
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier: Z0pb13hPicJRn6t4bRvlqh+uojcrlCh1MF+U43KIix0=
Subject key identifier: E5:D7:C8:B2:6B:8F:28:D7:40:5F:37:32:67:83:CE:29:ED:6D:B1:4D
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial: 3528
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number: 3528
Signing time: Sat 04 Apr 2026 14:58:28 +0000
Manifest this update: Sat 04 Apr 2026 14:58:27 +0000
Manifest next update: Sat 11 Apr 2026 14:58:27 +0000
Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: 0aX/Ba1mbzRo2b2vzzUGbm8smiG2epqPEnOSz2XTLiY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13608 (0x3528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Validity
Not Before: Apr 4 14:58:27 2026 GMT
Not After : Apr 11 14:58:27 2026 GMT
Subject: CN=69d12714-bc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:75:6a:9d:d8:11:04:09:34:b4:29:5a:cc:5d:
aa:c9:7b:91:22:a9:af:6a:70:80:98:d7:b8:e7:34:
f7:9a:84:b5:48:d7:26:e9:d9:3a:6a:a5:d7:6d:2c:
4a:ce:3b:ae:0d:6f:2d:7e:ec:47:1e:94:d2:86:93:
59:a3:71:b6:00:4d:0a:b9:62:7c:30:ea:46:2a:7b:
e3:2c:b8:c6:08:01:da:1c:48:17:ca:c5:d6:d1:c1:
92:d4:31:8c:c5:09:4e:0b:19:5b:3a:56:43:b0:56:
ad:9a:00:cc:5e:0c:c3:0a:80:6a:bd:25:4e:92:aa:
eb:75:40:61:3c:d9:59:de:c3:11:66:4f:9f:70:0f:
cb:cd:70:cb:0e:6b:4a:a7:2e:ed:4f:3d:65:76:bf:
c1:ec:94:0a:d2:91:40:67:22:a3:66:4c:2c:c3:5a:
21:18:74:59:32:ed:20:a1:1e:45:de:11:a1:8d:19:
a5:77:d2:67:21:ba:ec:5f:ae:12:f2:dc:1f:93:a7:
4b:67:38:15:a4:5a:8e:d3:9d:1c:8e:71:8d:3a:49:
7e:71:62:8c:69:dc:7f:38:07:49:2a:af:60:57:18:
4d:fa:72:93:9a:c5:75:58:21:45:cf:0f:c7:31:95:
03:69:f2:30:4a:a6:f3:87:08:79:4f:77:b8:7f:6f:
25:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:C8:B2:6B:8F:28:D7:40:5F:37:32:67:83:CE:29:ED:6D:B1:4D
X509v3 Authority Key Identifier:
keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c6:68:03:f6:03:bd:0c:76:b1:6e:56:3d:11:9c:ca:d6:4c:
c6:71:7f:b8:1c:0c:2f:4d:72:50:2e:99:08:3e:8d:fa:b0:16:
7d:4f:1c:84:97:83:12:e5:78:d7:5b:f5:c4:89:3f:5b:37:8f:
ad:d4:a5:78:c0:ba:50:97:84:10:a6:2d:2e:79:fd:8e:f7:d3:
37:8f:ac:60:f7:4f:ae:ef:41:a8:3c:6e:28:7c:e6:80:f5:d5:
0c:69:ce:12:d9:45:5f:0e:fa:f3:e9:08:90:0f:37:76:2d:a9:
88:28:ad:b6:4a:6f:98:37:04:89:73:92:0d:de:25:e2:e5:ce:
f7:ea:5d:b3:90:e8:12:57:6b:cf:9a:97:2b:14:99:68:dd:7c:
25:5a:eb:ed:d1:56:6f:88:36:15:69:78:98:3d:23:ae:c3:e5:
29:f7:00:a4:50:dd:54:dc:29:ce:5d:b7:fc:d5:ed:0c:32:70:
22:0c:0c:8f:c8:78:5f:a0:3b:af:f1:9a:0c:86:60:f3:be:ad:
1b:d9:2b:2d:46:f2:a3:43:7e:63:cd:eb:cc:45:e3:ea:b2:53:
81:69:fc:20:e2:4f:07:24:cc:2c:e9:c1:11:f8:75:58:46:0b:
e3:0b:7c:8d:49:dc:6a:c1:89:36:f7:36:0d:8a:f6:ef:db:91:
98:8f:f3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:36 2026 by rpki-client