
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier: zkH1aZbW1pcEvpKGnCkNQvhLx9SqBNj5HJF9feW2l/o=
Subject key identifier: 76:B5:6C:63:16:8F:C4:50:7A:4B:B3:34:59:23:8C:F0:AC:BE:93:55
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number: D9
Signing time: Mon 02 Mar 2026 13:23:37 +0000
Manifest this update: Mon 02 Mar 2026 13:23:36 +0000
Manifest next update: Mon 09 Mar 2026 13:23:36 +0000
Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: fItBlQRHOF6IxYMQOdsmOAk7HXZhfl7p6bi3N8SQRHI=)
2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: C4V/IKNOuVsB2soQRnOD2NYDG7/G01qvSg58QZnKW5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:23:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Validity
Not Before: Mar 2 13:23:36 2026 GMT
Not After : Mar 9 13:23:36 2026 GMT
Subject: CN=69a58f58-c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:26:66:99:aa:5e:45:a1:63:98:15:98:49:
49:f1:26:61:dd:84:af:59:0b:08:84:3d:68:99:8f:
35:32:84:06:95:0b:4b:12:80:17:1c:49:d5:9a:ed:
71:ef:4a:a1:3a:55:58:d4:82:24:e1:c1:44:09:b4:
4a:0d:a0:73:c3:af:cd:98:4c:ca:d5:95:0c:2b:45:
0e:a1:d8:ef:be:b5:91:82:3f:aa:bc:e2:a0:c9:a6:
3b:6a:8f:58:2e:58:b2:56:68:fb:58:cc:a1:77:08:
5c:78:5d:d9:59:52:a3:72:21:5e:ee:a0:ee:c0:ba:
15:0a:1e:5d:f1:26:a7:99:20:d2:b4:98:dc:63:d3:
45:82:08:d5:6e:dc:b9:ad:e3:5f:ed:07:a1:39:1a:
e7:8c:77:3d:ae:94:fb:6f:a9:ae:d7:8a:2d:33:ed:
5f:22:6b:43:60:68:2e:6e:86:e3:73:9c:54:f8:0f:
fa:cd:9a:27:ff:7b:8a:0f:c9:fa:66:e9:cc:58:1d:
b4:74:0b:82:db:3e:bb:27:df:85:ba:3c:c7:42:0e:
66:29:54:a7:a4:e9:92:b0:bc:c3:1e:21:35:c2:bb:
32:e2:ba:d8:02:89:63:ff:0d:df:60:b7:3d:aa:cb:
97:0e:59:19:ba:f1:14:d2:ba:be:f6:a3:5f:d9:76:
75:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B5:6C:63:16:8F:C4:50:7A:4B:B3:34:59:23:8C:F0:AC:BE:93:55
X509v3 Authority Key Identifier:
keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:57:72:59:10:0f:b7:b8:56:91:18:54:14:c4:84:e0:56:
b9:e5:4f:86:b8:f6:81:dc:02:54:3c:c7:12:f5:e7:7b:66:e0:
fb:e0:93:0a:18:05:c5:eb:26:87:39:3a:a2:a2:33:b3:53:9b:
99:9b:f9:35:b8:38:51:40:d5:b3:e5:d1:c6:06:ab:ff:28:8a:
21:fa:b9:74:c7:81:0a:b9:ed:3d:58:f2:de:79:6b:aa:05:f6:
af:47:a2:d3:57:ec:21:77:32:f1:a8:69:77:bd:ae:25:44:5e:
f8:64:dc:0f:04:ce:26:6b:05:28:e0:ca:95:d7:4d:d0:1d:d1:
83:1d:95:d0:6a:36:8f:85:01:e9:42:70:1a:5e:4b:d0:b3:51:
2a:88:7e:35:62:d5:11:e8:e9:c1:bf:25:7a:3c:66:71:96:4c:
1a:ba:54:cb:5d:41:86:fa:8f:10:4d:24:17:b3:53:1f:be:e1:
74:05:a3:16:14:ee:a8:a1:0e:6e:ee:52:0a:a2:65:0a:b2:60:
87:b1:51:77:9d:a6:11:51:bb:9a:f1:b7:db:0d:5b:ff:1a:28:
2d:02:a4:6c:91:f8:f9:55:99:95:9b:85:75:ac:ba:95:bd:1a:
7e:63:f0:34:e3:0b:80:b2:57:73:21:2e:48:87:18:b0:a8:2a:
0c:1f:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:40 2026 by rpki-client