
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier: ped1lY9VbQ3Tk8oFmH/vuURYzHe6/DNvmM//3VepdH4=
Subject key identifier: 97:89:13:1C:F5:B8:E5:D7:B5:C6:5C:BD:56:FB:4D:AF:3F:18:07:ED
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial: 03E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number: 03E1
Signing time: Mon 02 Mar 2026 02:34:02 +0000
Manifest this update: Mon 02 Mar 2026 02:34:01 +0000
Manifest next update: Mon 09 Mar 2026 02:34:01 +0000
Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: IgR/CEGrPdi6MfDkSKNKnQ65QAZaN0ku07jhxUZu4/g=)
2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: FK5yNx0Zju78inYHJZWj8IN7ADGrj2pD7r0/+Xwwns4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 999 (0x3e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Validity
Not Before: Mar 2 02:34:01 2026 GMT
Not After : Mar 9 02:34:01 2026 GMT
Subject: CN=69a4f71a-486d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:81:df:95:51:0c:6a:5c:6b:bd:d0:08:c9:
c7:80:48:f5:a0:79:ee:e3:b4:40:3c:41:ee:3c:d2:
38:df:98:54:aa:36:a3:59:26:75:b7:e2:59:f5:d4:
c5:83:62:b5:3f:77:ac:d4:4b:8b:0f:44:44:08:6a:
45:ab:f5:a6:ab:35:85:88:57:ad:ec:f2:b9:57:ec:
f3:9b:f1:aa:8e:d7:dc:7e:bd:52:0d:ac:11:60:1a:
8d:33:bd:9a:73:d5:45:ac:b3:b6:1d:04:d3:a4:c2:
e7:e1:7a:89:75:bb:7c:fb:ef:a1:7a:74:81:6a:60:
0f:ef:15:25:3d:cf:f0:2b:c0:26:61:1f:44:4a:1f:
d6:ec:1d:cd:7e:ce:34:22:5e:7d:f9:a2:ed:67:87:
9c:b3:b9:99:39:50:93:8e:03:cb:cf:8d:eb:3b:db:
b1:7d:92:9a:42:2d:f2:a4:95:14:70:5e:96:70:b6:
fc:4d:98:3f:b6:83:08:25:74:9f:79:1e:f2:06:cb:
9e:85:fd:66:c9:66:fe:e0:f3:17:e6:d3:e4:61:93:
5f:e2:c9:f1:bc:c6:78:f4:f4:72:da:38:c6:22:e0:
9e:9d:73:51:55:d8:4f:13:c8:6f:de:33:52:6b:04:
b2:87:6f:cf:24:63:85:58:8a:97:3a:23:5f:aa:d1:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:89:13:1C:F5:B8:E5:D7:B5:C6:5C:BD:56:FB:4D:AF:3F:18:07:ED
X509v3 Authority Key Identifier:
keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9a:a4:02:fa:c6:82:07:47:55:26:ea:15:b1:46:47:e4:7f:
e0:fc:6f:95:d4:ea:d1:33:77:75:0c:e0:4e:90:9b:30:bd:98:
54:3f:28:49:b2:6b:0b:bb:d9:73:90:ec:14:08:da:ff:aa:8c:
a1:9b:7c:45:a0:f7:75:93:8f:c6:3d:8b:b0:d2:1a:ea:44:c8:
02:aa:1f:cf:ae:72:9d:2b:14:e7:9f:06:53:12:70:42:31:ba:
97:72:ce:21:d1:4f:22:fc:29:d8:eb:3a:a4:a3:3d:96:b2:69:
ec:d0:90:f3:ff:f2:04:b5:39:b3:ea:07:97:e4:ab:b2:68:b2:
bd:ec:cf:a3:18:80:87:22:fd:8b:88:d8:72:9f:39:db:c9:50:
6e:48:ee:f7:e0:02:ff:09:15:77:5c:e5:b5:8d:56:4a:76:0b:
31:41:4a:a2:af:8d:fd:66:93:18:d9:8b:1f:16:11:73:3d:ea:
b4:7b:42:6e:38:eb:3a:3a:ab:3c:37:7f:6d:3e:84:6a:85:fa:
f6:d3:8f:b6:49:2b:5f:57:70:ee:5c:8d:13:03:6a:d2:98:2c:
49:ee:6a:4c:ff:0f:df:81:1f:fc:e5:15:89:c6:59:b4:90:d2:
b1:23:a4:35:ef:49:c3:6c:85:37:20:ed:55:8b:4a:df:f2:5d:
15:15:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:16:21 2026 by rpki-client