
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
File: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft (raw, json)
Hash identifier: ZWdQw7WP0TVLZGMf+Y8YKDFQtow3bkXNLkkBOSeUkEo=
Subject key identifier: 3B:EA:8A:30:C2:4C:3C:B5:95:01:9A:D3:A6:32:52:1E:A6:E4:BF:AA
Authority key identifier: 54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
Certificate issuer: /CN=A9195AA2/serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Certificate serial: 0D38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
Manifest number: 160D
Signing time: Sun 04 Oct 2026 18:14:41 +0000
Manifest this update: Sun 04 Oct 2026 18:14:40 +0000
Manifest next update: Sun 11 Oct 2026 18:14:40 +0000
Files and hashes: 1: VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl (hash: coXl/S0QEhUz3S6pfhgAYtvXRwsLhuaq5tZ0+WHsCHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3384 (0xd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9195AA2, serialNumber=54583C29BBFB5009DB9CC05614F63D62BCB77C39
Validity
Not Before: Oct 4 18:14:40 2026 GMT
Not After : Oct 11 18:14:40 2026 GMT
Subject: CN=6ac29791-0ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:95:de:1d:2a:9d:73:a7:98:e8:69:6e:c1:
04:23:82:d8:fa:bf:2e:a3:38:24:2a:84:9e:fb:a9:
54:e7:d2:65:d8:b9:51:3c:83:3e:e2:e3:be:41:f0:
5f:4d:e5:4d:46:b8:63:e9:a9:f9:5e:6c:64:47:7a:
2d:42:00:35:a2:ad:14:ba:c0:2e:88:2b:0d:54:3f:
86:1c:22:1a:e1:b4:8c:ef:74:87:54:a0:55:cc:7b:
8e:23:0d:d8:28:af:b9:8d:7a:c1:a8:4f:a9:a1:a5:
2e:2c:47:4c:a1:b9:c6:22:e7:66:03:2b:47:00:47:
0a:9f:ac:5b:ef:1f:80:0f:a2:77:b0:b9:0a:07:19:
b3:38:03:f6:7d:e5:05:f5:f2:6c:5d:15:83:d7:db:
ec:e1:5e:37:f6:3d:36:17:fd:67:24:d7:7c:86:dd:
69:9d:f4:ac:93:ce:2b:f8:48:58:01:db:a1:a2:85:
b1:55:10:52:4a:46:66:c3:66:ac:11:53:ed:6a:c1:
d8:ee:ac:10:5e:dd:1f:ba:3c:f4:e4:bc:f0:49:58:
b1:57:34:58:b6:78:2c:f6:e6:44:e4:0d:df:bb:42:
46:f2:c1:e7:13:91:ac:77:6e:da:5b:ca:6e:9f:6a:
cc:74:a3:d3:c3:fc:3d:8a:40:b3:32:eb:99:69:11:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EA:8A:30:C2:4C:3C:B5:95:01:9A:D3:A6:32:52:1E:A6:E4:BF:AA
X509v3 Authority Key Identifier:
keyid:54:58:3C:29:BB:FB:50:09:DB:9C:C0:56:14:F6:3D:62:BC:B7:7C:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/VFg8Kbv7UAnbnMBWFPY9Yry3fDk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:b1:bf:23:60:4d:fe:7d:1b:3f:d7:8a:28:ae:b6:4a:60:63:
d3:f4:a9:c0:7e:60:04:12:fc:02:2a:d9:ad:08:a8:71:e5:1b:
4f:f6:37:bf:b3:ce:26:f4:49:ee:21:d3:ec:f2:74:aa:14:89:
10:e6:b4:8e:3d:d0:ff:37:68:54:9b:df:ea:94:46:a1:a2:89:
3f:62:29:8a:61:b3:32:ef:69:a4:75:58:cd:4c:1a:c7:09:68:
1d:2f:37:0b:3e:2d:20:86:42:fb:36:1e:d3:9b:a2:5a:0d:4f:
e1:d8:bf:99:dd:bf:34:a8:86:d8:66:e6:18:79:7b:7e:f4:26:
4c:19:70:25:76:19:c4:14:f9:68:8a:23:a9:15:10:3a:04:17:
f8:77:af:c8:6b:7c:ca:8d:ed:01:ab:56:51:24:a3:31:f0:dc:
8a:85:1a:39:90:bf:c1:df:eb:b6:dd:2d:ba:0b:cf:98:61:44:
78:37:86:1a:0f:3b:a5:39:1f:41:e2:2d:2a:41:62:df:82:68:
e1:02:b5:f2:a9:95:79:c0:09:4d:08:8e:50:c5:5a:6e:c8:44:
7a:5e:ed:96:73:f9:11:2c:7a:76:8d:4a:89:0c:2b:7f:69:3e:
20:b5:77:af:e9:71:ad:42:c6:82:70:28:b5:61:96:de:0d:49:
b6:fb:6c:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDTgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVBQTIxMTAvBgNVBAUTKDU0NTgzQzI5QkJGQjUwMDlEQjlDQzA1NjE0RjYzRDYy
QkNCNzdDMzkwHhcNMjYxMDA0MTgxNDQwWhcNMjYxMDExMTgxNDQwWjAYMRYwFAYD
VQQDEw02YWMyOTc5MS0wY2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxceV3h0qnXOnmOhpbsEEI4LY+r8uozgkKoSe+6lU59Jl2LlRPIM+4uO+QfBf
TeVNRrhj6an5XmxkR3otQgA1oq0UusAuiCsNVD+GHCIa4bSM73SHVKBVzHuOIw3Y
KK+5jXrBqE+poaUuLEdMobnGIudmAytHAEcKn6xb7x+AD6J3sLkKBxmzOAP2feUF
9fJsXRWD19vs4V439j02F/1nJNd8ht1pnfSsk84r+EhYAduhooWxVRBSSkZmw2as
EVPtasHY7qwQXt0fujz05LzwSVixVzRYtngs9uZE5A3fu0JG8sHnE5Gsd27aW8pu
n2rMdKPTw/w9ikCzMuuZaRGo+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvqijDC
TDy1lQGa06YyUh6m5L+qMB8GA1UdIwQYMBaAFFRYPCm7+1AJ25zAVhT2PWK8t3w5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2
QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VBbmJuTUJXRlBZOVlyeTNm
RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZGZzhLYnY3VUFuYm5NQldGUFk5WXJ5M2ZEay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9WRmc4S2J2N1VB
bmJuTUJXRlBZOVlyeTNmRGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa7G/I2BN/n0bP9eKKK62SmBj0/SpwH5gBBL8AirZrQioceUbT/Y3v7POJvRJ
7iHT7PJ0qhSJEOa0jj3Q/zdoVJvf6pRGoaKJP2IpimGzMu9ppHVYzUwaxwloHS83
Cz4tIIZC+zYe05uiWg1P4di/md2/NKiG2GbmGHl7fvQmTBlwJXYZxBT5aIojqRUQ
OgQX+HevyGt8yo3tAatWUSSjMfDcioUaOZC/wd/rtt0tugvPmGFEeDeGGg87pTkf
QeItKkFi34Jo4QK18qmVecAJTQiOUMVabshEel7tlnP5ESx6do1KiQwrf2k+ILV3
r+lxrULGgnAotWGW3g1JtvtsNw==
-----END CERTIFICATE-----
Generated at Tue Oct 6 08:41:29 2026 by rpki-client