
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier: WM8ozD1V5bcFR6r+Hpvf6TxcAUQDBgb+aw3IMFdMIuU=
Subject key identifier: 08:A7:AD:4D:98:37:BC:5B:ED:33:75:96:98:91:31:4C:69:19:4A:CE
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial: 02A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number: 029E
Signing time: Fri 25 Sep 2026 01:38:27 +0000
Manifest this update: Fri 25 Sep 2026 01:38:27 +0000
Manifest next update: Fri 02 Oct 2026 01:38:27 +0000
Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: B96y7o/DBtCDdOts2RXUa6yeKC6hh3mHS+zCRL4ocrI=)
2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 01:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676 (0x2a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Validity
Not Before: Sep 25 01:38:27 2026 GMT
Not After : Oct 2 01:38:27 2026 GMT
Subject: CN=6ab5d093-bc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:86:21:46:9a:bc:10:8c:22:8b:fb:0f:fc:9d:
64:f9:52:ed:b8:c7:82:13:7f:8a:36:1f:3b:3b:e0:
bc:10:bb:79:05:31:8e:db:0e:6d:73:21:d1:19:49:
2d:34:f3:e4:ca:85:29:0f:55:5c:e4:45:01:06:9e:
56:a4:ea:44:de:a5:76:da:ed:89:ac:bd:7e:ce:1f:
39:74:a3:96:a3:db:fd:14:1a:e1:80:20:a8:14:82:
ac:69:e5:79:ed:60:5f:b4:0e:f3:80:87:c7:b5:d9:
e8:33:83:e7:a4:98:5b:e9:11:85:13:94:ec:92:bb:
d5:7c:9c:dc:db:67:53:a8:60:2d:da:11:21:68:7e:
fd:a0:b7:9a:58:eb:36:e7:b4:d2:d8:88:bc:dd:f9:
57:36:b4:67:20:be:96:58:f4:bd:cd:9a:97:37:c2:
8d:3e:57:2b:0a:0f:bb:f6:3f:b4:f4:91:b6:b8:7a:
43:1a:cf:ed:3b:cd:ed:bb:7e:6c:77:ba:1f:11:76:
56:50:a8:53:c6:38:92:8d:31:e8:f0:6f:3c:e6:b8:
9e:93:01:1d:6a:f7:54:ef:0c:ff:12:7d:5d:a2:27:
58:18:01:4f:06:8e:64:25:4b:b3:65:39:5f:2c:45:
65:64:1c:b9:41:ea:2b:89:cc:c2:18:34:03:fe:32:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A7:AD:4D:98:37:BC:5B:ED:33:75:96:98:91:31:4C:69:19:4A:CE
X509v3 Authority Key Identifier:
keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:df:8b:b4:b2:f9:c8:cc:be:ac:c0:fc:d5:6c:3f:ff:b4:2a:
55:54:de:c7:a7:f3:88:1b:d0:72:bc:17:c5:17:ea:1b:32:80:
ce:b0:4c:44:33:25:11:ce:94:75:b0:41:b4:62:16:1e:a8:37:
22:e8:e1:b2:83:da:5e:ee:dc:d9:f2:48:7d:f8:b5:a9:59:6b:
56:00:b3:ee:3e:f6:c2:e9:64:ba:d4:01:16:a0:82:da:9f:da:
d9:f1:8c:ca:96:14:0b:67:c1:cf:24:fd:54:f6:5f:83:55:f3:
1d:7e:1e:85:76:b2:2b:8a:a5:d1:9c:94:fd:51:e4:5a:3a:11:
0c:e7:ca:d3:f5:87:62:70:9b:95:17:db:dd:39:94:41:e7:8c:
cb:28:61:71:fa:bb:c0:54:eb:85:84:a7:da:f0:57:fd:ca:8d:
a8:d6:57:fd:df:39:72:ab:e4:40:bc:d1:bd:19:2d:1a:fd:13:
91:ba:95:e3:9d:57:00:24:c3:d2:09:76:0c:e1:1c:3f:d5:be:
72:3f:47:ad:62:44:77:a5:53:91:19:df:94:15:2c:9a:3f:e0:
d8:d4:2a:9f:2b:f2:4a:0d:ab:79:8f:1a:85:6b:9d:2f:8d:16:
fb:6b:fb:e8:cd:d3:a8:a1:53:4c:c8:0b:fe:cf:36:45:2a:7f:
37:25:29:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:13:46 2026 by rpki-client