
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier: xmZ64PoxcrT64OkQJkERybJ4UAkkdRzMRlUvCziFGtQ=
Subject key identifier: 91:33:52:E2:51:2F:E4:54:8C:F1:0B:DB:AB:87:4D:A2:5F:90:41:EF
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial: 03F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number: 03EF
Signing time: Wed 25 Mar 2026 00:09:26 +0000
Manifest this update: Wed 25 Mar 2026 00:09:25 +0000
Manifest next update: Wed 01 Apr 2026 00:09:25 +0000
Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: idi8xilaV6JkcEdLbwMG7lVrSuj8ynaHcql4dGcAyQU=)
2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: 84Ty7wcmoehSksw6QkgqM/3dAcuuvgPeVakKxHJDpTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 00:09:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1015 (0x3f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Validity
Not Before: Mar 25 00:09:25 2026 GMT
Not After : Apr 1 00:09:25 2026 GMT
Subject: CN=69c327b6-b09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:cd:1b:a1:94:00:24:ee:ea:8b:55:95:9d:
be:31:90:e9:57:e3:32:4c:8b:53:9b:fa:77:a3:51:
d7:d6:0e:83:74:1b:ec:51:f7:91:d3:21:f3:33:d1:
bc:0b:61:28:98:46:c7:1f:c4:b5:2c:94:f1:d9:53:
6e:86:62:14:4e:fe:69:c8:25:a2:04:7a:04:fc:32:
c8:4e:a9:94:7e:70:1e:a7:1e:45:21:dd:d2:6e:57:
53:26:23:5a:f4:0d:51:50:14:39:62:80:72:f0:a7:
f7:0f:b1:8b:ba:6d:2f:ed:1e:26:5d:7a:26:bd:56:
db:78:59:4a:9b:0a:49:85:20:89:fc:4e:4a:ae:71:
e1:3a:5e:65:21:0d:4b:29:df:9a:73:81:5c:70:89:
95:97:98:df:d8:0b:b2:fb:c6:ef:a4:3e:42:ef:cb:
01:59:b4:31:64:f1:ec:75:e4:04:6c:3f:30:6b:af:
28:b2:8d:0c:df:de:71:84:ad:89:d4:01:80:c9:3f:
b6:74:56:e2:2c:fb:43:ee:07:00:57:92:a4:1a:b1:
71:d3:22:55:77:c1:00:d2:58:32:aa:40:ba:82:fe:
25:64:fe:e0:fe:a5:ec:30:af:94:28:cd:8d:f3:7f:
1d:05:76:4c:42:9f:89:87:09:f5:09:3b:f7:1c:0d:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:33:52:E2:51:2F:E4:54:8C:F1:0B:DB:AB:87:4D:A2:5F:90:41:EF
X509v3 Authority Key Identifier:
keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e9:eb:da:1a:19:6a:39:77:4b:0f:13:a1:19:b6:a5:d6:78:
fc:0f:18:65:65:32:c1:a7:01:60:81:be:3b:4a:1e:c5:2c:d7:
f5:b5:0e:35:66:44:eb:aa:e0:f4:ab:64:58:40:71:ec:85:01:
7e:34:b4:45:32:57:4f:32:c6:c1:af:a2:ad:2a:72:02:dd:85:
1c:2d:95:79:5c:24:15:25:c2:82:f4:bd:7c:55:0c:c6:c0:9c:
65:11:85:1b:22:73:f0:d8:fb:9c:6a:98:6e:bc:1a:45:d0:2c:
4a:95:f1:cc:c8:86:80:ee:be:21:bc:8c:61:ec:d7:91:52:be:
96:5e:94:e1:32:57:62:37:af:5c:e1:ce:27:8e:26:7a:ee:24:
18:42:1b:55:1d:bf:d5:e5:29:b7:66:ad:bf:37:cb:25:d5:bb:
5e:76:aa:61:9d:ea:e4:d7:f3:49:fa:10:8e:33:41:75:d4:93:
eb:5c:0f:25:20:41:96:e4:38:0a:a2:19:b0:4a:a0:d4:e0:1d:
ce:c7:bd:d8:68:a0:8e:d3:30:fd:d1:24:da:78:c4:93:db:45:
2a:4e:44:c7:bf:4e:59:21:ba:45:90:7d:aa:34:f6:34:3a:8c:
e6:cf:d4:d7:a7:b0:16:f6:33:e4:23:4d:76:38:92:72:f2:59:
a5:6c:73:8e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZGMkIxMTAvBgNVBAUTKDU2MzhDQjFFMjZEMTE5OURBQkU4QjhDN0VEMjJCMDND
NENFOEM4MEEwHhcNMjYwMzI1MDAwOTI1WhcNMjYwNDAxMDAwOTI1WjAYMRYwFAYD
VQQDEw02OWMzMjdiNi1iMDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoarNG6GUACTu6otVlZ2+MZDpV+MyTItTm/p3o1HX1g6DdBvsUfeR0yHzM9G8
C2EomEbHH8S1LJTx2VNuhmIUTv5pyCWiBHoE/DLITqmUfnAepx5FId3SbldTJiNa
9A1RUBQ5YoBy8Kf3D7GLum0v7R4mXXomvVbbeFlKmwpJhSCJ/E5KrnHhOl5lIQ1L
Kd+ac4FccImVl5jf2Auy+8bvpD5C78sBWbQxZPHsdeQEbD8wa68oso0M395xhK2J
1AGAyT+2dFbiLPtD7gcAV5KkGrFx0yJVd8EA0lgyqkC6gv4lZP7g/qXsMK+UKM2N
838dBXZMQp+Jhwn1CTv3HA1ihwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJEzUuJR
L+RUjPEL26uHTaJfkEHvMB8GA1UdIwQYMBaAFFY4yx4m0Rmdq+i4x+0isDxM6MgK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkYyQi8zMzg2Njc2NkI2
QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkdaMnI2TGpIN1NLd1BFem95
QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZqakxIaWJSR1oycjZMakg3U0t3UEV6b3lBby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NkYyQi8zMzg2Njc2NkI2QzkxMUVDODlCREM2ODdDNEY5QUUwMi9WampMSGliUkda
MnI2TGpIN1NLd1BFem95QW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAt+nr2hoZajl3Sw8ToRm2pdZ4/A8YZWUywacBYIG+O0oexSzX9bUONWZE66rg
9KtkWEBx7IUBfjS0RTJXTzLGwa+irSpyAt2FHC2VeVwkFSXCgvS9fFUMxsCcZRGF
GyJz8Nj7nGqYbrwaRdAsSpXxzMiGgO6+IbyMYezXkVK+ll6U4TJXYjevXOHOJ44m
eu4kGEIbVR2/1eUpt2atvzfLJdW7XnaqYZ3q5NfzSfoQjjNBddST61wPJSBBluQ4
CqIZsEqg1OAdzse92GigjtMw/dEk2njEk9tFKk5Ex79OWSG6RZB9qjT2NDqM5s/U
16ewFvYz5CNNdjiScvJZpWxzjg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:18 2026 by rpki-client