
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier: SkaSWlNcgVpApHUiN22Z8C9vsrEK6vzpubWnJ8jbX3U=
Subject key identifier: 52:3E:BE:53:6A:0B:FE:5D:16:E8:DC:B6:31:3F:CF:50:96:3A:6F:89
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial: 04E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number: 1237
Signing time: Wed 14 Oct 2026 18:11:36 +0000
Manifest this update: Wed 14 Oct 2026 18:11:35 +0000
Manifest next update: Wed 21 Oct 2026 18:11:35 +0000
Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: ca4SYfJwE3WpZX/aij/nXOB8dW4xV0E/dKVICGYiMxI=)
2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: pN5iH/nUNuUmwsEOZfvOPx9jssfYbagdHH2DRYItBiI=)
3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: KDbcuHsIC1RcVE6yFrvbeINE1VdVoSmcV8c9yZ0v9xc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 18:11:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Validity
Not Before: Oct 14 18:11:35 2026 GMT
Not After : Oct 21 18:11:35 2026 GMT
Subject: CN=6acfc5d8-9860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:61:5f:e8:0a:ef:17:a7:82:2c:e2:b0:9d:fa:
99:fe:ce:e3:1d:9c:7a:60:33:9d:b3:2e:80:bb:cd:
24:74:f1:d7:64:81:50:17:cc:4b:22:4b:cd:05:52:
43:7d:58:2d:b5:84:05:d4:db:8f:5f:71:39:89:c6:
c4:48:fa:14:cb:1c:ac:27:cc:06:b1:07:f6:df:c5:
36:1c:82:cc:7b:14:29:b8:b2:91:df:9a:9a:d6:83:
e0:8d:e6:e3:72:c7:94:b6:80:0b:62:71:62:bb:ed:
19:ec:de:44:98:2e:a8:82:7f:0d:c1:96:f5:6c:95:
79:1f:f8:aa:ab:70:95:a6:47:3e:94:35:19:13:58:
a5:d5:f3:e4:89:9d:75:41:84:b6:8f:5f:cf:9f:fe:
8b:ce:46:53:ff:03:5a:c6:e5:bc:30:1e:a2:02:a0:
a1:9a:c4:91:83:ef:f8:09:24:02:77:f0:4b:ef:31:
bb:82:7e:05:09:e8:96:db:f2:48:9b:6e:66:fe:53:
1b:81:3e:4b:a9:0d:0a:4d:cd:ab:af:94:8e:7c:2e:
78:57:83:96:2c:a4:a6:dc:53:ae:f2:a4:1c:c0:af:
52:bf:f0:39:cf:b7:44:ff:48:3c:87:24:d5:01:50:
0c:3d:65:d6:72:a1:97:f7:f8:60:47:8e:65:ad:9b:
1d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3E:BE:53:6A:0B:FE:5D:16:E8:DC:B6:31:3F:CF:50:96:3A:6F:89
X509v3 Authority Key Identifier:
keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:1f:46:23:e6:88:b7:2c:11:5f:00:a7:bc:27:d2:69:df:41:
52:c0:ba:b4:0f:cd:4e:87:ea:37:7d:3c:7c:e8:84:02:0e:93:
0b:62:65:72:d3:cd:1b:07:20:82:92:d4:ca:e7:d9:9c:60:6f:
fe:10:54:89:47:8d:20:23:d1:6e:b7:43:29:c6:11:bc:d5:79:
9b:5a:b3:f3:54:8c:79:ab:f7:5d:c3:25:05:c0:63:38:89:43:
d5:37:36:53:d2:5f:92:b4:ea:48:fc:35:9d:67:9d:9b:2f:bb:
bc:48:70:f4:c6:9b:80:0c:00:76:e0:7a:41:6b:5d:a4:ab:5e:
ac:a2:5e:31:6a:83:cc:c1:ec:e2:d8:6a:fa:63:07:c5:a2:c6:
da:f2:4e:5c:7f:d8:5e:3f:f1:c8:f7:04:7a:4a:7f:db:cc:fe:
ab:8f:9d:c2:85:4e:1d:9f:a9:29:ac:fc:1b:3b:98:ea:6a:5e:
94:92:9f:c6:01:19:e3:eb:07:da:67:b3:e3:0a:8c:5b:6b:44:
24:f1:d6:aa:fa:07:1f:19:9f:43:e0:16:47:b7:ba:54:cf:c1:
ea:56:e7:9f:92:4a:f4:b6:63:5e:19:5e:0d:f2:df:b2:94:0f:
a5:51:28:85:e4:be:ff:dc:2a:87:49:2c:1b:cc:3a:5d:36:a0:
f3:15:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:16:22 2026 by rpki-client