
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json)
Hash identifier: pgF19DEqSU3/A37mqkOxP+TAlVk/43W+UL8m/Rj1Mcc=
Subject key identifier: 02:DD:9F:8E:09:27:A4:2F:7C:7E:FD:0D:F7:04:D7:01:78:51:E9:B0
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial: 02CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
Manifest number: 02AD
Signing time: Wed 23 Sep 2026 01:33:47 +0000
Manifest this update: Wed 23 Sep 2026 01:33:46 +0000
Manifest next update: Wed 30 Sep 2026 01:33:46 +0000
Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: i2kpGi9OSYSm4b7ZIx8Rf0A7spSwHI7SKu1bnD1Y75Y=)
2: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=)
3: F6732580607111EF9102BD19C4F9AE02.roa (hash: y6LTY6At2azJhcbijXp71mtrcDyUBBj9hC3aLUCZvo0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 01:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 715 (0x2cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Validity
Not Before: Sep 23 01:33:46 2026 GMT
Not After : Sep 30 01:33:46 2026 GMT
Subject: CN=6ab32c7b-3864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:ad:78:50:14:d0:e5:b1:05:41:0c:f6:a1:
4d:4f:19:f1:17:f9:7d:7b:48:a5:39:e7:9d:4d:d3:
79:b2:22:69:8d:06:5e:4d:90:93:5a:18:51:72:9d:
c0:a7:4e:f9:6c:da:dd:7a:9f:4e:4f:1d:30:85:f3:
37:68:84:88:28:7c:fe:27:0b:e4:7c:a3:27:28:bb:
28:47:ba:70:0f:1e:4c:f2:87:bc:fd:d7:a3:7b:db:
8a:24:dd:4b:e1:f4:d2:7c:22:ad:4b:a0:3e:3a:33:
0d:0c:b2:01:fa:62:3d:44:72:2a:19:f5:12:f7:73:
9d:33:a0:0f:81:9e:7a:64:7a:a7:38:6f:c0:39:38:
18:fe:dc:8a:a6:c3:86:cf:8f:8b:07:b0:f6:4c:25:
7a:00:94:e9:6f:41:dd:e7:d8:45:cb:2e:97:3e:e6:
cb:da:b8:3c:7e:fc:bc:13:08:72:51:56:c1:ad:44:
d4:61:42:41:c9:b3:a2:75:17:07:af:98:f3:3d:23:
7b:73:b9:1b:b9:d6:8a:60:15:59:4c:0c:30:99:9e:
9e:59:f5:e8:61:70:da:0f:f9:35:91:d3:10:b6:72:
a7:bf:35:f5:c5:2d:aa:d3:be:6b:47:c9:6b:ee:db:
f0:74:d0:12:fa:b1:6d:9d:9b:5d:ad:fb:0a:96:30:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DD:9F:8E:09:27:A4:2F:7C:7E:FD:0D:F7:04:D7:01:78:51:E9:B0
X509v3 Authority Key Identifier:
keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:57:0a:60:7e:ac:c5:0b:7e:ba:1e:df:1a:e8:64:51:a8:d0:
bc:09:b0:5c:8a:7d:bc:05:d1:02:e0:d6:29:1c:47:a4:52:71:
f5:af:d0:96:40:34:45:6a:3a:f2:43:39:d2:89:3f:f5:05:d3:
77:8a:9c:43:b9:58:66:a1:23:83:b1:96:0c:78:25:47:d2:e5:
77:29:27:f6:48:c9:f5:9e:62:92:c2:7c:d5:04:69:8f:70:34:
3c:9a:74:2f:f9:8c:34:b9:b7:58:52:d4:6d:7d:af:42:4e:2f:
99:36:97:dc:d5:4f:e7:ab:62:08:73:f3:18:b6:b0:64:1f:03:
9c:83:27:ef:54:10:57:d5:79:82:d6:7f:5c:2c:81:dc:6e:08:
97:8d:22:20:6d:be:ae:d3:31:4a:55:9d:12:44:de:92:6c:c2:
b4:5c:3c:b2:a3:30:08:26:e8:84:0e:ac:02:d0:5e:3d:84:67:
8d:8f:74:0c:22:0c:d0:ed:9b:9f:bc:9c:1f:6d:ef:31:8a:f9:
90:06:70:bc:17:08:87:67:e8:e7:75:f8:e2:ec:24:27:b9:31:
22:55:d6:4c:3c:ee:a6:b9:25:c8:e2:ad:5f:2d:6f:08:90:e2:
e9:b5:0b:b5:a9:79:60:10:5a:3f:53:11:5c:0c:62:12:cf:f3:
4f:a0:de:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:33 2026 by rpki-client