
$ rpki-client -vvf rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
File: VRT85Dhj9Rga80k4LThBTpYPCW8.mft (raw, json)
Hash identifier: HNhjrOozoDGl3VX78S2XRV6Z1Uf5eOPFc3mSoCapJ6E=
Subject key identifier: 17:55:B5:57:3A:13:F5:6F:E2:9D:D6:D1:5F:CE:48:93:EB:9C:7D:45
Authority key identifier: 55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
Certificate issuer: /CN=A9195262/serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Certificate serial: 09A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
Manifest number: 0997
Signing time: Tue 02 Jun 2026 20:01:48 +0000
Manifest this update: Tue 02 Jun 2026 20:01:48 +0000
Manifest next update: Tue 09 Jun 2026 20:01:48 +0000
Files and hashes: 1: VRT85Dhj9Rga80k4LThBTpYPCW8.crl (hash: HNI62k5rSjfVYUmlZh30psa9wIXiva19IhraR2qjPkc=)
2: DFC21CD8B1CF11EAA8732709C4F9AE02.roa (hash: bJrrgsYLHjV75zVLzQBs3qgGPoWpvtfZTp73HYIJWw4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl
rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466 (0x9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195262, serialNumber=5514FCE43863F5181AF349382D38414E960F096F
Validity
Not Before: Jun 2 20:01:48 2026 GMT
Not After : Jun 9 20:01:48 2026 GMT
Subject: CN=6a1f36ac-d814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:d9:a2:66:09:7a:17:34:12:d6:0f:6c:e9:
66:21:46:4f:15:3e:0b:ce:37:59:41:f7:82:82:72:
19:5f:7e:a6:f2:2c:cd:65:71:98:d8:46:a5:1c:e0:
8b:dd:49:27:56:2c:98:47:f3:21:9d:d6:bf:ce:31:
49:b0:7f:11:f3:1b:41:de:a9:b8:d7:72:b5:a6:fe:
ce:c5:5c:4b:6f:6f:01:d4:fe:8e:8d:40:7d:29:50:
75:02:3d:be:6e:6c:f7:d2:b5:3c:8c:a2:d0:8b:5c:
fb:f3:27:57:77:08:c5:8c:0e:02:2f:ff:be:c7:a2:
42:e9:b4:b3:f3:6e:17:f3:04:f9:75:c2:4e:47:8d:
57:80:99:44:14:51:75:4d:88:b7:92:1d:27:c9:27:
9f:dd:a6:ae:3b:1e:32:09:4d:48:73:2f:b3:c9:2a:
94:2c:68:ab:b1:59:36:43:49:79:07:3b:81:01:45:
b5:05:8f:c0:07:a2:09:58:0a:fa:e3:eb:73:20:2d:
50:33:b8:60:89:e8:ff:a0:9c:ed:59:cb:4d:b2:72:
9e:76:ec:68:fe:24:c8:ac:a2:36:70:d0:2a:14:73:
2e:7b:c5:5d:21:47:c6:32:b1:1b:2d:f6:31:cb:1e:
59:27:5a:54:dc:58:b2:17:24:0f:fa:6f:9f:4f:4f:
c8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:B5:57:3A:13:F5:6F:E2:9D:D6:D1:5F:CE:48:93:EB:9C:7D:45
X509v3 Authority Key Identifier:
keyid:55:14:FC:E4:38:63:F5:18:1A:F3:49:38:2D:38:41:4E:96:0F:09:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRT85Dhj9Rga80k4LThBTpYPCW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195262/F7A6D59CB0FC11EA92289C41C4F9AE02/VRT85Dhj9Rga80k4LThBTpYPCW8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:65:71:26:67:4c:4f:37:06:53:ce:8d:a0:06:3a:60:12:8a:
2a:1f:f5:c1:17:a0:ff:9e:29:9d:d9:03:2d:58:1f:d1:41:62:
34:93:19:e5:6f:71:a6:cb:35:65:ff:3f:b7:26:2c:03:e9:5d:
7f:26:af:8b:ce:7b:78:8e:a4:b8:12:ed:02:29:16:53:5b:e3:
13:c3:9f:1f:47:fd:bb:f3:3a:e7:34:d5:56:d7:a4:2e:04:d3:
89:66:97:d3:ca:24:1c:e4:5b:31:7b:3e:20:f3:6f:b3:a1:d9:
39:64:b4:34:25:7b:36:9a:b4:35:51:75:22:0e:26:de:f7:52:
a4:2a:ab:df:9b:ea:d7:db:2c:61:d3:6e:69:c0:d2:71:f0:a0:
f2:a7:18:89:da:de:14:b1:02:2f:2f:1b:01:3c:0c:ff:6a:2e:
d2:b3:3b:1d:d3:f1:a4:a5:c4:d0:d3:06:4d:9f:c3:91:e5:ef:
57:52:14:e2:d6:a8:15:d3:bf:d9:64:2a:31:45:cc:4f:98:52:
7f:f4:ea:12:99:27:4c:37:bd:39:8c:eb:ec:a7:5f:5d:99:33:
7d:93:b1:54:77:51:b6:fe:fd:b6:cb:35:07:cb:6b:b9:5b:04:
09:90:bc:7e:87:5e:ad:ee:1d:f8:c0:ef:e2:3b:aa:17:b4:9a:
48:fe:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:24:11 2026 by rpki-client