
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
File: VRTBgTfeq40U8RHJD39rfjDQH2Q.mft (raw, json)
Hash identifier: 9+8ZBXciU8zT3jNW+ZlIhZOQu3dEITTTcZs0MXU0HS4=
Subject key identifier: 8B:50:F0:47:90:CE:5B:E9:90:FE:A4:5A:7C:B2:3B:89:8A:BA:80:43
Authority key identifier: 55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
Certificate issuer: /CN=A916D1DA/serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Certificate serial: 3540
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
Manifest number: 3540
Signing time: Wed 20 May 2026 15:00:21 +0000
Manifest this update: Wed 20 May 2026 15:00:21 +0000
Manifest next update: Wed 27 May 2026 15:00:21 +0000
Files and hashes: 1: VRTBgTfeq40U8RHJD39rfjDQH2Q.crl (hash: VOOKr4eRqVEjiUnZPIcATQww9MNR+5XHwpwwgrJkk3c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13632 (0x3540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D1DA, serialNumber=5514C18137DEAB8D14F111C90F7F6B7E30D01F64
Validity
Not Before: May 20 15:00:21 2026 GMT
Not After : May 27 15:00:21 2026 GMT
Subject: CN=6a0dcc85-9d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:6a:20:70:2a:75:16:84:f1:20:c3:5a:4a:
4b:cd:3c:e7:48:c2:19:0b:66:68:f5:68:e7:11:56:
9a:01:d6:36:2a:9a:7b:d5:6d:02:25:32:ba:e7:6a:
a3:5e:94:86:5e:0f:aa:bf:7c:81:67:29:ff:97:a3:
7e:0f:96:6a:f1:27:56:b9:c1:1b:8b:e3:32:7a:4e:
47:93:d9:5f:d9:ee:b1:d1:96:c4:cd:22:f4:fb:f6:
7e:3d:ba:f7:76:fe:53:cb:b7:84:ba:2e:df:b0:06:
c9:70:17:84:62:2e:02:54:78:29:9e:30:51:ec:97:
b5:11:d3:4a:98:dc:05:34:56:27:7c:92:69:68:48:
13:cf:63:4a:78:00:19:6f:e2:38:41:1e:8c:3e:bf:
ba:b6:1e:94:a2:3d:52:80:52:6e:ca:75:9d:11:76:
9d:47:8c:e4:d0:0f:b1:bc:13:86:3d:6c:6b:a1:ae:
00:21:16:ed:02:b7:41:f9:e7:cf:a0:c6:28:50:3d:
28:51:48:e8:dc:b3:b5:2e:d1:15:24:80:81:9a:54:
47:19:9f:09:f2:bf:89:4f:9f:05:7c:ef:9e:f6:1d:
0b:91:60:d1:01:41:88:63:ac:ea:ec:1d:a3:7f:37:
03:cf:2e:e0:fa:9e:f8:28:c8:91:95:88:5e:c5:59:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:50:F0:47:90:CE:5B:E9:90:FE:A4:5A:7C:B2:3B:89:8A:BA:80:43
X509v3 Authority Key Identifier:
keyid:55:14:C1:81:37:DE:AB:8D:14:F1:11:C9:0F:7F:6B:7E:30:D0:1F:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VRTBgTfeq40U8RHJD39rfjDQH2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D1DA/008CE52A1D9E11E2964B958D08B02CD2/VRTBgTfeq40U8RHJD39rfjDQH2Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c9:c8:35:60:73:28:e3:7e:8d:e9:8c:86:8d:e3:5e:0f:5c:
7d:0a:22:a9:1d:dd:4c:ce:f8:f1:c5:73:00:ba:55:24:00:c6:
e4:e5:f4:4f:38:11:7e:41:00:ac:9b:73:fc:86:2d:03:47:c2:
6f:c0:c6:12:5f:b7:b6:9f:d7:8c:94:02:d1:38:dc:27:44:0f:
1d:88:2d:be:40:ff:6c:ae:37:ce:05:e2:65:16:3b:18:e8:75:
73:cd:50:e9:a1:36:c3:90:4a:05:6b:76:d3:1d:8e:54:b2:15:
eb:25:22:da:8a:e8:69:de:cc:a9:d7:be:a1:e3:28:ca:1f:1a:
48:7f:fe:1c:dc:29:b0:66:f3:26:1d:50:b1:56:6d:3a:a0:d7:
fc:09:48:08:b7:41:0b:f8:f6:02:c5:62:d2:04:9d:1a:72:22:
f2:a9:7f:f3:58:bd:ad:c2:8f:2e:e2:fe:d1:a7:52:17:d6:17:
86:7a:9a:d4:77:f3:66:b9:3b:6a:3d:55:89:ec:4c:e7:34:ab:
2b:de:f7:7a:0a:c7:5a:61:c6:97:b0:bf:a6:a1:81:66:a4:5c:
64:36:89:23:95:3e:ea:6b:9a:38:cc:f6:86:3e:ec:9a:98:21:
94:5e:87:a6:ed:5e:b1:70:92:9c:58:a2:5b:3a:43:39:34:db:
9b:74:f8:f9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxREExMTAvBgNVBAUTKDU1MTRDMTgxMzdERUFCOEQxNEYxMTFDOTBGN0Y2QjdF
MzBEMDFGNjQwHhcNMjYwNTIwMTUwMDIxWhcNMjYwNTI3MTUwMDIxWjAYMRYwFAYD
VQQDEw02YTBkY2M4NS05ZDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlPxqIHAqdRaE8SDDWkpLzTznSMIZC2Zo9WjnEVaaAdY2Kpp71W0CJTK652qj
XpSGXg+qv3yBZyn/l6N+D5Zq8SdWucEbi+Myek5Hk9lf2e6x0ZbEzSL0+/Z+Pbr3
dv5Ty7eEui7fsAbJcBeEYi4CVHgpnjBR7Je1EdNKmNwFNFYnfJJpaEgTz2NKeAAZ
b+I4QR6MPr+6th6Uoj1SgFJuynWdEXadR4zk0A+xvBOGPWxroa4AIRbtArdB+efP
oMYoUD0oUUjo3LO1LtEVJICBmlRHGZ8J8r+JT58FfO+e9h0LkWDRAUGIY6zq7B2j
fzcDzy7g+p74KMiRlYhexVliCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFItQ8EeQ
zlvpkP6kWnyyO4mKuoBDMB8GA1UdIwQYMBaAFFUUwYE33quNFPERyQ9/a34w0B9k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDFEQS8wMDhDRTUyQTFE
OUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0MFU4UkhKRDM5cmZqRFFI
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZSVEJnVGZlcTQwVThSSEpEMzlyZmpEUUgyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDFEQS8wMDhDRTUyQTFEOUUxMUUyOTY0Qjk1OEQwOEIwMkNEMi9WUlRCZ1RmZXE0
MFU4UkhKRDM5cmZqRFFIMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAo8nINWBzKON+jemMho3jXg9cfQoiqR3dTM748cVzALpVJADG5OX0TzgRfkEA
rJtz/IYtA0fCb8DGEl+3tp/XjJQC0TjcJ0QPHYgtvkD/bK43zgXiZRY7GOh1c81Q
6aE2w5BKBWt20x2OVLIV6yUi2oroad7Mqde+oeMoyh8aSH/+HNwpsGbzJh1QsVZt
OqDX/AlICLdBC/j2AsVi0gSdGnIi8ql/81i9rcKPLuL+0adSF9YXhnqa1HfzZrk7
aj1ViexM5zSrK973egrHWmHGl7C/pqGBZqRcZDaJI5U+6muaOMz2hj7smpghlF6H
pu1esXCSnFiiWzpDOTTbm3T4+Q==
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:00 2026 by rpki-client