
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier: nc9akNuGPfIjs0NCZlpbg/NlP/uuR5BlyqToQNto48Q=
Subject key identifier: B8:70:69:86:AB:79:78:71:9E:00:52:CD:F8:E3:48:0F:2D:3B:98:E9
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 026E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number: 0266
Signing time: Sun 01 Mar 2026 02:42:41 +0000
Manifest this update: Sun 01 Mar 2026 02:42:40 +0000
Manifest next update: Sun 08 Mar 2026 02:42:40 +0000
Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: uc9xHcD+/uD5e5oWHYd/KWuLPPrEuyshXbj7Lshqyrg=)
2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: yD2xkxCOsQInx9TqKYdMVD6Ht014JdYjJToJ+6C13nI=)
3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: NpMgHBFk9cRmDwRCI3Qag1+PV5w2sgZ3yh4MiAg4Cs4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 02:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 622 (0x26e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Validity
Not Before: Mar 1 02:42:40 2026 GMT
Not After : Mar 8 02:42:40 2026 GMT
Subject: CN=69a3a7a1-16b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:dd:0b:78:b9:c7:49:73:71:47:cb:cd:c2:
c9:16:41:65:f8:96:7a:c1:63:0a:b5:50:27:08:22:
6c:cc:a5:93:f1:7b:1c:7d:69:57:5c:07:21:fe:db:
6d:f6:9f:eb:75:9a:20:14:d0:37:02:0a:27:27:b7:
da:ee:e3:66:c2:da:72:52:04:34:45:ae:65:0a:59:
c2:a8:1e:2f:a5:c9:fb:49:0b:fd:85:9a:fc:83:80:
fb:51:17:c4:ab:38:ae:2a:ee:1d:19:a9:ab:27:70:
28:4d:1b:dc:ce:50:40:28:66:f4:35:99:b0:34:5b:
e2:2f:be:97:c6:52:fd:25:b6:98:86:99:ed:1e:71:
64:71:f3:48:9e:1e:d0:06:60:24:e5:49:e4:61:ae:
9b:23:0c:b9:0d:61:80:d3:3d:d3:f9:73:df:25:98:
b2:67:9e:a2:96:7e:44:1c:3b:92:e6:81:be:8c:6e:
13:bb:1f:33:ab:7d:0a:bc:45:4c:2d:d7:03:2f:bd:
1f:24:d1:ce:ec:2b:9f:44:bd:4a:7d:99:3e:f4:d2:
63:9a:b3:9c:af:7b:8b:77:8f:be:bd:d0:0c:20:f9:
a7:23:12:2e:d5:8a:b2:3b:9b:b6:76:3e:e5:bc:aa:
31:01:61:49:47:2f:aa:e0:a1:fa:93:3a:9f:0d:8f:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:70:69:86:AB:79:78:71:9E:00:52:CD:F8:E3:48:0F:2D:3B:98:E9
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8c:4d:1d:a4:3c:b2:aa:c4:d2:74:7e:66:ca:fc:09:03:ff:
e7:46:ac:0d:cb:24:fa:48:47:14:03:dd:ca:a3:55:98:2f:6f:
89:7c:9e:19:71:e6:a5:13:5d:a2:97:78:d0:6c:49:52:59:28:
2f:88:6b:1d:c8:3f:b5:db:2f:02:c5:1d:25:50:0c:cc:4a:e2:
76:3a:ba:92:61:98:e0:b0:c4:78:a8:1e:56:61:5a:ad:fc:84:
c8:5b:c6:fc:ed:62:22:ad:05:8a:05:f4:36:f0:6b:f4:06:6b:
e6:be:d0:6f:ae:76:4a:b9:de:3e:f0:89:3f:0c:d4:3d:e1:55:
aa:3a:51:31:20:d0:c4:86:7e:bc:ef:bd:b8:3d:85:15:b6:0a:
54:2a:30:69:f8:5a:22:e7:7a:82:83:5d:c6:a0:24:59:3b:36:
b7:40:8f:8b:c4:f6:ec:ac:08:8a:e4:2b:c7:ae:cf:15:bc:97:
f7:20:90:74:e5:5b:e6:30:02:34:10:57:19:fe:9d:48:b5:86:
0d:23:b7:d3:33:c7:5f:55:53:a2:ed:14:8e:a2:c9:e7:97:ad:
f4:f6:12:93:50:b3:4c:22:d8:71:cc:17:ae:86:5d:de:50:7d:
d9:fe:87:37:09:85:1d:84:b3:30:4c:1c:ac:bf:23:be:b6:66:
58:81:60:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:12 2026 by rpki-client