
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
File: vj-L34G2a07S4cdOtdX7AbX3dkE.mft (raw, json)
Hash identifier: 4xpje4Jzko37xdTekM6qQFj8odmEuPil7PM31wvIoSg=
Subject key identifier: BA:65:B5:DD:53:CB:B9:A1:F3:C2:38:56:D0:55:1B:AA:E4:F7:EB:0A
Authority key identifier: BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
Certificate issuer: /CN=A911DE88/serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Certificate serial: 02D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
Manifest number: 02B2
Signing time: Sat 03 Oct 2026 02:15:15 +0000
Manifest this update: Sat 03 Oct 2026 02:15:14 +0000
Manifest next update: Sat 10 Oct 2026 02:15:14 +0000
Files and hashes: 1: vj-L34G2a07S4cdOtdX7AbX3dkE.crl (hash: n5M1TeiUqnCCrNCuAzUOHTGpEY4oZKOzem0ph3tFqJs=)
2: F6732580607111EF9102BD19C4F9AE02.roa (hash: y6LTY6At2azJhcbijXp71mtrcDyUBBj9hC3aLUCZvo0=)
3: 3D5EC616694B11EFABF9221EC4F9AE02.roa (hash: E4M2glENp14yC8XqERK+K5RnK+5kQXHvoIyYZ3+OkHg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 10 Oct 2026 02:15:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DE88, serialNumber=BE3F8BDF81B66B4ED2E1C74EB5D5FB01B5F77641
Validity
Not Before: Oct 3 02:15:14 2026 GMT
Not After : Oct 10 02:15:14 2026 GMT
Subject: CN=6ac06532-0f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f5:cf:01:96:92:6c:6d:0c:86:96:8e:e2:22:
97:4f:a6:3e:32:b8:47:df:c9:17:6c:f9:fa:66:d2:
95:dc:de:a6:ae:3e:e2:7d:bf:e3:fb:7a:a0:53:3a:
2c:ee:8c:ae:9b:33:99:d4:46:16:a0:3a:e9:8c:59:
35:ac:8e:83:2d:41:e7:d2:5d:7f:63:b4:af:12:fb:
ab:33:4a:b6:0f:5f:d4:54:3e:05:85:78:e1:09:39:
1d:15:0d:20:1f:ce:67:2d:68:32:6c:70:40:15:6a:
7f:45:fa:4a:12:c1:73:f5:fb:5b:77:6d:a0:09:32:
5e:63:c5:8f:9f:59:f4:62:08:22:c7:ba:5b:36:a5:
a0:1f:f0:93:69:c7:af:b7:65:5e:8b:74:04:45:b9:
23:8d:c9:10:67:5c:f3:13:5c:88:aa:e8:1b:41:e4:
06:cf:49:4f:5a:d1:52:66:96:31:bd:6c:04:bc:6d:
2f:0e:13:38:91:58:e2:b5:31:0e:4c:55:b0:b6:b6:
ba:1a:ca:77:3b:4c:0f:c3:ee:e6:92:9c:3a:f7:2e:
16:6d:5c:3e:a3:c4:93:02:fb:9b:66:82:73:8d:08:
3e:32:45:9b:f6:b2:44:68:b3:74:df:af:4c:0c:8d:
d2:1a:d4:3b:19:07:00:44:49:34:19:72:5e:d2:af:
c3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:B5:DD:53:CB:B9:A1:F3:C2:38:56:D0:55:1B:AA:E4:F7:EB:0A
X509v3 Authority Key Identifier:
keyid:BE:3F:8B:DF:81:B6:6B:4E:D2:E1:C7:4E:B5:D5:FB:01:B5:F7:76:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vj-L34G2a07S4cdOtdX7AbX3dkE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DE88/4BFCA142C3EE11ED922A1154C4F9AE02/vj-L34G2a07S4cdOtdX7AbX3dkE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:c9:0b:2f:4b:81:58:59:0d:e1:14:06:cd:31:f0:83:ba:
e5:91:c6:8f:75:2b:78:9b:c0:08:03:ea:e2:ae:5f:79:0c:9c:
2b:55:4e:b3:6e:6d:16:b1:cb:78:ea:aa:55:c2:ab:0d:0b:1d:
cc:0e:b2:b1:9e:a9:d5:fc:11:a3:b4:ca:bc:c5:bb:a7:35:38:
69:35:c8:6a:15:76:67:e7:34:84:d1:81:49:84:89:45:55:36:
01:69:8f:6e:33:77:7b:1e:ce:18:54:ce:b0:49:94:03:82:10:
e5:c1:dc:87:14:0a:aa:53:ea:ff:26:84:57:50:e8:49:76:11:
20:c9:2e:9d:ca:81:af:11:54:6a:75:7c:ca:16:38:4f:63:ff:
a5:0d:6e:42:25:7a:21:a8:b7:c1:0c:02:6d:b0:7d:2a:cc:d4:
69:8a:31:52:39:c6:39:04:09:87:56:5f:73:17:6f:d3:6f:f7:
43:2c:2f:21:54:39:83:e7:c7:0e:e4:af:ec:3d:75:f0:8e:00:
ee:c0:a2:bd:5e:89:3f:ae:44:43:87:10:5c:6e:1e:69:9f:3b:
22:8d:d8:6e:05:68:e8:71:f7:0a:b5:8f:61:24:d8:b1:4f:b5:
b2:f0:6c:d8:e6:bd:42:30:38:15:7b:a8:5e:60:a3:6f:d2:f6:
0c:df:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:33 2026 by rpki-client