
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
File: Vg3ED_OlCfnv21Jg7huzhi222N8.mft (raw, json)
Hash identifier: 6DNBr3pG1XbdwlJaCQgKAdOmj31UACMBICHiX3gZQto=
Subject key identifier: 89:77:07:3D:21:B4:9E:86:64:F3:53:BE:C2:0D:36:0F:AD:E7:DD:55
Authority key identifier: 56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
Certificate issuer: /CN=A912E926/serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Certificate serial: 0242
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
Manifest number: 023D
Signing time: Sat 13 Jun 2026 02:30:57 +0000
Manifest this update: Sat 13 Jun 2026 02:30:57 +0000
Manifest next update: Sat 20 Jun 2026 02:30:57 +0000
Files and hashes: 1: Vg3ED_OlCfnv21Jg7huzhi222N8.crl (hash: 1r9AxNkFKPB/jHhuYdFCnapo236Ukn1Eo3j4zKLRqww=)
2: 46BF7E7CFA0611ED802A1C29C4F9AE02.roa (hash: UyrWlJ/K5ewEnl3nB2amv545KdOMLbjx4FV1Gagszyg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E926, serialNumber=560DC40FF3A509F9EFDB5260EE1BB3862DB6D8DF
Validity
Not Before: Jun 13 02:30:57 2026 GMT
Not After : Jun 20 02:30:57 2026 GMT
Subject: CN=6a2cc0e1-0f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:64:1c:17:01:cc:12:dc:8b:2c:b3:ec:9c:
29:4a:38:ad:e7:bd:64:e6:0b:8e:c3:0b:a5:87:49:
99:7a:bb:b1:ce:91:d6:b7:02:02:b4:55:65:d9:69:
05:2f:1f:e2:a7:3a:57:55:be:cf:ff:5a:9c:30:8a:
1d:48:99:d4:0e:71:7a:42:bc:bc:90:53:1c:ad:12:
7e:6f:d7:2e:2a:69:85:80:31:4c:e9:30:38:41:ee:
ad:ed:57:d5:7b:55:39:b3:52:98:fd:b9:c6:11:92:
d7:26:6b:11:15:87:db:fc:fd:0a:6d:57:af:9c:da:
00:7c:69:8d:1d:0e:1b:dd:c1:ce:25:e2:5a:b1:fe:
7f:5c:de:9a:31:3d:b7:3f:e5:30:17:71:4a:20:49:
ef:fe:15:7d:7b:28:a6:02:4c:1d:cd:3c:9a:7d:83:
63:52:0a:ed:44:8a:4e:02:23:98:1f:e5:67:14:44:
00:03:e8:67:ab:33:ae:55:06:11:c6:d0:9f:29:45:
f9:36:68:56:dd:0e:aa:d3:f4:3e:99:64:ef:50:d7:
fd:3d:8e:38:11:31:a1:48:be:25:d9:eb:d9:9e:00:
9d:f9:81:e0:2c:01:ed:c4:61:06:1e:34:72:7a:ed:
d1:31:cb:49:92:ee:9c:c7:56:4b:c1:80:88:ac:b1:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:07:3D:21:B4:9E:86:64:F3:53:BE:C2:0D:36:0F:AD:E7:DD:55
X509v3 Authority Key Identifier:
keyid:56:0D:C4:0F:F3:A5:09:F9:EF:DB:52:60:EE:1B:B3:86:2D:B6:D8:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vg3ED_OlCfnv21Jg7huzhi222N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E926/86676DA0FA0111EDBAD75D28C4F9AE02/Vg3ED_OlCfnv21Jg7huzhi222N8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:38:0d:0b:b5:09:5b:f3:10:53:e1:3b:b9:47:86:e3:c7:77:
f9:6f:82:85:4f:a3:a7:0f:a7:93:3b:26:47:c4:95:04:2d:d0:
e5:50:eb:d7:33:17:c2:6c:3a:f5:d4:86:1f:7e:fe:f5:16:e1:
26:4c:d0:e2:68:b0:85:19:27:72:3f:9d:d2:6e:a8:c3:0d:bc:
43:85:eb:ad:b0:7a:2f:6a:6e:33:fa:e7:aa:9d:64:df:74:ae:
19:f5:50:8b:0a:19:90:2d:a8:65:11:f8:21:1e:8b:0f:25:91:
ee:66:29:27:a9:86:d9:a7:22:a6:8f:90:17:aa:ef:30:a9:60:
b4:25:fb:18:b5:76:a8:fd:6d:af:79:7a:24:53:fe:c7:d4:18:
e0:e9:fb:be:2e:a1:2f:e7:1e:48:5c:ee:45:9a:ae:92:64:f4:
09:8f:96:70:7a:c4:09:6e:1c:21:e2:f1:0d:d8:0c:41:e4:5f:
e4:29:e9:12:d2:83:f5:ac:a2:ca:7f:93:ad:bc:c0:58:25:af:
6e:5c:34:14:8d:5b:6c:1c:b0:2a:32:54:60:da:71:64:ba:41:
0e:16:ed:7e:15:3e:17:da:e6:a3:c1:0c:cd:3f:d5:b7:70:06:
88:6f:1c:80:01:74:b2:a8:5d:7d:b9:ed:a6:bd:92:67:30:57:
09:4e:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:32 2026 by rpki-client