
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
File: vEIYikinqZ-W1q-yAR59yd7uIqU.mft (raw, json)
Hash identifier: PN1TNNWcFYkSG3fajXm1KFyFcWOayIuXblbPYt2s030=
Subject key identifier: D4:6F:35:6C:64:75:7E:FA:EC:F9:71:E2:01:6C:05:7A:D3:85:CC:F6
Authority key identifier: BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
Certificate issuer: /CN=A91100B2/serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Certificate serial: C9
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
Manifest number: A4
Signing time: Thu 04 Jun 2026 19:28:03 +0000
Manifest this update: Thu 04 Jun 2026 19:28:03 +0000
Manifest next update: Thu 11 Jun 2026 19:28:03 +0000
Files and hashes: 1: vEIYikinqZ-W1q-yAR59yd7uIqU.crl (hash: gxqz2esS+S9HhavS17BX4ZlvDMqxOC+AHAvwiKWrKvQ=)
2: 080C8846CC5911F0900FE21DC4F9AE02.roa (hash: rvXOvOgo+SIEF6wsyCsZeqlYrvJxje0iIj+1Doa9qVg=)
3: 751E0734D06911F0A789BB44C4F9AE02.roa (hash: uBrNsmUWpoNSwdbVMZe1XtXRd1sgkxNz+DTgVX0m83E=)
4: 8E018B30D05611F0A517D12AC4F9AE02.roa (hash: 3o4eLQQgCuvbHfOInmt6QiD6MsZZKAjvEcfPJXshL+g=)
5: 16F6D616F22611F0B93B32AB526F56BC.roa (hash: yFLmYebaUbJ6reKdWdi3DmPew6pd6pI+NJi8cZapaWQ=)
6: 703D5E5CE0D811F0B739A402566F56BC.roa (hash: Dw3fw9EkFFhkI8TxTDIZWIo4dxuyNYLakuInHF+wXwo=)
7: 8CBB3EA2D06911F09735DD48C4F9AE02.roa (hash: TJIpr8Hqwt+6AcFhP4yDkhScWwwfFOLtYVxG8SAKkWo=)
8: 7D795E8AE17911F09A6E23083F6F56BC.roa (hash: X901B9VApyn90CyDDZ0zuwP249Avp4jwYsM3W5Ai2w8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 19:28:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 201 (0xc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91100B2, serialNumber=BC42188A48A7A99F96D6AFB2011E7DC9DEEE22A5
Validity
Not Before: Jun 4 19:28:03 2026 GMT
Not After : Jun 11 19:28:03 2026 GMT
Subject: CN=6a21d1c3-90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:32:c4:b8:e9:8e:84:4b:c7:4a:f8:69:14:
94:3b:e3:33:ec:a3:3e:0a:bd:49:c3:75:50:1b:af:
6a:07:d7:7a:47:a6:e9:6f:6c:c8:e1:a4:b9:81:2a:
25:2b:d8:10:d8:b4:a2:b5:90:a3:db:aa:29:fe:f3:
c4:d2:94:41:aa:91:2f:0f:2b:29:11:c5:87:b1:97:
c2:5b:12:7e:cb:dd:08:6a:65:93:eb:d9:e1:e4:0c:
04:eb:16:e1:39:34:94:48:a5:ef:fa:f2:43:72:ec:
05:c0:8e:e0:60:1d:b1:5e:e4:5c:6d:59:7e:b7:44:
f8:04:51:58:52:59:5c:cc:c7:46:71:4c:7b:8f:ba:
1b:9a:43:e9:f8:0b:ab:5c:6d:f8:e4:95:7e:00:06:
e8:13:2a:1a:08:cc:79:76:2b:20:7f:73:9a:05:cb:
28:80:c3:11:dd:d6:12:e6:d9:31:74:f0:a7:43:3e:
ea:77:ec:93:bd:92:3c:9e:60:29:b2:b2:79:a2:3f:
13:51:30:7e:67:3b:f9:eb:bc:61:1c:05:a8:c0:d5:
d9:e3:9d:24:17:5e:62:0c:2a:d5:58:f6:79:d4:a5:
85:7b:3b:7e:28:2c:a1:e1:71:3f:a9:77:cc:67:53:
b0:fd:51:85:2b:74:3b:dd:d2:56:10:eb:75:86:0f:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6F:35:6C:64:75:7E:FA:EC:F9:71:E2:01:6C:05:7A:D3:85:CC:F6
X509v3 Authority Key Identifier:
keyid:BC:42:18:8A:48:A7:A9:9F:96:D6:AF:B2:01:1E:7D:C9:DE:EE:22:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vEIYikinqZ-W1q-yAR59yd7uIqU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/721F3C9CA61B11F0AC995833C4F9AE02/vEIYikinqZ-W1q-yAR59yd7uIqU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a6:3c:af:af:37:9c:65:c9:b5:7d:e1:7e:a3:17:04:48:35:
b6:e2:1d:15:d6:76:da:d8:41:b3:66:b8:be:40:19:27:2a:28:
a5:98:80:90:53:6d:87:5b:1e:c4:d7:c1:f8:d0:32:ca:c5:9e:
83:94:3b:b8:d5:6c:cd:b6:62:49:51:12:0b:6d:e4:fe:d4:48:
08:d6:05:86:0f:f9:72:90:26:36:9b:f2:fc:37:20:ca:87:05:
d7:10:88:df:34:20:aa:78:48:82:ca:ed:43:db:ba:d3:cf:4f:
93:47:0c:3c:03:f8:fa:3e:02:21:50:0e:5d:0a:37:99:2c:7d:
e5:61:2d:ed:5a:ec:08:e5:4b:e8:83:ac:72:d8:dd:c0:c4:e5:
fe:50:62:be:fd:9f:cf:d7:5c:d6:47:d3:3c:99:60:4f:c7:20:
4f:b8:38:52:e6:58:e1:52:c7:03:0d:9a:9e:8a:7b:f7:ee:1a:
4b:d0:ee:fa:1c:4e:b2:d1:e2:4b:96:f4:98:92:74:3a:23:0b:
ea:cf:7d:d0:bd:fa:61:f1:64:61:dc:ba:21:b8:1d:91:bd:7a:
32:52:85:e3:c6:40:89:03:db:ab:38:35:3e:8a:63:79:e2:91:
a6:72:96:fa:a5:87:76:07:54:a0:39:c9:e3:54:2d:d1:c5:b4:
e1:f0:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:30 2026 by rpki-client