
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File: vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier: AcbzpitpYn/osA7UO3/ceIvlFhZoj1Aqip1wxl86CY8=
Subject key identifier: 74:87:9B:2C:8D:6B:E7:2D:88:21:9F:E8:FC:06:85:4C:57:A0:1D:D3
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: A4
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number: 7F
Signing time: Tue 24 Mar 2026 19:18:23 +0000
Manifest this update: Tue 24 Mar 2026 19:18:22 +0000
Manifest next update: Tue 31 Mar 2026 19:18:22 +0000
Files and hashes: 1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: HMYtc/asEvPQ9ddM4DuuDfnoc1pLKMz+Nj10HLDd39s=)
2: 16F6D616F22611F0B93B32AB526F56BC.roa (hash: yFLmYebaUbJ6reKdWdi3DmPew6pd6pI+NJi8cZapaWQ=)
3: 703D5E5CE0D811F0B739A402566F56BC.roa (hash: Dw3fw9EkFFhkI8TxTDIZWIo4dxuyNYLakuInHF+wXwo=)
4: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (hash: TJIpr8Hqwt+6AcFhP4yDkhScWwwfFOLtYVxG8SAKkWo=)
5: 8E018B30D05611F0A517D12AC4F9AE02.roa (hash: 3o4eLQQgCuvbHfOInmt6QiD6MsZZKAjvEcfPJXshL+g=)
6: 7D795E8AE17911F09A6E23083F6F56BC.roa (hash: X901B9VApyn90CyDDZ0zuwP249Avp4jwYsM3W5Ai2w8=)
7: 751E0734D06911F0A789BB44C4F9AE02.roa (hash: uBrNsmUWpoNSwdbVMZe1XtXRd1sgkxNz+DTgVX0m83E=)
8: 080C8846CC5911F0900FE21DC4F9AE02.roa (hash: rvXOvOgo+SIEF6wsyCsZeqlYrvJxje0iIj+1Doa9qVg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164 (0xa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Mar 24 19:18:22 2026 GMT
Not After : Mar 31 19:18:22 2026 GMT
Subject: CN=69c2e37f-9892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:5b:cb:5b:e2:01:e3:da:80:ed:7e:32:ab:
a5:5a:3c:09:13:1a:72:92:5b:02:10:6b:ff:8e:3b:
95:e1:4c:41:87:d8:60:92:fd:43:bf:ec:e0:85:eb:
56:f7:ad:05:a7:88:f3:07:3f:d4:a7:40:fa:0b:c2:
c6:6d:4f:34:3b:40:38:31:cd:01:25:01:5a:91:40:
a6:1d:21:8e:56:13:88:2d:5d:c4:72:94:f5:71:b2:
3e:cd:26:16:46:08:5e:cd:63:81:57:bb:c7:19:76:
98:b0:97:3a:7a:62:9a:77:f2:f0:ea:ba:31:0f:65:
5e:6b:45:c8:ee:ea:c2:6a:97:31:a1:f7:21:ad:18:
9e:c2:61:86:7d:92:2b:56:b4:d2:1e:ba:94:db:0c:
f7:98:e1:ea:e9:04:09:84:5e:ba:92:ec:a8:c7:1e:
65:24:b1:53:e3:b7:06:11:5a:bc:24:97:9d:6d:8c:
f0:ea:09:68:24:3c:5b:1e:8e:90:11:6a:51:e7:13:
0d:00:6b:bd:3f:9e:34:a7:70:3a:56:e1:82:83:85:
00:7b:de:b4:67:8b:ab:07:2a:87:64:e6:3b:e6:48:
c1:c8:4f:b2:42:70:29:7e:b8:46:fe:f3:6d:a3:35:
3d:39:9b:5d:ed:f0:c8:cb:34:7c:56:df:90:a8:ab:
7b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:9B:2C:8D:6B:E7:2D:88:21:9F:E8:FC:06:85:4C:57:A0:1D:D3
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:66:c6:d9:79:61:9f:5e:30:47:ea:17:a6:3a:ba:20:b0:
ad:2f:35:09:cd:a9:cc:b0:1e:85:03:49:74:90:4a:0d:f3:a6:
90:fa:af:be:21:ec:58:0b:02:fc:a8:ad:31:37:5a:ec:c2:59:
30:44:ae:4b:5a:67:5d:71:42:35:ef:c0:2b:51:64:c3:af:0f:
88:af:eb:5f:e2:01:1d:e5:b7:37:32:20:d6:45:a6:0d:a9:cb:
b1:b3:8f:6d:9e:6f:0d:78:10:28:a3:51:35:41:7c:56:ae:83:
6b:d1:63:51:d7:e0:ed:06:a2:a9:a4:e5:e2:23:58:af:e4:71:
39:b3:6a:7b:2b:40:01:5a:3e:f5:ae:57:b3:d3:12:0f:1a:76:
d8:9f:41:c0:6f:53:ee:e1:0d:51:9b:16:21:c7:15:6f:b2:20:
d9:75:07:45:42:53:27:42:ba:eb:11:dd:4e:84:fa:d4:f7:27:
00:7f:c1:d2:c3:a9:80:53:5e:5c:4c:6f:54:d9:2d:34:22:af:
49:18:f9:b9:38:ad:63:e2:e8:2b:c8:e7:e8:da:a6:05:65:b7:
79:13:e3:d0:95:38:c2:00:65:44:6e:a6:68:c6:20:9b:eb:2d:
93:4c:80:4d:ee:8d:81:34:39:76:a8:eb:a2:68:73:b4:a4:20:
0d:41:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:12:46 2026 by rpki-client