
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
File: VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft (raw, json)
Hash identifier: FO68J1xODA5/SuuXjy7EAKB87E/QIWyV6jS8OG60iG0=
Subject key identifier: 44:AD:D1:06:5B:3D:75:0F:E0:AB:D4:AC:E2:CD:AB:3F:54:8E:95:BA
Authority key identifier: 56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
Certificate issuer: /CN=A91D6F2B/serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Certificate serial: 0410
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
Manifest number: 0408
Signing time: Wed 13 May 2026 00:32:33 +0000
Manifest this update: Wed 13 May 2026 00:32:32 +0000
Manifest next update: Wed 20 May 2026 00:32:32 +0000
Files and hashes: 1: VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl (hash: xlRjxX6/yhLEmWZHUJiUilx7QIlyuRVaaXcGe0/Zflo=)
2: 2A22D2FCB6CB11ECA43EEE87C4F9AE02.roa (hash: 84Ty7wcmoehSksw6QkgqM/3dAcuuvgPeVakKxHJDpTI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1040 (0x410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6F2B, serialNumber=5638CB1E26D1199DABE8B8C7ED22B03C4CE8C80A
Validity
Not Before: May 13 00:32:32 2026 GMT
Not After : May 20 00:32:32 2026 GMT
Subject: CN=6a03c6a0-d918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:ff:a6:2f:fd:2e:ce:27:2d:cf:1a:d2:72:
7e:82:08:24:50:b0:f5:06:db:5b:a3:fc:e6:88:4f:
b7:d5:98:94:cb:83:68:e4:7c:aa:f4:e8:ea:c9:31:
94:2d:68:09:82:a4:a1:d9:74:07:56:ee:a1:6b:02:
18:21:dc:7c:d3:06:5b:96:e1:d2:18:c4:b2:f2:36:
46:9b:c7:bb:d6:5e:00:2e:c1:4a:88:d9:5e:c7:39:
aa:b9:af:88:35:54:b8:5a:f8:1e:81:35:89:66:a9:
5a:69:6c:07:61:aa:40:a7:9e:ee:df:2c:72:f1:fd:
b0:0f:0c:53:74:73:7f:60:90:11:d5:2a:e2:58:19:
e0:72:ec:87:e7:d7:88:d4:68:45:58:e1:a9:83:88:
78:96:e2:b5:3e:6b:2d:5d:cd:72:df:4b:cd:d6:a1:
ab:f4:19:be:2a:01:48:ec:24:2f:38:34:81:b6:6f:
73:9f:13:2f:e0:64:0f:e7:17:48:d4:5b:ea:88:3c:
5b:d9:21:6b:fa:33:da:77:f1:74:40:68:21:45:4c:
e7:de:93:87:f0:da:16:86:c7:ef:6a:98:1d:f3:5d:
06:58:24:cf:7f:23:c6:88:25:71:1b:04:08:11:36:
1f:7c:ff:b6:6f:83:9a:73:97:8f:33:a5:48:c3:9a:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:D1:06:5B:3D:75:0F:E0:AB:D4:AC:E2:CD:AB:3F:54:8E:95:BA
X509v3 Authority Key Identifier:
keyid:56:38:CB:1E:26:D1:19:9D:AB:E8:B8:C7:ED:22:B0:3C:4C:E8:C8:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VjjLHibRGZ2r6LjH7SKwPEzoyAo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F2B/33866766B6C911EC89BDC687C4F9AE02/VjjLHibRGZ2r6LjH7SKwPEzoyAo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:6a:80:22:f6:76:a2:d3:3a:54:ba:eb:3a:35:c6:01:02:18:
e2:c6:1e:00:24:c3:11:00:1d:1b:05:af:c3:c9:1f:53:e8:3d:
40:3c:ab:1a:1e:07:55:91:2a:28:ee:c9:36:7a:b2:f0:7a:7c:
e8:46:62:53:25:f4:4f:ff:07:03:99:ed:bd:53:8e:0f:bc:70:
79:73:da:7e:27:dd:a6:4a:96:d6:f5:5e:d2:01:0d:4c:17:8e:
0c:41:c3:1d:f8:dd:20:b9:f8:54:69:e0:1b:fa:12:ac:66:4a:
f9:a1:4a:4f:ca:19:59:50:d1:3c:30:a8:d3:ae:26:c0:cb:ca:
9a:54:19:3a:c6:30:99:c1:64:da:5b:31:21:66:cb:c2:3b:fc:
a0:67:0f:27:15:eb:82:cd:86:9b:ce:70:17:77:cb:26:c2:22:
2d:6b:2e:de:f1:ce:2a:cd:2d:9a:3e:e8:ab:54:ae:81:ec:11:
f9:25:79:3d:b1:3b:5b:33:dd:5f:e2:b9:1e:91:94:77:d4:47:
ec:e8:bc:60:a9:11:1d:4d:d9:51:36:d9:27:4e:98:69:4b:a6:
7a:cf:bf:a8:ce:85:5a:01:ac:cd:dd:33:c2:0f:b1:cc:c1:b3:
45:5e:e9:56:a7:54:4e:fb:f4:1a:f6:e3:2f:29:18:6c:48:b0:
03:f1:2d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:18 2026 by rpki-client