
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
File: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft (raw, json)
Hash identifier: tlKd4YIx8D7MdKeuluqwz4L+PD5Tc41rfWOjYPuP2/g=
Subject key identifier: BD:0E:9B:8D:88:DF:D2:E3:E3:59:AB:DB:59:10:3F:C3:1A:7E:FC:80
Authority key identifier: BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
Certificate issuer: /CN=A9151290/serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Certificate serial: 28
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
Manifest number: 20
Signing time: Tue 03 Mar 2026 08:35:51 +0000
Manifest this update: Tue 03 Mar 2026 08:35:51 +0000
Manifest next update: Tue 10 Mar 2026 08:35:51 +0000
Files and hashes: 1: vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl (hash: 1ZXvXROBDubJcl2Z9WBSunIoMvGorr+H21Yy1IJCuqM=)
2: 95303322F20511F0873139314A6F56BC.roa (hash: 1sNl2GKaplu72shhpID3R2WKIOZVHmc3EWv5WEQWdk0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Mar 2026 08:35:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9151290, serialNumber=BD3CC5FF8428F2DE1C386BF8068D028745806FCE
Validity
Not Before: Mar 3 08:35:51 2026 GMT
Not After : Mar 10 08:35:51 2026 GMT
Subject: CN=69a69d67-aadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:1c:0f:36:61:e4:41:0a:70:f6:f8:48:85:
9f:a2:36:a5:c4:b0:d6:3e:6f:36:c5:60:28:32:85:
cc:ba:2e:67:64:91:66:bb:98:5b:98:e9:f2:88:f1:
5a:05:fa:5a:d0:9a:82:bc:70:3c:3d:92:d8:4e:68:
43:5d:fd:a6:fc:6e:9c:1b:09:b1:ee:ce:be:2b:19:
bf:70:ff:9b:b4:0d:c4:e7:7b:ef:de:96:f3:30:9f:
6d:f5:35:cf:da:be:d7:cc:dd:10:43:e4:8a:bf:d4:
d1:8d:80:b2:4c:06:b9:3f:8d:96:36:ea:39:d2:e8:
96:9d:17:a1:1b:17:2e:65:aa:8d:26:32:b1:54:0a:
c2:54:4b:34:f6:ee:4e:d3:e5:82:73:09:3c:df:76:
18:0b:b0:09:31:00:e6:09:72:65:ef:f5:8b:67:02:
ed:63:7a:a6:fe:c2:60:a3:4d:a9:33:95:de:1f:ca:
76:52:4a:c1:ef:bf:01:02:0b:04:5d:69:f2:6c:35:
c1:d5:84:42:b8:48:bd:58:fb:4e:7e:8a:41:c8:c8:
73:73:fa:db:62:aa:1d:fd:7f:eb:49:92:8c:5b:95:
d7:42:27:e8:c6:e5:a1:94:9b:09:33:0e:f9:26:05:
77:c2:34:53:ba:a9:5b:af:cb:86:04:ae:1e:e4:37:
3c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0E:9B:8D:88:DF:D2:E3:E3:59:AB:DB:59:10:3F:C3:1A:7E:FC:80
X509v3 Authority Key Identifier:
keyid:BD:3C:C5:FF:84:28:F2:DE:1C:38:6B:F8:06:8D:02:87:45:80:6F:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/44AB495AF20511F0BD2586054A6F56BC/vTzF_4Qo8t4cOGv4Bo0Ch0WAb84.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bf:90:dd:11:c3:3c:96:90:9b:28:32:df:bf:37:43:94:d9:
69:39:b5:df:62:fd:66:51:d4:fc:e3:dd:a6:fa:52:c6:89:f9:
f9:ce:e0:10:73:1e:9a:7d:6b:af:08:18:f6:c9:9c:c6:3f:1c:
ee:eb:92:3f:8d:61:ae:6e:d7:83:4a:52:78:45:aa:58:28:ea:
ce:fd:75:93:2c:2f:21:1c:d0:ab:b1:26:9e:c6:66:ed:32:36:
c1:78:e4:4f:11:1b:8d:c9:6b:2a:30:e3:c3:38:ae:41:f9:9d:
23:e1:6c:99:f7:70:67:d6:60:0b:c9:a3:2d:2c:d9:2b:06:ec:
18:f5:b5:13:86:55:97:cb:2b:65:f6:cc:c3:4c:09:54:ff:70:
3e:6b:e5:ea:ce:c7:25:8b:cd:5c:b4:6c:1b:71:55:4d:6f:2a:
c6:c5:77:59:b2:3b:e4:d9:bd:a9:d1:f1:00:b4:66:1c:86:4b:
7d:9d:f9:97:a6:b5:d6:91:2f:f1:ac:cd:2e:d3:3c:59:c5:b2:
82:c3:f4:7e:49:5d:df:a5:1a:8e:51:d3:6b:e5:df:53:c4:2a:
b7:ef:e7:86:22:84:88:0d:5a:79:29:b3:c2:4c:f9:f3:1d:b2:
f2:7d:1d:a2:ae:33:c6:d8:df:6b:eb:40:b0:9d:29:56:c2:89:
0c:63:19:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:40:08 2026 by rpki-client