
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier: 72FbLqUNCYXDWLMnUsGR/8TESCLO8OD5ZgEY7F1bB1A=
Subject key identifier: F3:F3:97:DB:CB:55:4A:17:7F:BE:CC:8B:A2:C9:FB:98:4C:70:85:18
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial: 0253
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number: 024D
Signing time: Fri 17 Apr 2026 02:05:40 +0000
Manifest this update: Fri 17 Apr 2026 02:05:40 +0000
Manifest next update: Fri 24 Apr 2026 02:05:40 +0000
Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: 0Llrf39uuj4Bc/qKzGm1V2/CRWGPlLRiVF0J7EYHCeM=)
2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:05:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 595 (0x253)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Validity
Not Before: Apr 17 02:05:40 2026 GMT
Not After : Apr 24 02:05:40 2026 GMT
Subject: CN=69e19574-bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:46:a7:77:54:86:f2:4f:fa:30:08:f1:d2:
aa:b4:5b:6d:08:cf:c8:c6:d3:28:8d:15:69:8e:82:
99:4a:7a:e0:c1:61:81:e1:ef:6c:f1:e3:89:16:8c:
e2:90:08:9b:28:86:eb:3b:4a:ee:8e:af:1f:40:1f:
dc:a5:99:fa:4e:7c:30:c1:5f:f0:57:5c:4d:15:25:
6e:da:20:ec:78:e2:7d:3d:fc:90:ed:01:80:d2:61:
66:d9:e7:e2:17:ab:c8:d0:81:18:91:95:64:b1:e4:
bf:6e:57:27:ec:a0:72:cc:66:75:34:36:58:9e:fc:
dd:6e:db:9d:84:8d:e3:f9:54:69:20:44:a9:ce:3e:
b0:33:29:c0:4e:b7:2f:4a:41:15:26:b0:91:ce:57:
cb:83:d3:0d:a1:5b:b5:70:81:96:bd:32:9c:be:24:
13:57:f4:9b:54:f1:ab:23:61:9b:d1:2c:3f:d9:76:
32:0a:bf:fa:3b:18:5e:b7:b5:8d:81:4e:57:2a:2f:
e4:69:7d:ed:62:c9:dc:97:c2:3b:51:23:9f:c8:23:
8c:cc:c5:98:29:1f:c6:0b:8f:05:be:62:73:6c:26:
a2:93:76:70:bb:c7:6b:2b:47:e3:00:04:f7:1d:3c:
d4:6c:7e:97:fd:d3:9a:76:06:9d:12:09:d8:bb:2e:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F3:97:DB:CB:55:4A:17:7F:BE:CC:8B:A2:C9:FB:98:4C:70:85:18
X509v3 Authority Key Identifier:
keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f6:da:d0:07:b9:0f:88:38:73:9f:70:f5:21:fa:d0:f6:18:
1e:7e:02:8a:10:03:10:fa:f8:e8:f1:aa:50:ed:ca:4a:f8:0c:
cc:5c:0d:ef:30:58:16:46:1b:6a:e2:9d:57:36:2d:14:ce:91:
2a:58:1e:f9:74:e9:8a:bf:ea:1d:27:65:2c:b8:bc:27:f0:85:
da:14:8c:3c:7f:45:7a:7f:c9:05:ac:3c:9d:96:29:76:72:4d:
5b:53:27:7a:1f:3d:d6:54:10:48:e4:c2:79:b6:b1:41:d7:1d:
87:7a:dc:16:0e:2f:1c:e5:bf:00:5b:3e:88:c6:5b:eb:1f:1e:
52:2b:3e:ec:9c:bc:b1:26:15:1a:e9:9e:07:24:90:a4:1d:a4:
78:fb:6b:cb:0b:7f:5c:60:6f:0e:cb:ba:12:2c:96:08:0c:64:
5c:1a:38:4f:07:41:6c:ef:83:3b:bd:71:d0:17:6b:fd:4d:a8:
f3:4f:5e:8c:e7:4d:64:82:be:94:cf:0f:82:0c:90:3d:a5:77:
83:b5:76:91:e6:75:31:59:68:45:e0:31:e7:50:e9:a2:40:c8:
0a:61:e3:36:f0:da:3f:b7:75:7f:87:b9:f3:76:55:b4:79:62:
cf:b5:79:76:de:f5:4c:54:73:20:f2:7f:e1:22:3e:d9:e9:77:
34:28:8c:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzQjMxMTAvBgNVBAUTKDU2QkI2RjMxMzdEOEREOUVCOTdFMzgzQkM3RjQ2MUQ5
MEY4NURERkUwHhcNMjYwNDE3MDIwNTQwWhcNMjYwNDI0MDIwNTQwWjAYMRYwFAYD
VQQDEw02OWUxOTU3NC1iY2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1QRGp3dUhvJP+jAI8dKqtFttCM/IxtMojRVpjoKZSnrgwWGB4e9s8eOJFozi
kAibKIbrO0rujq8fQB/cpZn6TnwwwV/wV1xNFSVu2iDseOJ9PfyQ7QGA0mFm2efi
F6vI0IEYkZVkseS/blcn7KByzGZ1NDZYnvzdbtudhI3j+VRpIESpzj6wMynATrcv
SkEVJrCRzlfLg9MNoVu1cIGWvTKcviQTV/SbVPGrI2Gb0Sw/2XYyCr/6Oxhet7WN
gU5XKi/kaX3tYsncl8I7USOfyCOMzMWYKR/GC48FvmJzbCaik3Zwu8drK0fjAAT3
HTzUbH6X/dOadgadEgnYuy5aDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPPzl9vL
VUoXf77Mi6LJ+5hMcIUYMB8GA1UdIwQYMBaAFFa7bzE32N2euX44O8f0YdkPhd3+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzNCMy9CREZFMThDQ0I1
RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNaNjVmamc3eF9SaDJRLUYz
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZydHZNVGZZM1o2NWZqZzd4X1JoMlEtRjNmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzNCMy9CREZFMThDQ0I1RjAxMUVEQTdEMEVGN0NDNEY5QUUwMi9WcnR2TVRmWTNa
NjVmamc3eF9SaDJRLUYzZjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAm/ba0Ae5D4g4c59w9SH60PYYHn4CihADEPr46PGqUO3KSvgMzFwN7zBYFkYb
auKdVzYtFM6RKlge+XTpir/qHSdlLLi8J/CF2hSMPH9Fen/JBaw8nZYpdnJNW1Mn
eh891lQQSOTCebaxQdcdh3rcFg4vHOW/AFs+iMZb6x8eUis+7Jy8sSYVGumeBySQ
pB2kePtrywt/XGBvDsu6EiyWCAxkXBo4TwdBbO+DO71x0Bdr/U2o809ejOdNZIK+
lM8PggyQPaV3g7V2keZ1MVloReAx51DpokDICmHjNvDaP7d1f4e583ZVtHliz7V5
dt71TFRzIPJ/4SI+2el3NCiMKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:16 2026 by rpki-client