
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier: ETyzKWu1VuTC/1CsYJpO/uFacQLs/slshVOEA43LjHI=
Subject key identifier: 42:24:B0:9A:A6:77:A3:D1:3B:73:8A:DE:C3:76:A2:83:9C:28:2C:99
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number: E7
Signing time: Wed 25 Mar 2026 05:47:09 +0000
Manifest this update: Wed 25 Mar 2026 05:47:09 +0000
Manifest next update: Wed 01 Apr 2026 05:47:09 +0000
Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: /0co+m6enpoKJCG0ZuFRXFh1mmT+FeZEi5RkCO6iMek=)
2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: S7S5igmQvKLW0ck787Ok4dnnBzff6qmeN+pto8WjXmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Validity
Not Before: Mar 25 05:47:09 2026 GMT
Not After : Apr 1 05:47:09 2026 GMT
Subject: CN=69c376dd-7a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:fc:45:de:01:7d:97:8d:02:8f:d4:ca:45:
d5:d5:89:0b:95:71:20:7f:c7:e2:34:cb:18:bc:4d:
6b:c8:6c:15:3b:7f:50:62:83:58:dc:31:c5:1a:8b:
ad:6d:93:62:be:26:9f:52:17:b8:01:60:a6:0d:b2:
4b:09:ad:f1:1d:9d:35:43:6f:c6:b7:49:eb:d2:d6:
cb:86:f0:85:19:2e:88:bd:38:7a:a1:19:b6:70:92:
71:2f:67:66:ba:5a:35:cb:65:9c:4c:4c:0d:4c:5b:
dc:fd:ee:5c:f3:43:ac:ce:0c:85:bc:fc:27:3b:12:
e3:ac:30:ac:57:7f:bc:10:93:c4:f5:c5:34:94:ac:
f4:45:d5:5a:b6:cc:d7:42:de:5d:c6:76:02:f0:73:
1b:45:7c:30:33:43:61:78:67:e8:a9:19:bd:2e:a0:
0c:18:28:eb:6f:d4:84:28:fc:54:65:17:ac:e0:74:
df:4d:2d:0e:3e:0d:6a:f9:03:10:d1:e3:6a:8a:16:
c1:bd:3d:da:2f:de:fe:8e:33:58:0c:f6:b6:b9:10:
8e:4a:73:76:37:fd:ea:e8:fd:e9:4d:03:f8:e4:a8:
fb:1e:6e:33:db:5c:62:ae:07:ed:09:1c:61:ca:21:
b9:1b:b3:68:da:fa:59:7f:ff:11:10:89:12:f9:c3:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:B0:9A:A6:77:A3:D1:3B:73:8A:DE:C3:76:A2:83:9C:28:2C:99
X509v3 Authority Key Identifier:
keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:f6:af:10:58:48:b5:0d:9e:1e:91:60:d9:e6:ad:ca:34:79:
72:ee:c4:88:de:a0:45:95:24:62:64:e2:d7:61:1d:8a:f8:e8:
a2:03:5d:81:d7:3f:fb:20:bc:41:0e:7c:ac:98:a6:a0:0b:b8:
fe:65:b9:59:6a:e4:b9:03:20:d4:fe:a3:a1:53:bc:44:62:8d:
56:a7:63:35:19:1e:8b:a4:69:16:d4:38:e3:ef:a3:37:4c:93:
52:b7:6a:79:13:ba:e2:05:29:da:6a:53:77:75:f3:5c:81:b5:
23:d8:d7:47:37:11:29:ff:52:c8:b1:f5:d5:5f:b8:8c:85:82:
e2:df:33:39:22:8c:a1:3e:39:3a:01:39:87:77:bb:21:48:e9:
6c:73:f8:eb:e5:5f:5a:9b:31:d3:0f:2c:79:14:68:7a:44:8c:
ac:42:4b:01:44:16:30:45:d7:a8:32:9e:56:cf:db:87:32:7c:
9a:16:d4:ed:8a:a1:a0:bf:73:db:fa:fa:78:fc:88:cc:f8:7d:
9a:d8:ca:13:c0:f2:c9:a4:eb:3f:84:23:47:f1:b7:6f:a0:cb:
78:a6:36:e3:bd:8a:57:d1:44:21:6e:b4:87:6b:86:36:65:66:
32:d5:e8:9a:51:c3:82:6e:56:f2:03:3b:85:46:09:60:dd:e0:
a5:f0:cf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:43:35 2026 by rpki-client