
$ rpki-client -vvf rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
File: vrLtvPXHBujjAYwAasdhPGyI9a0.mft (raw, json)
Hash identifier: pTQIqFP9hMEah1CsHwFM03OnlBbcYGuJMJlcAnH8HPg=
Subject key identifier: 2F:37:39:15:D8:28:51:FB:07:72:8B:C1:C2:A4:52:A9:8A:AB:E1:28
Authority key identifier: BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD
Certificate issuer: /CN=A918306F/serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
Certificate serial: 38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
Manifest number: 36
Signing time: Sun 01 Mar 2026 09:58:05 +0000
Manifest this update: Sun 01 Mar 2026 09:58:04 +0000
Manifest next update: Sun 08 Mar 2026 09:58:04 +0000
Files and hashes: 1: vrLtvPXHBujjAYwAasdhPGyI9a0.crl (hash: YSE4/qiPtVg/YcRLHyYNvFz1ErHBIEyXqmxmUxhMzJI=)
2: 0F59B14CC55011F08C55AF0AC4F9AE02.roa (hash: d+qsviQ/Ul/mBFwwqGmP+EI/DfmBzNB4ToD+UjOIDD4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl
rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 09:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56 (0x38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918306F, serialNumber=BEB2EDBCF5C706E8E3018C006AC7613C6C88F5AD
Validity
Not Before: Mar 1 09:58:04 2026 GMT
Not After : Mar 8 09:58:04 2026 GMT
Subject: CN=69a40dad-a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d1:60:40:98:5a:58:35:0b:56:82:c0:b5:34:
37:24:1b:75:2a:11:c7:5b:ea:49:3b:38:21:3c:eb:
b8:be:ac:b8:18:be:b8:34:7e:2c:e4:3f:bc:c3:a5:
50:17:bb:0a:6b:c1:b0:c0:42:e9:32:b9:28:95:64:
2b:c9:64:73:a4:2d:c6:20:64:e7:15:9f:08:5f:8d:
49:e4:3e:28:87:71:b2:12:17:ea:29:46:26:4d:fc:
18:fd:74:d1:a8:c3:ca:cc:56:2c:54:c2:17:6c:b0:
28:c6:99:54:2b:dc:a4:d1:33:7b:9d:27:cb:77:be:
a6:ed:d2:f5:8b:d8:6c:44:1b:41:90:dd:46:2b:e1:
67:55:7c:61:25:0c:7e:9c:24:13:53:1f:ea:89:57:
05:05:d7:51:69:12:45:53:5c:cc:9c:f8:b2:9b:16:
b8:ca:fc:f5:9c:eb:28:e8:12:31:23:f5:30:90:7e:
51:1f:24:40:42:13:7d:1d:e6:33:5b:e3:a4:f0:0f:
ac:6b:1c:96:17:e7:a8:ab:6c:48:0d:96:b2:4a:e4:
64:9c:8b:ab:18:b9:00:85:a3:4d:f1:94:83:af:63:
1c:88:f2:42:1b:a8:ed:22:b2:b3:2b:26:ad:df:51:
e3:0a:9a:c2:a9:e4:74:2e:50:1d:68:fb:d3:4a:0b:
19:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:39:15:D8:28:51:FB:07:72:8B:C1:C2:A4:52:A9:8A:AB:E1:28
X509v3 Authority Key Identifier:
keyid:BE:B2:ED:BC:F5:C7:06:E8:E3:01:8C:00:6A:C7:61:3C:6C:88:F5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrLtvPXHBujjAYwAasdhPGyI9a0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918306F/6A92D19EC54E11F0A49C4F86C4F9AE02/vrLtvPXHBujjAYwAasdhPGyI9a0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:48:26:f5:6b:22:b9:e4:0d:fd:0c:54:c5:c0:e1:b8:6b:14:
7a:5d:37:36:f5:e5:a2:9b:ff:b1:93:fc:bb:4c:fb:ab:a5:6f:
f5:32:e9:39:49:18:b7:77:9c:52:b9:fc:67:03:4d:e1:51:26:
e0:fa:b8:2e:02:36:e2:80:3e:59:bd:23:65:37:db:b4:22:d7:
66:53:96:d8:90:42:94:13:af:8f:7d:e3:aa:4f:97:e0:76:c6:
e9:b6:00:57:ae:1d:8b:fa:ca:e3:9f:a2:77:7f:1b:8e:ca:27:
2e:47:18:59:1d:1a:40:ab:01:03:33:fa:01:45:31:6b:53:64:
52:ee:f5:e1:08:66:28:c9:c1:53:55:c9:15:28:1d:e2:fd:19:
37:ee:5b:2e:63:e4:e4:56:c5:31:15:e2:5e:b2:0e:a9:b7:6d:
6b:30:ed:12:74:9e:32:f2:52:b3:ed:11:47:b3:e8:03:3b:a7:
bc:d0:fd:17:13:cb:e3:75:4d:e1:d2:6b:ae:88:c2:f2:04:71:
cd:61:7c:1b:69:58:ee:2b:60:7b:9a:7c:e3:13:f7:92:e3:4c:
b4:ac:de:12:f0:de:9d:c0:67:7a:14:b7:d1:07:a6:6f:72:74:
be:37:47:b7:67:72:58:90:25:79:ff:e1:16:6d:40:c4:65:7d:
a8:a6:25:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:04 2026 by rpki-client