
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier: JUvQ+TCNqf29+X8fkCyEEHqntuO4GTb7ieAi/J2x5Oc=
Subject key identifier: 8F:74:B1:9E:8D:A1:2D:BA:A8:F4:0D:CE:F2:0C:E8:E8:E5:2E:27:28
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial: 3596
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number: 3596
Signing time: Wed 04 Nov 2026 15:01:06 +0000
Manifest this update: Wed 04 Nov 2026 15:01:06 +0000
Manifest next update: Wed 11 Nov 2026 15:01:06 +0000
Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: yE2lYudVrtHlL+8xWST+0TSClBgbBVJn+bVH74kyum4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13718 (0x3596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Validity
Not Before: Nov 4 15:01:06 2026 GMT
Not After : Nov 11 15:01:06 2026 GMT
Subject: CN=6aeb48b2-dd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:f5:7f:f6:bd:fc:0c:a1:d7:ec:75:05:7f:
1e:e7:f1:02:e0:22:5d:c6:f8:d9:ce:70:bc:90:e0:
2e:b2:8d:f8:f6:bb:8a:58:62:8a:60:fb:68:73:5f:
ce:a7:b7:32:61:c7:56:97:c0:83:ca:4a:0f:af:9a:
57:c2:fd:de:69:86:66:bf:24:e0:28:f3:d0:1e:62:
22:24:90:a1:e5:36:d8:c6:d9:a0:a9:ca:95:a0:9d:
b1:31:f0:41:43:40:b5:dd:e0:a5:02:f1:5b:24:bc:
68:64:dc:10:69:a8:c8:3a:ea:c6:d6:86:39:c4:b1:
f6:af:e9:8b:76:27:c3:9a:fb:38:ab:d9:71:15:86:
8f:45:31:97:37:3e:37:5a:be:31:40:ef:0b:79:21:
cf:46:ae:15:13:9f:e9:ec:87:c4:cc:1c:a7:88:19:
d1:fc:cd:31:55:7c:c1:93:f2:d9:96:eb:8c:af:2c:
40:8e:14:e8:8b:51:93:aa:07:e3:60:fb:ec:67:9a:
54:ee:fb:d2:b1:d5:5c:51:1f:ba:00:d1:06:fa:24:
ae:49:9e:d8:1d:fe:4d:53:48:28:5c:9b:d6:80:76:
a0:75:28:a1:63:8f:d7:30:c4:6c:be:4b:b0:7f:0e:
8a:ad:a3:60:7a:ea:68:da:84:dd:fb:08:26:03:75:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:B1:9E:8D:A1:2D:BA:A8:F4:0D:CE:F2:0C:E8:E8:E5:2E:27:28
X509v3 Authority Key Identifier:
keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:10:6a:83:ff:62:58:70:1c:08:a0:ee:80:aa:20:06:1c:96:
5b:ca:d7:9b:c7:ec:8c:ff:d8:6e:00:7a:58:06:9f:5c:13:15:
d5:6e:b7:ee:d4:1e:88:1c:66:46:46:aa:35:f7:2c:77:13:fd:
ec:5c:5a:71:1c:9a:f9:89:de:38:9b:43:f9:c7:b7:c5:3d:08:
e0:9a:18:67:2d:b3:85:1b:13:52:0a:c8:cf:e3:59:a4:4b:2d:
56:e3:8e:43:7b:ad:d4:d5:48:47:59:94:02:1c:f5:7c:04:b7:
5e:91:77:26:74:77:4a:e1:fb:3f:82:3b:3d:3c:67:0f:95:3e:
cd:07:8a:57:44:ab:64:ea:36:74:1a:91:9e:72:72:86:83:b5:
d7:9f:05:87:06:9e:2e:21:fb:9d:1c:e8:a6:ff:eb:15:e6:9d:
c8:ad:00:e7:68:74:18:eb:24:2e:84:72:ec:a4:d7:0f:22:34:
a2:15:ff:61:bf:69:60:8e:5c:90:e5:37:b9:7b:cc:50:d6:2f:
1f:5c:98:c9:2c:6d:6c:78:cf:44:4f:0e:30:a8:a9:a5:07:c4:
83:11:64:04:03:fb:e6:14:1a:b2:aa:76:86:fa:08:60:a1:a0:
04:7f:96:d0:d0:23:97:50:82:3e:3e:18:a5:3c:6e:81:88:37:
69:1b:06:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:39:41 2026 by rpki-client