
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
File: vttNMcgBx4se-jSHY50DVayRNUs.mft (raw, json)
Hash identifier: dgL1OyZj+vVpZtJ1YHz05PfFGZId3TS14EA5vwdXabY=
Subject key identifier: 0E:61:6D:DA:90:EA:32:4A:E2:F7:FB:CD:63:E0:5C:05:A4:84:48:BE
Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
Manifest number: 0123
Signing time: Thu 23 Jul 2026 07:33:40 +0000
Manifest this update: Thu 23 Jul 2026 07:33:39 +0000
Manifest next update: Thu 30 Jul 2026 07:33:39 +0000
Files and hashes: 1: vttNMcgBx4se-jSHY50DVayRNUs.crl (hash: L3v/nEufiUN+1J9pKLGaIpTp8NABnneNnRWQokbxeKQ=)
2: D99266FE4F7911F095AB2D46C4F9AE02.roa (hash: S7S5igmQvKLW0ck787Ok4dnnBzff6qmeN+pto8WjXmE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B
Validity
Not Before: Jul 23 07:33:39 2026 GMT
Not After : Jul 30 07:33:39 2026 GMT
Subject: CN=6a61c3d3-668a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:85:5e:a0:f4:bf:ed:4d:08:7c:f8:88:90:11:
2c:a8:97:e9:83:6a:47:8e:ce:bd:76:c2:fc:e7:2a:
1d:bc:a7:ab:62:c0:de:08:ea:9a:2c:00:b9:f6:67:
3a:2e:ee:ac:f3:71:d4:35:b0:0e:ff:cb:3d:61:77:
6f:08:6b:76:1b:5d:62:a4:32:af:8a:b2:ec:be:57:
d0:6e:e5:23:cb:ce:7f:e5:50:23:37:d1:ae:0f:3b:
1f:5e:21:37:e0:2f:31:fc:a8:49:c6:af:65:29:71:
c4:c1:bf:ff:4a:e8:18:d3:fe:dc:b7:f3:c8:a7:b4:
5c:a2:6f:75:1a:76:b1:3e:98:f3:a5:84:4a:c0:37:
a9:35:c0:14:cf:33:99:18:12:39:81:5d:cd:6d:87:
a8:e5:fd:da:e3:89:47:73:8c:e9:fa:b2:18:85:9e:
55:4f:4d:c9:10:fd:99:2b:42:95:7c:88:07:6b:d3:
51:71:49:fd:d7:fa:01:49:0a:7f:38:07:86:1b:70:
3f:25:45:3a:9a:37:50:9f:ae:2b:1a:92:e2:d2:16:
d9:cd:af:b7:c6:4d:ac:84:e5:e3:4f:ba:d5:3c:9c:
94:a6:ce:6a:8e:71:cb:96:68:ee:de:93:6c:15:d9:
7a:e3:c0:d2:69:fd:40:79:28:e6:8a:86:4f:85:b8:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:61:6D:DA:90:EA:32:4A:E2:F7:FB:CD:63:E0:5C:05:A4:84:48:BE
X509v3 Authority Key Identifier:
keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:b9:5c:d6:0b:1e:06:aa:21:28:97:4c:77:86:35:56:7a:21:
96:f9:02:86:2c:ac:0f:81:8d:62:df:92:3a:78:aa:40:43:a7:
48:51:ee:75:43:68:0a:2b:e7:88:99:fe:b0:6f:ec:33:67:5b:
0a:51:ad:b5:0f:74:fc:8c:09:c3:34:a9:61:b5:5c:a6:7b:f8:
35:ca:40:a7:fd:71:8d:64:7e:f1:bf:6c:68:86:71:cf:c9:04:
34:63:07:07:38:d3:c4:ef:d3:c1:23:44:b6:06:a4:58:1c:74:
7a:97:cc:93:18:44:39:cd:bc:b8:74:61:20:63:bc:e3:62:a2:
f9:14:84:c5:92:01:ea:81:7f:1a:41:a6:79:06:7a:8c:84:86:
11:7a:ff:46:79:f6:f9:dc:66:ba:b5:eb:3c:21:6d:82:81:c3:
89:75:e1:2a:a7:33:05:b0:20:16:ca:61:43:61:2a:94:fe:40:
f6:55:f4:3f:05:ef:eb:51:3d:31:b2:85:56:f7:0b:fe:3e:56:
0e:37:b4:54:5a:a2:ef:95:4d:a1:61:98:f4:9e:81:ac:27:d5:
2f:a0:12:e3:c6:c6:e7:91:e6:df:ec:41:5a:bb:3a:51:e8:7f:
e8:66:e0:56:ed:95:c9:f2:d7:48:65:1c:b6:0f:1d:8e:ca:de:
f7:75:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:59:26 2026 by rpki-client