
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier: VnT+z2/gmGGTr0jdKSG7i0K+2DPOsTShYDyO5J0I0sI=
Subject key identifier: AB:47:93:02:04:B7:DA:DC:FE:46:25:86:6F:74:F7:E7:D2:3B:6C:0D
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial: 046D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number: 114C
Signing time: Sun 01 Mar 2026 22:56:54 +0000
Manifest this update: Sun 01 Mar 2026 22:56:54 +0000
Manifest next update: Sun 08 Mar 2026 22:56:54 +0000
Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: 5P9Rc3m8SsvgA2LR1RfKCrrIjHGz9geR7x5R+YcOoSI=)
2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: +a9x011lIrelYT5vohtPE5YuGG+ywFHENvyw6lCFvco=)
3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: mDjCsaxH5mUMKVvZsFwN09lkj4cypyPUsp4Oj/a1naU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:56:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1133 (0x46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Validity
Not Before: Mar 1 22:56:54 2026 GMT
Not After : Mar 8 22:56:54 2026 GMT
Subject: CN=69a4c436-6111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:df:d9:bb:dc:ed:82:7c:74:ff:3e:be:36:
7b:36:16:cd:87:e0:c3:85:30:be:cc:1c:7c:9e:4b:
13:e4:d8:b2:a1:1d:cd:bb:a6:5a:ca:ee:ef:70:1e:
1d:d9:e2:20:16:ac:d4:92:0f:4f:15:8c:41:0b:55:
62:a5:cc:68:38:15:92:b8:59:77:6d:bd:0b:20:a9:
de:fb:12:1d:4c:b9:d0:30:74:72:5a:0b:b8:3d:74:
52:51:34:48:3c:aa:11:72:70:11:df:20:82:97:85:
83:a7:c7:fb:4c:72:ff:68:ad:3f:b4:f3:7f:91:c7:
7d:c9:80:37:65:43:46:5c:3a:6c:3b:4d:27:70:f5:
b0:28:1d:af:a3:5f:11:0b:b8:c9:83:b5:be:1a:82:
ea:58:bb:c2:ec:c1:da:86:1a:e3:2c:9a:d8:bb:05:
f7:3e:4d:b0:c2:f2:5e:1c:c8:2c:88:b9:33:32:d3:
ac:aa:d4:b9:4f:6c:dc:8b:c4:28:71:a7:41:8c:b4:
2f:a6:28:9f:79:da:76:a1:7d:b0:f8:3b:3e:af:53:
3f:d0:44:99:a9:0f:86:28:7c:7a:c1:43:7c:d7:d3:
cd:13:28:55:fc:7b:6c:36:a6:5b:a0:09:d7:c8:f8:
9c:34:31:c4:c2:05:22:b6:82:5d:02:c9:07:94:69:
5f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:93:02:04:B7:DA:DC:FE:46:25:86:6F:74:F7:E7:D2:3B:6C:0D
X509v3 Authority Key Identifier:
keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:fb:76:6a:a3:d3:4d:97:df:0a:50:e2:7b:02:89:ef:b5:9d:
c9:55:b1:02:6f:02:75:f7:5b:75:53:f1:f8:6b:a1:51:0a:8b:
61:58:e5:ce:be:22:fa:bd:37:cb:ca:02:13:78:f5:43:91:96:
1f:02:af:81:1f:26:d4:1e:d6:ed:74:12:8e:90:93:64:53:55:
37:8a:95:07:a2:2f:d2:50:78:ec:7a:ea:ca:01:ae:c7:9b:fe:
79:95:1a:f0:53:b1:da:12:74:f5:2d:15:04:fe:ee:7d:43:1f:
0d:b5:91:75:1f:26:f6:2d:88:c0:33:cf:97:21:c1:02:9a:f4:
36:10:14:86:91:04:c6:82:28:be:38:66:da:20:7a:8b:c1:9c:
ba:d9:15:3b:5e:5b:d6:b5:f7:4e:88:06:62:e4:3d:be:88:a3:
5c:c0:34:fa:d3:c7:b1:99:9c:1a:1f:0e:e3:ab:06:24:7f:6a:
f9:95:7a:3c:f9:69:4c:2c:37:c7:dd:cc:1c:fc:4d:a3:56:49:
6e:5d:56:92:a4:12:98:7e:5f:a7:bf:5b:37:1c:77:3f:23:80:
ca:b2:d6:3f:3a:b1:70:b4:66:79:c6:94:fc:1d:4a:42:06:56:
18:f7:7d:df:62:48:3d:10:1b:f9:bf:ab:a9:d5:3a:be:72:9f:
5f:3f:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:39:20 2026 by rpki-client