
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
File: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json)
Hash identifier: HhXf6RoyXQJu2WmnpQ/1lkKKOstFUTz3FBnyxO179TM=
Subject key identifier: B8:3C:A6:FF:E7:74:2F:63:9E:1A:07:15:2C:FF:CB:D7:11:DA:A8:E7
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial: 1E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
Manifest number: 1C
Signing time: Mon 02 Mar 2026 02:54:02 +0000
Manifest this update: Mon 02 Mar 2026 02:54:00 +0000
Manifest next update: Mon 09 Mar 2026 02:54:00 +0000
Files and hashes: 1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: BAkuraLkPfomOfquv9AhhnQTxLeP3ks6DHUOr/b7ZC8=)
2: 95303322F20511F0873139314A6F56BC.roa (hash: Z1FNez0/EgsHIGdWn2YH7v03JKdBD6YWcM+q4nC2970=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Validity
Not Before: Mar 2 02:54:00 2026 GMT
Not After : Mar 9 02:54:00 2026 GMT
Subject: CN=69a4fbc9-9445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:c9:5c:f8:a4:07:51:d6:f4:8a:0f:20:37:
ba:69:af:c9:82:50:db:26:72:65:00:c3:3b:71:53:
c7:d8:fc:c8:9b:4d:59:64:06:b7:67:2b:93:18:9f:
e0:71:33:e3:c2:4e:88:e4:d1:80:4f:01:10:5a:b8:
43:56:4a:2e:6c:c2:51:c2:ed:3a:1d:c8:2d:96:cf:
35:c2:09:3c:c8:9a:d4:68:88:93:e7:63:50:07:30:
33:29:5f:ea:f3:09:38:6d:81:03:ad:d3:8f:0d:50:
ff:6b:41:26:f1:24:a1:e0:24:7a:eb:33:ca:1f:b3:
c3:b8:e9:f7:1f:2f:61:e5:a5:13:d0:d7:8f:ed:25:
fb:2b:80:97:58:3a:e6:63:32:fb:a1:ec:48:6f:35:
cb:18:da:5b:98:ad:f5:f6:50:d4:ca:ba:26:ba:85:
fb:68:09:d8:c1:aa:25:82:92:f2:9a:7d:ce:12:7e:
4c:56:7d:49:a0:64:b7:56:f4:cb:0e:50:d0:25:ee:
55:ff:12:08:62:a4:0c:a7:5b:a0:bc:e6:63:b7:41:
50:e9:f9:6c:b6:59:5a:d5:dd:85:90:3f:f0:51:ac:
c4:a3:71:8e:8e:2f:1a:ed:32:9d:d9:49:8d:2b:71:
96:50:0c:84:45:2a:1c:ed:d4:96:38:ae:cd:4f:cb:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:A6:FF:E7:74:2F:63:9E:1A:07:15:2C:FF:CB:D7:11:DA:A8:E7
X509v3 Authority Key Identifier:
keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:8a:93:51:6e:e8:02:6e:3e:ad:e5:f1:a7:7c:ba:c3:00:9c:
df:3d:92:bd:05:af:08:dd:3c:6e:1b:2c:ac:d4:27:31:51:4f:
e8:39:b0:aa:7d:41:a8:d3:98:3c:c8:5d:ba:cc:68:1a:db:02:
b8:26:a4:41:a1:c2:71:6e:76:3f:11:e9:e4:f7:7f:4f:c5:fb:
ab:a9:fe:f3:13:c5:4e:9e:ac:c4:b9:d8:ce:46:19:51:cc:a8:
83:ac:fa:ac:fd:f5:7e:87:c3:6e:2e:92:bc:bb:e0:24:e3:5e:
6c:90:90:d3:c5:3c:89:de:1e:1f:17:0e:80:93:e6:18:62:40:
2b:e7:0a:f2:96:9e:e5:b5:27:ea:9c:53:b6:65:8c:f1:75:3b:
95:7b:a8:8c:e4:8b:05:fa:22:fa:55:ac:0b:9e:f9:df:7c:f4:
18:fc:91:ce:47:c0:3d:64:ce:67:1c:14:ee:89:8c:ec:1f:d6:
be:5b:4a:84:76:ca:13:79:ff:df:61:e1:dc:05:63:fb:83:e4:
c6:8a:cc:b0:e3:69:28:93:6c:ed:d8:3f:d0:6d:4b:d0:e0:8c:
37:60:8d:33:24:f0:41:4f:bd:be:7d:03:96:17:bc:d3:98:18:
4f:0e:34:62:e5:97:7f:bd:52:dd:0c:6c:59:27:ab:16:e6:ec:
cd:40:54:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:01 2026 by rpki-client