
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
File: VCbPAAypXtlX-zh4RmES3qX5YzE.mft (raw, json)
Hash identifier: kL9tFXZP98keNdqBfyHizeyMCRUer4xBy/RNk0es7ZM=
Subject key identifier: 97:47:B0:8F:2A:9F:6E:26:D6:10:B5:AC:9D:80:D2:9A:55:AE:70:C1
Authority key identifier: 54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31
Certificate issuer: /CN=A918E756/serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
Manifest number: 08
Signing time: Wed 19 Aug 2026 09:55:27 +0000
Manifest this update: Wed 19 Aug 2026 09:55:26 +0000
Manifest next update: Wed 26 Aug 2026 09:55:26 +0000
Files and hashes: 1: VCbPAAypXtlX-zh4RmES3qX5YzE.crl (hash: tu41ssBMFySWMV/bykWJWeDqVgVQLMvdT0x/8QbibK8=)
2: 8977E636920211F1A2698D205E11F970.roa (hash: 2QkuVfzySfZOhqbjYE8wCK7l1ySmgIbwdfOI1fa+VA0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl
rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:55:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E756, serialNumber=5426CF000CA95ED957FB3878466112DEA5F96331
Validity
Not Before: Aug 19 09:55:26 2026 GMT
Not After : Aug 26 09:55:26 2026 GMT
Subject: CN=6a857d8f-b88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:a3:6b:17:11:c6:c6:9c:1e:a0:1b:27:31:
f3:fb:5b:7b:b5:cf:8d:ea:0b:1d:76:78:d9:34:7e:
64:99:c5:78:98:5f:cd:f0:8d:9c:91:c4:02:9c:14:
b9:4c:1f:75:6a:c6:84:6e:cb:66:47:0f:fe:2c:93:
5b:a8:78:58:3e:9c:52:a7:2e:15:6c:a1:33:c4:10:
5e:0a:02:57:f5:9d:5d:51:92:aa:65:dc:8e:ae:d4:
64:48:aa:27:2e:16:34:52:6a:53:d8:9f:52:de:ef:
24:e1:d8:5a:9b:fe:e1:ba:c0:b3:ef:f6:2c:b8:88:
e5:47:02:42:28:96:d4:b9:d2:1e:68:3a:ce:7c:41:
48:a3:ec:e3:f7:2d:35:bb:b1:1b:88:45:aa:8d:99:
d8:0d:3a:12:5f:e7:78:7d:98:1c:47:49:88:86:82:
84:4c:68:e0:78:e7:da:65:38:4d:33:35:76:76:7a:
b6:32:12:a7:43:fa:a2:01:c6:ad:a9:71:83:be:87:
84:ab:93:9d:db:20:3e:07:5b:46:9a:d9:01:bd:7a:
2d:14:8d:c3:af:d5:92:e9:9f:c8:ba:11:45:5c:b0:
97:b5:cb:84:ab:23:66:ff:21:23:b3:8e:5d:35:77:
4c:b0:cc:5f:49:fe:82:71:57:23:c7:7b:06:d5:b9:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:47:B0:8F:2A:9F:6E:26:D6:10:B5:AC:9D:80:D2:9A:55:AE:70:C1
X509v3 Authority Key Identifier:
keyid:54:26:CF:00:0C:A9:5E:D9:57:FB:38:78:46:61:12:DE:A5:F9:63:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCbPAAypXtlX-zh4RmES3qX5YzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E756/7591BEBE920011F18B018CA75D11F970/VCbPAAypXtlX-zh4RmES3qX5YzE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:f1:c3:0f:0b:d1:75:05:f1:6a:68:af:df:7d:8e:bf:0f:af:
e3:3a:6d:86:33:ec:17:49:38:20:82:d7:6a:66:05:78:93:1b:
c2:16:4b:38:02:d2:05:01:ba:23:ff:00:17:71:ae:6c:2d:d9:
99:7f:11:7b:73:5f:06:c0:9f:16:86:93:d6:0a:59:c1:a1:69:
91:07:06:88:38:ac:c1:2e:8b:d4:7a:bb:36:9f:2b:bf:a6:a3:
f4:53:f8:fc:80:a9:6a:fa:32:4e:39:a7:20:ce:bf:ea:70:f3:
79:c4:db:43:70:e1:ce:68:38:8d:d7:c7:88:d8:2f:dd:6c:7a:
19:49:73:91:2f:bb:95:fc:dd:f4:19:cf:42:35:63:7a:7d:e7:
1f:14:07:15:96:02:05:46:d9:d3:5a:87:79:d0:a8:66:b8:96:
b4:f5:b8:e9:6e:f3:61:a3:81:0c:42:77:f1:4e:ad:87:49:f4:
06:72:2a:76:a1:67:fc:35:98:61:34:02:1f:3e:47:57:94:5b:
b8:9d:62:0b:2f:d6:4d:54:13:41:41:72:84:6c:a6:27:89:27:
ba:d2:ca:8d:5c:bb:34:d5:e1:ee:be:34:fc:23:db:ed:b5:8b:
9c:b6:85:f5:7f:18:4d:db:14:2b:3e:0e:b6:66:6c:02:35:d2:
22:01:49:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:44:29 2026 by rpki-client