
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
File: vRTPGp8I9oE3_oEWzXdq29sv77Q.mft (raw, json)
Hash identifier: K04bQ+hbMf0s2gTnXURD84evDZU5in2kuD2IyhGhKLU=
Subject key identifier: 3F:70:12:F8:7E:88:33:AA:E6:10:10:8D:24:2C:19:92:7C:4D:B4:7E
Authority key identifier: BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
Certificate issuer: /CN=A9119A40/serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Certificate serial: 047A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
Manifest number: 1166
Signing time: Thu 26 Mar 2026 18:05:33 +0000
Manifest this update: Thu 26 Mar 2026 18:05:33 +0000
Manifest next update: Thu 02 Apr 2026 18:05:33 +0000
Files and hashes: 1: vRTPGp8I9oE3_oEWzXdq29sv77Q.crl (hash: 1uRf569RstVoYAZ5eljVzd6iVMqrLaR+lbQGngPbk+0=)
2: D5DBA6BC63ED11ED851C647DC4F9AE02.roa (hash: +a9x011lIrelYT5vohtPE5YuGG+ywFHENvyw6lCFvco=)
3: 5277F6368D2411EC816B4C70C4F9AE02.roa (hash: mDjCsaxH5mUMKVvZsFwN09lkj4cypyPUsp4Oj/a1naU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1146 (0x47a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119A40, serialNumber=BD14CF1A9F08F68137FE8116CD776ADBDB2FEFB4
Validity
Not Before: Mar 26 18:05:33 2026 GMT
Not After : Apr 2 18:05:33 2026 GMT
Subject: CN=69c5756d-c6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:6f:ea:51:35:55:fa:6d:4d:3a:28:31:70:
42:cd:87:c9:86:c0:1d:b3:bd:49:4e:51:f1:da:17:
e5:8f:3c:21:2f:48:0c:84:8f:05:bc:6e:6c:72:c5:
6f:2a:52:4c:4b:dc:0f:8d:b4:30:79:e1:d1:f3:79:
c5:a9:75:ba:92:86:dd:83:e4:17:16:47:0b:41:93:
0d:19:32:cd:b1:ec:31:75:d2:df:b5:2a:ff:f7:2b:
18:74:f6:27:14:db:f8:3a:09:fb:ec:02:4b:eb:98:
ed:d1:29:75:e6:d7:45:02:50:cc:0b:9c:1e:0d:ad:
8a:cb:e9:8a:ff:af:75:80:ea:90:9a:63:c1:6d:53:
55:43:c8:77:e4:4f:38:db:a0:a8:32:85:ab:79:6f:
f8:60:5e:ee:95:44:cd:45:31:12:a1:1c:f3:ea:e3:
b1:27:56:06:68:d7:c0:4f:35:7f:84:35:64:6d:39:
96:35:c2:ef:c5:0f:2e:40:78:7f:db:18:c3:77:ce:
8e:4a:a1:0c:be:7d:6c:0d:1e:d9:c5:b1:5c:9b:4f:
78:dd:18:f7:06:68:1b:a9:4d:1f:a7:e2:3b:84:88:
d2:9a:04:f7:14:00:88:3c:22:af:fe:2c:67:4e:5a:
f4:27:63:c1:28:fa:df:7d:50:b1:7c:57:50:a5:2c:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:12:F8:7E:88:33:AA:E6:10:10:8D:24:2C:19:92:7C:4D:B4:7E
X509v3 Authority Key Identifier:
keyid:BD:14:CF:1A:9F:08:F6:81:37:FE:81:16:CD:77:6A:DB:DB:2F:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vRTPGp8I9oE3_oEWzXdq29sv77Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119A40/0BD45622007A11EAB8B31B10C4F9AE02/vRTPGp8I9oE3_oEWzXdq29sv77Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:a8:e7:df:4d:a6:61:24:5d:81:ba:ec:f0:34:6b:fe:c0:
10:c3:43:8b:56:08:67:27:22:0e:0a:86:22:d5:e1:3b:71:33:
e0:0e:b1:1b:2f:bf:72:37:61:55:14:e4:65:93:b7:60:42:25:
d8:e7:2c:8a:77:43:68:0e:e3:76:f1:0e:f9:6d:54:d5:a9:e7:
5c:88:0b:a4:0a:ab:78:80:4a:dc:68:21:3f:7b:31:94:4f:14:
95:fc:95:33:4e:39:7c:29:e5:85:ee:56:e0:3d:95:db:31:c6:
d6:2c:55:be:56:45:39:56:cf:d9:57:f3:1d:db:8f:39:8a:8d:
d8:02:1a:8e:53:26:9a:11:81:d8:58:67:17:b6:9c:51:05:49:
a8:e7:25:85:88:5f:5b:4d:83:80:6b:68:8f:17:cf:c9:ba:15:
92:08:60:9e:3b:f8:67:e1:8d:b5:54:54:1a:b5:bd:fa:96:3e:
b6:15:52:9b:32:27:a8:12:82:08:83:09:21:b4:a0:02:7c:c6:
28:6f:a2:c5:56:9f:a2:2c:12:f9:68:6a:e1:59:0b:24:2f:c0:
47:56:b3:67:17:b9:d4:cb:58:06:04:d8:71:30:7a:b4:cc:45:
ec:06:3c:e6:c1:c9:5b:1d:c9:cd:3d:cc:9d:3a:49:42:71:e8:
d2:ad:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:48:26 2026 by rpki-client