
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier: +CZqqh5aLq9SZ2QZqb+hCiRJFBvR7ojOOA70zfznHmI=
Subject key identifier: FE:23:5A:22:7D:DE:ED:3F:D7:40:94:72:AA:EA:8B:EF:08:87:84:34
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number: 0235
Signing time: Mon 02 Mar 2026 00:02:11 +0000
Manifest this update: Mon 02 Mar 2026 00:02:09 +0000
Manifest next update: Mon 09 Mar 2026 00:02:09 +0000
Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: h/ezEJfT+NGy3T3wgCw00xIZs7LgyoTuRrdVr0UmGh4=)
2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Validity
Not Before: Mar 2 00:02:09 2026 GMT
Not After : Mar 9 00:02:09 2026 GMT
Subject: CN=69a4d382-5c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:be:14:d4:7b:22:12:1c:d1:e4:6b:33:b4:
3a:6d:5e:8b:5f:bf:c1:bf:00:88:64:78:81:da:85:
64:de:85:fc:af:cb:15:d6:87:8c:14:6c:71:bf:12:
c2:06:a6:c3:7f:d3:b6:a2:ed:6f:8c:c2:6b:be:17:
b1:2d:84:1f:8a:8a:b1:70:d8:f2:14:ce:ca:62:a0:
38:a5:c2:40:5f:67:ae:40:36:37:0d:7a:48:6b:1c:
af:a9:ac:a2:e7:00:00:02:25:9b:92:d3:db:31:82:
97:8e:bc:cc:ee:50:8f:fe:e2:af:71:b8:0f:63:d8:
51:b1:ea:83:3a:4a:d5:6f:0e:15:ee:4e:6c:e2:a8:
b6:c1:01:c9:50:bd:93:cc:d1:af:23:1f:00:a2:63:
33:73:1d:f6:3f:5f:66:3c:1d:2b:b7:1b:34:31:23:
73:88:ae:c4:34:49:88:00:c1:c5:3e:75:1a:05:81:
27:e4:71:67:fb:d4:d5:c7:71:86:29:e8:07:ae:bf:
6a:1a:b8:56:33:87:84:70:b7:3a:a5:6f:6d:65:93:
1f:26:27:a4:c5:cb:c6:b3:09:4d:5c:f1:c3:a7:21:
3b:9b:91:be:e7:5a:7e:ac:91:f3:a1:8a:36:cd:80:
9f:52:dc:93:12:cc:97:fb:27:41:d6:fe:d9:7a:76:
1d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:5A:22:7D:DE:ED:3F:D7:40:94:72:AA:EA:8B:EF:08:87:84:34
X509v3 Authority Key Identifier:
keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:65:97:cf:03:c0:43:32:25:82:9e:b6:3a:8b:19:b8:f4:94:
ae:a1:d9:56:fe:90:80:0e:4a:c5:5c:cf:38:ed:41:0a:15:f5:
18:e5:0f:b3:8b:87:2a:4c:bf:f4:f9:cf:ac:4e:cf:25:1b:1e:
87:d4:c3:8c:d7:a2:ae:15:0f:5d:c8:9e:65:2d:08:76:2a:0b:
e8:ad:6d:1a:5f:ac:d0:a7:e4:90:86:6d:90:ad:40:50:ba:4d:
04:c3:e2:91:e7:13:19:51:16:b4:bf:bc:b8:5d:b8:9d:d5:46:
c0:69:05:54:2d:c6:53:db:f6:d8:d1:61:2b:7f:a5:44:2a:58:
ae:64:f4:86:33:45:20:fc:4f:58:cd:6e:6c:fa:8d:81:84:8d:
48:5c:ca:42:cb:9d:12:36:0b:6e:d5:40:c5:75:a8:c6:be:17:
df:e7:91:b1:d1:1f:11:50:af:ec:bf:a7:59:0d:04:5e:39:36:
ab:3e:58:15:65:24:f9:e6:72:67:0a:06:ea:1c:8c:b5:0b:a1:
e6:27:48:74:d8:86:f3:5b:c5:16:aa:f8:f2:19:e9:79:63:d0:
a3:87:94:54:fc:3e:b7:79:bd:e5:1d:4c:39:48:5e:dd:e7:77:
08:9f:cf:51:76:97:b3:29:ea:48:1b:40:95:1e:e5:cb:e7:44:
22:33:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:49 2026 by rpki-client