
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json)
Hash identifier: D4HWf+KHUsgfqCX/vp1ElBJ9NhdrG2E74tIa+vQoruU=
Subject key identifier: 17:FB:01:EE:45:3E:DC:D6:E7:19:FE:CB:05:6A:01:00:7C:51:15:A7
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
Manifest number: 028A
Signing time: Thu 23 Jul 2026 03:07:45 +0000
Manifest this update: Thu 23 Jul 2026 03:07:45 +0000
Manifest next update: Thu 30 Jul 2026 03:07:45 +0000
Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: WsIJaNphvE6+Lj9oSk4eTSvM/HCewRjxdUpJbAr4UDg=)
2: F6732580607111EF9102BD19C4F9AE02.roa (hash: vjw0ZDNhGZYYZvURoK7T9a0f/Cvv2iSDqaaJOXeDsko=)
3: 9D006D76ABFF11EFB2C29330C4F9AE02.roa (hash: gpTT47Zm52/oXmlCRQ9joE/pQOm48+JhXhIfyvy7DVY=)
4: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Validity
Not Before: Jul 23 03:07:45 2026 GMT
Not After : Jul 30 03:07:45 2026 GMT
Subject: CN=6a618581-932d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:d9:b4:de:90:8e:f8:4e:7a:4a:11:ac:d2:
e8:16:db:4e:4b:4f:b2:66:4e:08:3e:e9:a4:0f:33:
54:f4:07:b9:a3:bb:5b:ca:43:00:20:62:54:6d:9c:
8a:10:ea:b5:97:0b:74:28:a0:72:a6:8b:dd:47:57:
1a:c4:14:c2:7a:63:44:2a:52:51:c6:62:f5:cf:55:
4e:52:7d:a9:58:9f:13:ba:80:cc:03:a5:a1:eb:08:
b3:0f:00:37:c9:a1:0d:d6:91:55:82:48:75:40:30:
c7:3b:42:fe:ee:b7:d5:ab:25:0c:7b:a7:6e:80:bc:
9b:bb:93:33:c5:dd:81:c2:90:cd:14:e7:32:21:b5:
2b:ef:eb:ba:b6:50:c5:5e:b5:2d:76:8e:2c:d7:b8:
f6:96:90:44:e7:d3:8d:f1:b2:d0:8c:e0:6b:d4:b2:
7e:4d:ea:79:61:96:6d:a0:3c:d5:bf:66:8f:2d:c1:
27:56:6d:ec:38:52:5a:92:cf:71:17:0d:db:b7:5e:
c6:06:7d:be:c6:c1:bd:b9:a8:79:9c:f2:56:32:71:
d0:ca:89:8e:e5:dc:c5:d0:92:e0:f8:3f:de:b2:e5:
38:99:70:d7:7b:76:30:83:41:4c:9e:e0:96:b1:71:
d1:84:28:8c:7c:94:10:b6:00:f3:21:b7:14:f3:87:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:FB:01:EE:45:3E:DC:D6:E7:19:FE:CB:05:6A:01:00:7C:51:15:A7
X509v3 Authority Key Identifier:
keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:3a:28:8c:85:52:f3:a8:86:ca:8d:0b:15:47:b8:64:64:96:
92:3a:82:a7:72:f1:ff:97:f6:63:83:06:58:ee:23:bd:b5:26:
26:0d:05:29:6b:af:6a:07:21:db:8b:2b:6b:8f:79:58:ac:82:
6a:b5:08:aa:55:93:69:f3:15:d3:2a:d7:4e:15:45:1f:97:13:
f1:c7:7a:dc:df:84:c0:28:db:60:18:63:ce:fa:cb:e9:d5:ea:
fc:f3:9d:28:88:0c:3e:22:78:cf:17:8d:d0:93:b8:c6:da:f8:
9f:28:40:d0:fc:bc:47:e3:a9:67:f4:af:0f:cc:b3:1c:fd:8e:
11:66:4a:dc:11:13:37:5b:59:49:ea:ce:0e:20:90:21:79:8a:
91:5e:d2:bd:6e:4c:18:3e:3b:0a:b8:e7:90:60:02:7a:cb:44:
cc:48:27:b0:de:49:75:e0:82:a1:0d:8b:29:1e:ec:f8:7c:db:
82:4c:9b:cc:0f:82:68:5f:a9:3b:36:06:02:c7:a3:3d:f5:52:
c9:a2:b3:ea:11:cb:eb:9e:a1:40:a9:22:12:ef:e6:2a:7f:18:
b4:03:a3:32:65:4e:cd:71:52:7f:08:b9:9c:47:74:af:10:18:
c0:bb:5f:87:62:a0:c3:54:83:e5:f7:74:82:1c:83:6d:d4:4e:
7c:06:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:37:16 2026 by rpki-client