
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier: nlsQyXA1Baz63immbnhbLfYwOjYcdHw8R9qz63lXBTE=
Subject key identifier: 73:DA:A2:E5:1D:60:1D:9C:B7:64:65:ED:3E:F0:E9:D8:21:91:23:42
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 02B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number: 029D
Signing time: Sat 13 Jun 2026 01:39:46 +0000
Manifest this update: Sat 13 Jun 2026 01:39:45 +0000
Manifest next update: Sat 20 Jun 2026 01:39:45 +0000
Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: Mj+bCrLfmRvJsQd4vXVyOjifmREYFZDkFdmbKbiMuK8=)
2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=)
3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 01:39:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 689 (0x2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Validity
Not Before: Jun 13 01:39:45 2026 GMT
Not After : Jun 20 01:39:45 2026 GMT
Subject: CN=6a2cb4e1-5ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:77:58:25:17:aa:41:3d:55:ce:e4:46:12:6a:
51:23:18:c7:87:76:49:3e:d2:a0:fb:68:e4:f2:32:
35:59:94:65:d4:c8:fb:2a:3c:0a:de:f6:37:4a:0c:
a1:3b:e6:ed:0c:69:a7:aa:94:15:c4:bf:c8:10:7e:
d3:d5:9f:f1:ad:a4:40:72:34:dc:52:3d:d0:10:6b:
3b:f6:5c:0d:2a:5a:9c:c0:02:f2:6e:e8:a1:2d:04:
b0:89:1e:3c:af:e0:02:ee:d8:13:64:cb:db:1c:26:
85:2e:56:8a:4f:6c:26:99:b5:0e:90:75:51:ed:74:
89:c0:c7:a4:2b:5f:04:3f:a4:82:d1:ee:b2:00:51:
02:c2:8d:02:ed:2f:af:e4:17:35:89:dc:ec:e2:2e:
f6:2e:12:1d:4c:7b:07:ec:c9:5f:63:a6:62:af:5d:
00:d2:b8:7c:a5:3d:0d:0d:ea:b9:f6:d5:58:43:8f:
c3:f7:a3:6f:e9:c6:6b:94:7a:76:2e:b7:58:fa:49:
68:14:ed:c2:e7:d5:4f:e7:92:4b:05:b2:09:51:88:
82:96:5e:30:92:fc:2e:01:6d:62:6c:bc:5a:4c:7c:
52:19:17:a2:b0:d6:1a:18:c7:00:eb:7a:26:d8:88:
9c:9f:75:2c:2a:d4:25:4e:7f:c4:cc:69:7f:eb:6a:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DA:A2:E5:1D:60:1D:9C:B7:64:65:ED:3E:F0:E9:D8:21:91:23:42
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fc:fd:08:e6:ee:e8:e4:75:3b:bb:bb:7c:ae:c5:d6:64:fb:
88:c2:13:d1:0e:8b:85:4e:d9:db:eb:f6:6c:3d:b5:e8:c7:cd:
ea:6c:90:b9:2f:c7:40:68:12:7a:5c:78:b2:1b:3b:52:0e:fd:
0e:71:1f:6d:77:9f:81:c2:e0:9e:c7:96:aa:26:40:81:d2:30:
a2:02:d8:fb:fc:fe:92:9c:e6:59:5b:70:86:30:6b:b3:cf:de:
4e:f6:b0:df:02:61:96:6e:1f:00:b7:3b:eb:40:54:c9:1e:97:
8f:94:30:f9:25:b3:ce:2f:c6:7e:f7:65:4f:0b:b4:87:2d:38:
8d:d7:70:69:33:79:f3:6d:b3:1d:dd:9f:a3:e3:d7:f5:7c:50:
25:dd:14:2e:bd:cc:21:c6:9d:84:94:b8:86:4d:b0:42:50:ec:
9f:45:67:c1:d5:66:cb:29:3f:bc:76:66:75:b2:7a:d9:c3:8a:
bc:c5:18:b0:42:b3:62:50:b4:ef:12:0c:58:4e:27:2a:2f:b3:
1d:fb:68:6a:aa:1b:d6:1e:83:3e:04:79:e3:fb:56:17:e8:9d:
f4:18:7e:08:14:66:e3:58:68:49:ca:00:36:09:79:1a:1b:a6:
4f:4c:76:d5:6e:33:de:57:00:ed:6b:9e:74:66:8d:9d:ef:9e:
7b:4e:ff:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:31:27 2026 by rpki-client