
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
File: vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft (raw, json)
Hash identifier: EH9doB57/PaLAQV2IeEzWSeb6zz1k9g5+m0pAQ9Lo58=
Subject key identifier: A6:4F:D8:80:C8:06:A4:54:21:2A:34:30:A1:7D:03:83:38:58:41:EB
Authority key identifier: BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
Certificate issuer: /CN=A917FFCC/serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
Manifest number: 26
Signing time: Wed 13 May 2026 08:55:29 +0000
Manifest this update: Wed 13 May 2026 08:55:29 +0000
Manifest next update: Wed 20 May 2026 08:55:29 +0000
Files and hashes: 1: vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl (hash: fzO0ZxgU5xO7KAUQiK0m6OMBuM7fwUZfrR+AMKc3/vc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl
rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 08:55:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FFCC, serialNumber=BE874F9E6C76FBCB78B14FB70F412A87971FCE48
Validity
Not Before: May 13 08:55:29 2026 GMT
Not After : May 20 08:55:29 2026 GMT
Subject: CN=6a043c81-93ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:bd:ba:6d:83:0c:6c:a1:f0:04:38:66:48:
8e:91:3b:02:94:98:1f:b8:8b:db:4e:5a:85:98:73:
08:ff:ae:b5:23:1a:83:0d:68:dc:63:fe:b3:67:44:
54:1d:79:02:aa:1a:d3:c4:ee:e7:52:5a:99:5c:fe:
80:29:4e:55:9f:19:44:df:85:f7:c4:b8:0a:c6:60:
df:75:ed:0a:61:80:42:52:c2:ac:bf:41:4c:77:3d:
32:1f:22:21:85:bc:6d:ab:2c:cb:1c:22:c9:da:4f:
f9:b7:d2:78:8b:5d:92:32:85:60:8d:69:47:a6:1c:
52:43:56:8f:f4:0a:b9:63:54:fe:7c:b6:d0:f6:4d:
69:4d:ca:0b:b4:7f:27:8c:a3:e7:0f:b7:d6:26:b0:
88:7a:7d:a3:6c:bd:6b:73:7b:be:a2:b9:9d:08:96:
28:f3:b2:77:77:8e:91:c4:50:cf:1b:43:87:49:ec:
4b:dd:ac:ee:e2:ee:a9:56:8f:ad:d2:f0:e4:df:72:
d7:d7:47:26:5b:1a:20:63:31:82:5e:e1:fb:c1:61:
2b:84:80:43:41:04:57:6d:47:91:3e:3b:60:72:5e:
e4:11:1b:6d:20:72:c0:b5:1c:01:40:b6:d4:1b:2b:
20:90:c8:c5:f3:5a:ed:9e:fd:be:68:da:c6:57:a4:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:D8:80:C8:06:A4:54:21:2A:34:30:A1:7D:03:83:38:58:41:EB
X509v3 Authority Key Identifier:
keyid:BE:87:4F:9E:6C:76:FB:CB:78:B1:4F:B7:0F:41:2A:87:97:1F:CE:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vodPnmx2-8t4sU-3D0Eqh5cfzkg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFCC/11C7637816D311F1BAA410C8303D8C67/vodPnmx2-8t4sU-3D0Eqh5cfzkg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d2:47:3c:8b:07:25:82:73:16:03:66:8a:6b:7d:2c:4f:16:
17:66:a0:ad:64:78:59:04:77:3d:49:eb:d5:a7:51:78:39:d2:
0b:85:5f:24:c0:f6:ea:b2:84:c4:7a:84:22:d1:a0:b0:83:5c:
c5:ff:b7:14:75:b8:5b:4d:2c:17:18:62:dd:15:e9:c3:89:1e:
8a:cb:eb:94:48:5f:59:de:13:85:ba:3f:3f:64:e2:6b:4c:4d:
91:05:69:b0:b6:5a:1c:05:ab:82:98:3a:8d:83:f2:32:2e:f2:
e3:6f:60:e4:bd:be:1f:47:ab:aa:53:71:8e:b1:4c:41:b1:54:
29:27:7f:4f:a2:bd:f2:2b:de:fc:8f:c3:0e:9c:7d:ea:0a:f2:
9e:7f:0c:e6:4e:19:1c:ae:6a:d5:42:b9:6e:fe:22:1c:99:55:
56:8e:2e:ff:bd:28:02:83:88:b1:c2:e1:01:99:00:6d:69:db:
9e:90:00:b0:70:55:35:7d:26:7d:c0:95:98:bc:2a:ff:0b:82:
38:5a:42:9f:1e:79:46:c7:1c:f7:8d:d8:84:6b:f6:c4:75:3d:
0d:98:a6:2a:08:95:ed:2c:77:35:ec:06:34:21:d4:fa:a5:e6:
83:79:2f:68:e2:cb:64:31:cf:ab:81:bb:60:79:88:fb:4c:09:
ec:7b:b5:82
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RkZDQzExMC8GA1UEBRMoQkU4NzRGOUU2Qzc2RkJDQjc4QjE0RkI3MEY0MTJBODc5
NzFGQ0U0ODAeFw0yNjA1MTMwODU1MjlaFw0yNjA1MjAwODU1MjlaMBgxFjAUBgNV
BAMTDTZhMDQzYzgxLTkzZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCnC726bYMMbKHwBDhmSI6ROwKUmB+4i9tOWoWYcwj/rrUjGoMNaNxj/rNnRFQd
eQKqGtPE7udSWplc/oApTlWfGUTfhffEuArGYN917QphgEJSwqy/QUx3PTIfIiGF
vG2rLMscIsnaT/m30niLXZIyhWCNaUemHFJDVo/0CrljVP58ttD2TWlNygu0fyeM
o+cPt9YmsIh6faNsvWtze76iuZ0Ilijzsnd3jpHEUM8bQ4dJ7EvdrO7i7qlWj63S
8OTfctfXRyZbGiBjMYJe4fvBYSuEgENBBFdtR5E+O2ByXuQRG20gcsC1HAFAttQb
KyCQyMXzWu2e/b5o2sZXpB6jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpk/YgMgG
pFQhKjQwoX0DgzhYQeswHwYDVR0jBBgwFoAUvodPnmx2+8t4sU+3D0Eqh5cfzkgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRkNDLzExQzc2Mzc4MTZE
MzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0NHNVLTNEMEVxaDVjZnpr
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdm9kUG5teDItOHQ0c1UtM0QwRXFoNWNmemtnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
RkNDLzExQzc2Mzc4MTZEMzExRjFCQUE0MTBDODMwM0Q4QzY3L3ZvZFBubXgyLTh0
NHNVLTNEMEVxaDVjZnprZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCw0kc8iwclgnMWA2aKa30sTxYXZqCtZHhZBHc9SevVp1F4OdILhV8kwPbqsoTE
eoQi0aCwg1zF/7cUdbhbTSwXGGLdFenDiR6Ky+uUSF9Z3hOFuj8/ZOJrTE2RBWmw
tlocBauCmDqNg/IyLvLjb2Dkvb4fR6uqU3GOsUxBsVQpJ39Por3yK978j8MOnH3q
CvKefwzmThkcrmrVQrlu/iIcmVVWji7/vSgCg4ixwuEBmQBtaduekACwcFU1fSZ9
wJWYvCr/C4I4WkKfHnlGxxz3jdiEa/bEdT0NmKYqCJXtLHc17AY0IdT6peaDeS9o
4stkMc+rgbtgeYj7TAnse7WC
-----END CERTIFICATE-----
Generated at Wed May 13 15:48:44 2026 by rpki-client