
$ rpki-client -vvf rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
File: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft (raw, json)
Hash identifier: ZdZei9vgrN7vIGdSoc9znRoUQ4A/XDh0OI2LeqmTyQ4=
Subject key identifier: 5F:DC:DA:A1:EF:05:D5:95:AD:23:3B:A9:94:92:B3:81:A7:AC:CB:CF
Authority key identifier: 56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
Certificate issuer: /CN=A91433B3/serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Certificate serial: 0247
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
Manifest number: 0241
Signing time: Wed 25 Mar 2026 01:50:20 +0000
Manifest this update: Wed 25 Mar 2026 01:50:20 +0000
Manifest next update: Wed 01 Apr 2026 01:50:20 +0000
Files and hashes: 1: VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl (hash: 5ZTAftgxpXIj4+LHn+SxN7J/WUUg3/Zgve1EYEngl6I=)
2: AB6C302EB5F311EDA0148B2DC4F9AE02.roa (hash: bR0oOLC6N9iYPyxoInRh6y+czJ5j13C0mZMU7jGh1QE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91433B3, serialNumber=56BB6F3137D8DD9EB97E383BC7F461D90F85DDFE
Validity
Not Before: Mar 25 01:50:20 2026 GMT
Not After : Apr 1 01:50:20 2026 GMT
Subject: CN=69c33f5c-8f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:92:8d:30:8a:f3:af:d6:b7:33:11:40:65:
fe:ce:86:cf:16:80:14:48:e1:d5:de:b2:46:ae:3f:
c1:c1:93:b8:76:8b:51:00:3a:0e:53:19:f4:ba:df:
00:7a:47:4d:a7:3f:08:2f:33:ea:d7:96:20:5a:50:
3f:bb:9a:72:8a:df:2d:05:de:4f:d0:c7:68:5d:b6:
bf:d7:73:18:a4:61:10:d4:0d:ef:2d:8a:69:17:6c:
7d:4c:e0:ab:d9:6f:27:2d:6c:cd:bc:28:14:49:4a:
6a:d2:cb:32:f1:66:e0:c0:64:27:7c:99:af:df:c5:
80:df:9e:ba:d3:f3:0b:3b:16:cf:29:23:76:2e:ac:
16:ae:e1:79:75:ba:5d:99:15:63:19:44:32:1b:16:
a2:a9:d3:41:18:fd:34:04:ca:d9:a9:2d:66:45:8a:
3d:ea:50:e6:31:79:79:a6:ce:4b:e2:ff:85:af:ea:
7b:b6:91:3f:0a:f3:27:d0:f3:df:f6:85:45:10:ff:
b9:75:a1:e9:a4:17:54:ec:93:bf:36:2b:6e:16:3b:
71:74:dc:44:80:d8:7c:e2:3b:c5:22:85:3d:0b:f4:
40:be:74:cf:be:cc:86:94:ba:c1:b5:cc:3d:0a:e8:
1e:11:12:d0:2b:12:0a:70:cb:7f:27:5e:f8:e2:08:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:DA:A1:EF:05:D5:95:AD:23:3B:A9:94:92:B3:81:A7:AC:CB:CF
X509v3 Authority Key Identifier:
keyid:56:BB:6F:31:37:D8:DD:9E:B9:7E:38:3B:C7:F4:61:D9:0F:85:DD:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91433B3/BDFE18CCB5F011EDA7D0EF7CC4F9AE02/VrtvMTfY3Z65fjg7x_Rh2Q-F3f4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:b1:67:a4:20:7e:37:cd:b4:e0:0c:a7:31:95:b6:fa:57:6b:
7a:62:0a:14:2d:85:08:a0:c5:ce:26:4f:37:35:22:1a:70:b4:
d7:44:aa:91:9b:c2:c3:35:78:13:40:9d:4e:ce:db:60:0c:b9:
0a:4a:31:5c:b5:e6:c1:b2:c5:15:27:2b:e3:aa:03:ee:96:48:
53:c2:b5:a7:cf:a3:94:0a:8e:ad:5b:c0:c1:54:00:0e:63:d6:
2d:73:a4:84:6e:42:3a:b0:e7:43:a7:e0:1f:a2:8b:bf:44:21:
ea:c7:ca:22:fb:59:40:15:58:2c:0f:fa:d3:35:3c:3d:79:fb:
46:59:d7:35:4b:94:c8:2d:ee:fb:87:c7:92:09:a9:02:82:cd:
4c:40:d3:53:a2:cb:99:53:5f:e2:bc:95:8b:15:94:71:3d:f9:
b5:72:5e:06:c6:87:3d:07:44:1b:01:92:d1:07:3f:c1:30:8b:
dd:c7:bb:ff:7d:57:1e:c4:db:79:4a:d8:db:75:da:e4:86:c6:
fe:c1:53:0f:3b:0a:85:13:39:fe:c2:3f:d1:45:9b:bf:60:9d:
cf:5c:3b:72:6c:b9:65:0b:3d:de:40:30:26:fd:aa:42:5e:58:
2e:12:74:79:5d:13:0e:77:05:66:3d:33:03:dd:c9:4a:6b:d8:
1f:7d:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:09 2026 by rpki-client