
$ rpki-client -vvf rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
File: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft (raw, json)
Hash identifier: 80elyx4vTj4ZlfUz7j+4WonJYThFnC/q6nbEt81KsVg=
Subject key identifier: 72:2A:23:61:8D:0A:AF:DD:48:2B:2A:79:0A:20:96:3A:0D:3D:53:1D
Authority key identifier: BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
Certificate issuer: /CN=A91911EB/serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Certificate serial: 0150
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
Manifest number: 0132
Signing time: Wed 25 Mar 2026 04:53:03 +0000
Manifest this update: Wed 25 Mar 2026 04:53:02 +0000
Manifest next update: Wed 01 Apr 2026 04:53:02 +0000
Files and hashes: 1: vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl (hash: B0yUsXwIoyvKNNkec3iG4k40+bgSN+PhN13Lx2OV4H0=)
2: 9BC7782069A911EFBF66800FC4F9AE02.roa (hash: knt7irIZo9twPxD1Pikiqoy5FaLT8EiXJ3Jv+72SYpg=)
3: 4978358A70E011EF8CDC2330C4F9AE02.roa (hash: cejRFVc4y83A1VT7ywB4hcjvKqoG46ZgbTYAxTBcrgI=)
4: 9CF17DD669A911EFBF66800FC4F9AE02.roa (hash: 0BG+Jz5cTYExQclSKUIrj8rN4X954hpOC9So/bzasFQ=)
5: 9C594FD469A911EFBF66800FC4F9AE02.roa (hash: nMPaP0I0C9Cb95MJ00respJ+zerHJo0kMcvE2pYeSio=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91911EB, serialNumber=BE3F813B202FFB0A382F737968EE166598E0E8AB
Validity
Not Before: Mar 25 04:53:02 2026 GMT
Not After : Apr 1 04:53:02 2026 GMT
Subject: CN=69c36a2f-7c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:24:d0:ee:93:b2:a7:47:1a:ed:fd:4e:23:
26:87:8d:20:41:01:3b:9b:40:de:8e:97:c6:24:93:
0d:ec:ca:1b:0a:c7:d2:24:ec:72:ae:83:ad:1e:74:
13:2e:48:2e:59:08:01:7c:05:13:ae:88:e5:cb:ea:
2d:63:e5:51:4f:0a:55:c4:44:ec:bf:05:78:ea:b1:
8d:0f:cb:c9:ad:27:94:d7:bc:6f:96:22:fa:44:47:
73:ae:1b:84:09:b7:b1:12:52:8d:c9:22:fb:32:5f:
85:4e:73:bb:07:b6:dd:d0:26:bf:16:56:c2:41:25:
c0:c6:d5:3f:e8:cc:62:9f:2b:b1:8d:00:14:5c:34:
86:8a:f5:be:13:f2:93:fe:0a:99:ef:07:53:f3:4b:
f0:bd:b6:56:ba:fa:ad:26:f1:56:0f:9c:21:52:46:
74:6b:64:72:db:45:3e:38:c4:56:58:6d:10:0e:e3:
47:04:df:37:38:4c:64:32:81:04:1f:28:aa:62:ef:
3b:ca:55:1e:45:2a:84:00:4b:04:52:fe:15:2b:d8:
ec:ce:bd:14:92:a7:41:4e:6b:bd:67:0f:fa:a0:d2:
22:bb:02:4a:27:de:91:14:22:c5:70:03:41:5f:8d:
de:1f:31:be:29:5d:59:39:14:b9:46:39:4f:35:e3:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2A:23:61:8D:0A:AF:DD:48:2B:2A:79:0A:20:96:3A:0D:3D:53:1D
X509v3 Authority Key Identifier:
keyid:BE:3F:81:3B:20:2F:FB:0A:38:2F:73:79:68:EE:16:65:98:E0:E8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91911EB/EDA972B269A211EFAE3AB35AC4F9AE02/vj-BOyAv-wo4L3N5aO4WZZjg6Ks.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:1d:4a:52:fb:f2:c9:b3:58:e9:36:00:73:8e:56:e9:e8:
7b:cb:13:ec:4d:35:31:50:d4:93:d5:af:27:20:eb:63:14:91:
4a:63:1a:34:ac:e8:62:ad:59:2b:67:89:f9:31:ea:83:5c:7b:
07:a5:84:0e:98:38:bc:a3:a4:fd:4d:b8:93:d9:4e:68:12:70:
92:b4:32:91:66:5b:0e:24:21:ed:bf:0a:07:b4:54:0d:95:68:
6d:7e:ee:82:2e:c2:b3:86:81:28:5f:ed:61:1e:39:1d:c8:85:
c5:03:1b:f6:7a:a4:a4:a7:a3:37:71:34:d6:b6:53:b4:c9:f6:
ca:fe:27:f2:fc:62:0e:5d:ba:2c:6f:d8:0e:58:47:09:4a:21:
cd:f4:91:f6:3a:34:16:14:e5:23:45:aa:a5:f6:fe:9a:ca:14:
36:2c:b4:f5:5f:3b:de:ff:c7:11:96:4f:b4:7f:86:b6:10:9c:
43:f9:ab:2a:d3:95:d2:74:5d:a9:7c:69:3b:f8:21:94:64:18:
67:98:e0:23:20:fa:44:bd:57:5f:95:03:3e:09:d4:53:f8:c2:
e6:33:3b:dd:62:2f:05:23:3d:5c:65:37:a9:cd:c6:3c:eb:42:
42:bc:f0:be:64:5c:21:27:89:70:05:04:6d:aa:35:71:eb:6b:
98:88:bc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:14:53 2026 by rpki-client