
$ rpki-client -vvf rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
File: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft (raw, json)
Hash identifier: vQwfoMSz96sWhblYEkCvcMqXFEd38yymyWoaKNNkXcU=
Subject key identifier: 1B:57:35:B3:4C:4D:19:93:2A:BB:F0:3D:1A:D7:CA:0B:00:4E:73:F0
Authority key identifier: 55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
Certificate issuer: /CN=A912404E/serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Certificate serial: 0193
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
Manifest number: 018D
Signing time: Sun 01 Mar 2026 23:08:31 +0000
Manifest this update: Sun 01 Mar 2026 23:08:31 +0000
Manifest next update: Sun 08 Mar 2026 23:08:31 +0000
Files and hashes: 1: VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl (hash: 4XMb6lUNG+QjiyR8+C6g7akgKE80WlCzWRr7ruLy2uw=)
2: FF1C0B44C0D411EEB8303680C4F9AE02.roa (hash: Lmq2NlPigyOuDvfNbo9bP8wwoc5cdlliVt/Do6DQwes=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403 (0x193)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912404E, serialNumber=55390F3F6B3B30ED4A9C6FB9AD8297B8EF9906E0
Validity
Not Before: Mar 1 23:08:31 2026 GMT
Not After : Mar 8 23:08:31 2026 GMT
Subject: CN=69a4c6ef-11d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a2:c8:97:29:a5:40:1a:3e:f4:a9:5a:97:e8:
b7:98:99:56:d7:56:68:87:65:d7:ad:d8:7f:05:40:
c0:f2:64:3a:36:a9:a2:b2:02:9e:a0:a4:8a:74:8e:
2e:db:1c:46:b3:08:e3:0d:bd:5d:9a:44:cf:61:d0:
1d:a4:19:90:99:24:ce:9d:a3:db:d5:f2:d0:68:da:
32:4e:84:8a:7b:85:4b:0d:ab:9e:cb:a1:b5:0d:a4:
27:ce:7c:c0:44:de:94:63:db:f2:87:a1:1a:f4:ca:
17:7c:ed:24:60:1b:2f:83:54:7a:8b:25:61:0f:4e:
4a:3d:4a:50:2e:5e:7d:72:91:7a:89:4e:55:dd:62:
7a:e2:ae:dd:e1:3e:9b:ad:ff:9c:aa:33:8b:72:b1:
6e:a2:9c:0e:87:4c:3d:6c:a4:b2:de:7c:5a:e1:82:
df:6d:78:03:99:90:14:62:3b:ef:32:8f:55:f4:56:
b4:cd:d3:6e:59:b3:0f:7c:37:99:5a:15:0f:e7:23:
2a:c1:fe:cd:a4:43:50:1d:a3:be:0e:a0:af:6a:c7:
2c:d3:81:60:ac:7b:2c:ea:fb:ab:d9:63:eb:0b:b2:
f0:1c:44:5b:f1:b7:a0:66:56:1c:a6:b1:39:6f:2c:
ad:60:0e:88:68:59:bc:be:98:4b:25:dd:91:4f:ae:
fc:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:35:B3:4C:4D:19:93:2A:BB:F0:3D:1A:D7:CA:0B:00:4E:73:F0
X509v3 Authority Key Identifier:
keyid:55:39:0F:3F:6B:3B:30:ED:4A:9C:6F:B9:AD:82:97:B8:EF:99:06:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912404E/49DF653EBF4211EE9B359656C4F9AE02/VTkPP2s7MO1KnG-5rYKXuO-ZBuA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:07:1d:eb:db:7b:ed:0d:52:53:f8:a4:68:40:b8:2d:1d:cb:
01:6f:00:79:67:74:03:3c:e4:03:35:b6:a1:3c:24:69:ca:ea:
16:d1:c3:19:3f:43:e7:63:c5:80:d5:06:6b:fb:dc:0d:52:1e:
3e:dc:54:c8:89:f8:83:00:c9:03:77:fc:87:87:cf:fc:42:ef:
95:d7:c8:1b:d1:b0:8f:ef:b8:aa:90:0f:fa:dd:92:44:36:2c:
2a:e3:4e:f6:b8:17:a6:d3:46:b3:71:24:03:38:32:4b:b1:3e:
d8:ab:04:50:f1:ce:8b:f3:a2:d9:dc:da:d9:9e:99:13:b6:ae:
69:82:88:a2:e3:74:a1:8f:6b:a4:ce:c2:83:db:1c:0e:89:06:
e0:9a:25:41:1e:ec:c3:58:cb:db:0e:bd:8c:48:0a:f8:25:a5:
2e:cd:4d:a4:8f:6d:a6:4b:41:5c:52:4e:14:72:e2:68:4f:6e:
77:ca:33:fc:2a:11:24:59:8f:99:db:82:34:fe:45:0c:f6:4e:
bc:03:0f:f0:d8:cf:b2:bc:28:2d:a8:c2:be:8b:40:20:49:43:
19:5f:3d:74:af:a7:7d:41:43:3c:db:0f:09:37:53:67:93:27:
ea:e3:4e:73:1f:44:a2:3f:fd:69:a6:5e:28:10:6c:2f:95:4f:
01:df:a3:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQwNEUxMTAvBgNVBAUTKDU1MzkwRjNGNkIzQjMwRUQ0QTlDNkZCOUFEODI5N0I4
RUY5OTA2RTAwHhcNMjYwMzAxMjMwODMxWhcNMjYwMzA4MjMwODMxWjAYMRYwFAYD
VQQDEw02OWE0YzZlZi0xMWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4qLIlymlQBo+9Klal+i3mJlW11Zoh2XXrdh/BUDA8mQ6NqmisgKeoKSKdI4u
2xxGswjjDb1dmkTPYdAdpBmQmSTOnaPb1fLQaNoyToSKe4VLDauey6G1DaQnznzA
RN6UY9vyh6Ea9MoXfO0kYBsvg1R6iyVhD05KPUpQLl59cpF6iU5V3WJ64q7d4T6b
rf+cqjOLcrFuopwOh0w9bKSy3nxa4YLfbXgDmZAUYjvvMo9V9Fa0zdNuWbMPfDeZ
WhUP5yMqwf7NpENQHaO+DqCvascs04FgrHss6vur2WPrC7LwHERb8begZlYcprE5
byytYA6IaFm8vphLJd2RT678pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtXNbNM
TRmTKrvwPRrXygsATnPwMB8GA1UdIwQYMBaAFFU5Dz9rOzDtSpxvua2Cl7jvmQbg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDA0RS80OURGNjUzRUJG
NDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01PMUtuRy01cllLWHVPLVpC
dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZUa1BQMnM3TU8xS25HLTVyWUtYdU8tWkJ1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDA0RS80OURGNjUzRUJGNDIxMUVFOUIzNTk2NTZDNEY5QUUwMi9WVGtQUDJzN01P
MUtuRy01cllLWHVPLVpCdUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEASAcd69t77Q1SU/ikaEC4LR3LAW8AeWd0AzzkAzW2oTwkacrqFtHDGT9D52PF
gNUGa/vcDVIePtxUyIn4gwDJA3f8h4fP/ELvldfIG9Gwj++4qpAP+t2SRDYsKuNO
9rgXptNGs3EkAzgyS7E+2KsEUPHOi/Oi2dza2Z6ZE7auaYKIouN0oY9rpM7Cg9sc
DokG4JolQR7sw1jL2w69jEgK+CWlLs1NpI9tpktBXFJOFHLiaE9ud8oz/CoRJFmP
mduCNP5FDPZOvAMP8NjPsrwoLajCvotAIElDGV89dK+nfUFDPNsPCTdTZ5Mn6uNO
cx9Eoj/9aaZeKBBsL5VPAd+j8w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:29 2026 by rpki-client