
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier: l2YurjgMKf4iYm36m9FmdOwcDQcNiNaHweNeWxdutjs=
Subject key identifier: 66:B0:E1:CC:29:3B:65:29:E1:E6:01:59:B8:C0:B1:A4:ED:68:59:3F
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 02C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number: 02B1
Signing time: Thu 23 Jul 2026 02:32:47 +0000
Manifest this update: Thu 23 Jul 2026 02:32:47 +0000
Manifest next update: Thu 30 Jul 2026 02:32:47 +0000
Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: 2GBtt5fqdQ4WCupAogVIzSjE0vKEozGbVX0mcYwxKmg=)
2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=)
3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Validity
Not Before: Jul 23 02:32:47 2026 GMT
Not After : Jul 30 02:32:47 2026 GMT
Subject: CN=6a617d4f-c593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:76:e2:0b:55:ed:f0:40:6f:93:f3:72:19:
08:e9:18:cd:cd:db:64:9b:88:56:3c:14:13:1e:78:
29:d5:dd:0a:c8:15:de:1d:ad:83:72:24:ac:72:98:
bb:7a:21:ce:6c:4e:28:09:57:db:26:1f:e1:b9:5a:
99:a9:9e:85:88:d3:09:68:aa:c3:6a:c4:59:c9:fd:
e8:0c:06:e6:f5:bb:8c:e1:82:1a:58:b1:8f:6d:a6:
e1:7a:d2:d8:be:a2:e0:6e:19:39:f4:c8:27:c8:78:
e0:a4:7f:d8:64:25:03:19:16:85:55:82:ad:9d:c9:
fc:11:d1:d5:64:df:d4:bd:0e:e1:a7:b5:b3:e5:d4:
eb:26:bf:96:e1:e7:7b:44:8f:dc:e5:a2:23:82:22:
fc:b7:fb:1a:61:d0:46:47:be:33:fe:4a:97:57:32:
f1:dc:38:11:44:40:25:a9:19:bb:8c:90:d7:81:bd:
90:9a:b9:1e:90:04:77:e5:9a:71:4a:72:a4:8d:53:
72:3a:74:1a:af:b1:aa:d7:f0:b0:80:48:e3:6c:24:
ad:2e:34:d5:cf:92:1f:4b:b7:8b:8e:cb:1d:19:cf:
94:6b:36:c7:f7:88:8a:0c:27:ad:f2:a1:3a:17:db:
d7:a7:6b:c6:02:63:ee:23:ef:f6:03:99:f8:ab:01:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B0:E1:CC:29:3B:65:29:E1:E6:01:59:B8:C0:B1:A4:ED:68:59:3F
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:11:44:cd:72:ac:89:4f:fd:09:db:1b:a0:c3:3e:40:69:71:
bb:e3:11:3c:25:21:8b:dd:2d:e5:58:9e:8f:11:39:19:b5:c5:
9a:a4:c7:e3:8d:33:2e:fe:6d:1c:1d:43:db:66:2d:fe:ea:d0:
95:35:ac:ee:31:16:79:6a:2a:2a:1c:33:8a:e2:c5:67:00:db:
f1:17:24:b0:4d:b9:7a:7a:da:dc:99:5c:2a:6d:89:eb:e7:31:
b3:d6:1d:33:95:fc:76:3f:bc:ff:74:df:b0:0d:ac:3e:b4:41:
01:08:14:8d:eb:65:1e:b8:fc:17:93:50:1d:be:bd:1b:63:ee:
1a:9e:80:83:13:97:3e:7f:37:4c:0b:b8:3d:1c:0b:d8:3a:a2:
a9:d5:ba:5b:e2:7e:38:fa:a5:8b:26:45:53:77:c6:16:91:73:
01:54:45:b1:7d:cb:42:6c:a7:14:26:1e:c8:a5:2c:d6:6b:30:
dd:cc:16:60:a5:a0:22:86:fb:59:fc:e3:e6:27:90:f9:3e:dc:
03:82:1e:42:e1:90:23:83:29:dd:79:2c:bd:ed:0e:3a:db:74:
98:6a:b0:79:36:8e:96:c9:e6:b1:d1:41:e6:97:1d:aa:cd:f2:
b7:b2:0a:17:e2:86:7d:11:c0:e5:45:2f:22:c7:0c:f1:be:f4:
ee:2f:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:13 2026 by rpki-client