
$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
File: VngmFidUtGDLWGbawxSIDHA1Rh0.mft (raw, json)
Hash identifier: Je1PNKjhvdDjLSMlIV5iXJkzl29PNYHiO6e9hWLEsYo=
Subject key identifier: 49:7B:CF:B2:76:4E:5D:37:D4:32:C5:7F:DB:85:C0:C7:19:06:64:B6
Authority key identifier: 56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
Certificate issuer: /CN=A917D9B8/serialNumber=567826162754B460CB5866DAC314880C7035461D
Certificate serial: 01C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
Manifest number: 01BB
Signing time: Thu 03 Sep 2026 04:07:08 +0000
Manifest this update: Thu 03 Sep 2026 04:07:08 +0000
Manifest next update: Thu 10 Sep 2026 04:07:08 +0000
Files and hashes: 1: VngmFidUtGDLWGbawxSIDHA1Rh0.crl (hash: M0ldb2I9sjh7KW41QHWBDgYk3F0lwgNbeCtaDtq2/Bc=)
2: DFDEC4D007A411EFAB20A473C4F9AE02.roa (hash: 80SnbVxPivXWHEwHHqV8hYnrOqhwI1EXSpGak/LvQw0=)
3: 150427207ADC11F19849D5B474A30FBC.roa (hash: LPSfyrjFtmZd5dQ1E/AZ0uGCOSVP/h9k3xx6rrDu3bk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 04:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D9B8, serialNumber=567826162754B460CB5866DAC314880C7035461D
Validity
Not Before: Sep 3 04:07:08 2026 GMT
Not After : Sep 10 04:07:08 2026 GMT
Subject: CN=6a98f26c-e1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:0a:57:41:67:c2:db:4b:f9:bb:d1:1f:09:
4c:87:17:aa:a9:73:c3:e4:19:5a:f0:3c:23:19:21:
c7:7c:8c:5d:d3:e6:74:0a:9d:bb:6e:4a:35:2b:be:
2c:ac:b1:f2:e0:d2:02:92:73:2e:42:06:81:d3:06:
0c:6a:a5:6a:f4:ae:fd:7d:58:fc:75:90:b8:c6:71:
2b:65:0a:d7:3e:9f:65:f0:ee:44:a3:67:e1:6b:dd:
ac:09:ff:82:86:67:05:eb:8a:59:a9:cd:3a:e0:07:
b8:21:40:ab:fa:3b:e1:15:a0:a6:98:3d:8a:8d:15:
d8:b3:d7:82:b3:5e:86:4c:d8:de:d3:8e:e1:8a:39:
d3:b7:cf:50:52:41:bc:2e:9d:ab:b9:d0:99:2c:28:
0c:82:c7:35:53:82:45:44:12:aa:3d:73:5e:ae:14:
55:db:a6:56:48:1a:f5:75:5d:3d:4f:67:19:98:3d:
9c:8f:9a:66:80:16:95:f2:73:30:be:c2:c9:2d:46:
4c:15:92:e9:1e:0d:8a:d2:63:bc:d0:e2:19:ec:37:
a2:a8:53:4c:e6:a8:ff:cb:91:61:c7:0a:e4:dc:f9:
0b:39:d2:c8:e0:6f:2e:91:28:dc:be:60:61:5b:6f:
97:fc:73:81:c2:48:4e:3d:3e:68:70:8b:2a:76:fd:
63:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:CF:B2:76:4E:5D:37:D4:32:C5:7F:DB:85:C0:C7:19:06:64:B6
X509v3 Authority Key Identifier:
keyid:56:78:26:16:27:54:B4:60:CB:58:66:DA:C3:14:88:0C:70:35:46:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VngmFidUtGDLWGbawxSIDHA1Rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9B8/C8B1D44E07A111EF84F3D26AC4F9AE02/VngmFidUtGDLWGbawxSIDHA1Rh0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:09:8b:89:b3:b4:45:8d:26:26:8e:48:fc:9a:f6:a9:66:
45:c1:f0:96:d0:7f:52:7a:70:59:59:cf:98:8b:99:72:e9:86:
ec:9b:a4:24:7d:a9:76:e5:fb:87:64:5f:14:73:02:9d:d8:bc:
15:e5:a8:f7:76:4e:e5:5d:2d:1f:68:58:ce:f9:c3:07:6b:db:
8a:97:0d:84:c5:b4:46:a5:9e:a6:77:22:41:99:e3:75:ae:bf:
15:44:54:d7:53:ab:22:4d:5f:9f:ba:e1:0b:f8:bd:e4:4f:84:
2a:fd:4b:b1:d1:bb:cc:03:1a:7d:71:ce:e0:2d:f6:87:8e:69:
7b:c3:60:c8:68:d6:9f:33:63:a3:dc:64:03:68:bd:63:77:11:
40:fc:4a:62:f0:a0:f8:f8:4a:4a:47:8c:2e:c1:e8:4a:8d:98:
5e:36:42:ec:6e:59:0d:3f:28:13:6a:53:3e:09:3a:76:88:18:
17:d3:13:3d:3c:f4:60:14:6a:36:34:52:75:d1:ce:ae:e3:81:
6c:93:44:84:f9:2a:ca:9b:19:2c:86:b8:4c:1d:80:31:6f:f2:
15:aa:6d:07:37:03:3a:b4:7d:b2:c0:95:d6:00:89:ad:e6:ea:
98:09:e8:91:ed:47:62:72:e2:b2:17:1c:6c:f9:be:1e:61:f2:
70:76:fc:1e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q5QjgxMTAvBgNVBAUTKDU2NzgyNjE2Mjc1NEI0NjBDQjU4NjZEQUMzMTQ4ODBD
NzAzNTQ2MUQwHhcNMjYwOTAzMDQwNzA4WhcNMjYwOTEwMDQwNzA4WjAYMRYwFAYD
VQQDEw02YTk4ZjI2Yy1lMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6gKV0FnwttL+bvRHwlMhxeqqXPD5Bla8DwjGSHHfIxd0+Z0Cp27bko1K74s
rLHy4NICknMuQgaB0wYMaqVq9K79fVj8dZC4xnErZQrXPp9l8O5Eo2fha92sCf+C
hmcF64pZqc064Ae4IUCr+jvhFaCmmD2KjRXYs9eCs16GTNje047hijnTt89QUkG8
Lp2rudCZLCgMgsc1U4JFRBKqPXNerhRV26ZWSBr1dV09T2cZmD2cj5pmgBaV8nMw
vsLJLUZMFZLpHg2K0mO80OIZ7DeiqFNM5qj/y5Fhxwrk3PkLOdLI4G8ukSjcvmBh
W2+X/HOBwkhOPT5ocIsqdv1j1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEl7z7J2
Tl031DLFf9uFwMcZBmS2MB8GA1UdIwQYMBaAFFZ4JhYnVLRgy1hm2sMUiAxwNUYd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlCOC9DOEIxRDQ0RTA3
QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRHRExXR2Jhd3hTSURIQTFS
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZuZ21GaWRVdEdETFdHYmF3eFNJREhBMVJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDlCOC9DOEIxRDQ0RTA3QTExMUVGODRGM0QyNkFDNEY5QUUwMi9WbmdtRmlkVXRH
RExXR2Jhd3hTSURIQTFSaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIKkJi4mztEWNJiaOSPya9qlmRcHwltB/UnpwWVnPmIuZcumG7JukJH2pduX7
h2RfFHMCndi8FeWo93ZO5V0tH2hYzvnDB2vbipcNhMW0RqWepnciQZnjda6/FURU
11OrIk1fn7rhC/i95E+EKv1LsdG7zAMafXHO4C32h45pe8NgyGjWnzNjo9xkA2i9
Y3cRQPxKYvCg+PhKSkeMLsHoSo2YXjZC7G5ZDT8oE2pTPgk6dogYF9MTPTz0YBRq
NjRSddHOruOBbJNEhPkqypsZLIa4TB2AMW/yFaptBzcDOrR9ssCV1gCJrebqmAno
ke1HYnLishccbPm+HmHycHb8Hg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:53:29 2026 by rpki-client