:c9:9c:2b:
93:d7:78:91:95:db:7b:d1:bd:d2:99:0f:13:bc:8e:
71:b0:99:ec:de:d4:12:38:8e:87:e8:d8:59:f1:b7:
2d:b3:4a:f8:0e:92:1a:2b:54:fe:15:c1:2a:d6:04:
8c:ca:f9:f4:c3:a7:52:af:49:66:cd:45:34:b1:ee:
fd:88:b0:95:ef:a4:5e:86:d2:7c:73:58:05:25:10:
3b:24:11:0f:53:1e:da:ae:12:8f:69:92:19:94:2b:
4b:bf:6a:59:3a:75:62:48:ce:a4:7c:fb:14:7e:d3:
d5:e4:c0:c8:b6:b7:49:ae:93:37:43:69:ce:35:61:
9c:a9:86:5d:32:c7:f0:52:cd:f0:ba:19:c7:f1:99:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7E:8E:90:60:57:35:BF:F0:93:73:05:D0:B8:55:2C:01:D6:B1:B9
X509v3 Authority Key Identifier:
keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:d3:7e:bd:b7:15:68:e6:5a:6e:e8:d2:11:49:ad:ff:76:
16:a3:32:4e:e6:b7:bc:6f:67:f5:29:2f:20:3e:6f:05:5c:70:
b0:c9:51:5e:86:21:ba:0d:09:1a:56:0a:3c:43:f8:4b:f6:1e:
8d:27:17:21:34:e4:a9:aa:98:95:d6:2a:5d:d1:02:81:c3:0c:
57:65:f7:7d:ed:61:ca:94:29:23:ba:52:b4:83:87:48:87:06:
79:c9:ce:59:a2:b5:fc:f8:57:84:ca:4e:bc:d3:af:57:41:9f:
f1:d7:1c:83:4f:c1:fe:8b:b7:9c:5d:c7:5c:06:fd:89:35:e9:
35:79:40:7c:f2:12:1e:62:a5:43:c7:e2:37:51:fb:53:a7:1d:
02:9f:6f:de:cb:ff:85:79:ad:ee:50:d4:6b:91:e5:9c:f6:0d:
2f:b9:c8:3a:1c:42:88:f6:05:cd:71:72:a8:63:94:2d:40:49:
27:a1:03:f7:33:98:65:91:32:cd:3d:06:c0:f3:52:8f:b8:71:
d6:ee:48:c7:57:b7:10:c1:58:03:59:eb:64:33:95:85:2e:43:
52:43:ea:2d:1b:c8:68:2f:bf:7b:46:a2:a0:87:64:7f:0a:5f:
7d:8d:46:9d:8a:05:82:8f:21:10:e2:a2:72:ec:4f:7f:d1:04:
b7:dd:a2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:13:56 2026 by rpki-client