
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier: WTIAdtm58iL7fift1KV3xhjXoMX9kSdtOtu4UArQ+Jw=
Subject key identifier: 33:7A:1F:31:63:A8:96:7C:79:9F:79:EE:C8:AF:E6:03:1D:04:56:FE
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial: 012E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number: 012A
Signing time: Wed 29 Jul 2026 07:00:17 +0000
Manifest this update: Wed 29 Jul 2026 07:00:16 +0000
Manifest next update: Wed 05 Aug 2026 07:00:16 +0000
Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: nlkV6H7cJ0P8gSotKVaWFvdKPZnS886VQPVjPiQ31fE=)
2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: QoSObG+7a268+sX8T2Z5nD2wpsEf/h3WqHnAbvclosE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 06:58:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302 (0x12e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Validity
Not Before: Jul 29 07:00:16 2026 GMT
Not After : Aug 5 07:00:16 2026 GMT
Subject: CN=6a69a501-d897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:02:78:fd:b4:46:84:ff:5b:3e:08:00:09:92:
f4:36:5d:da:cd:c2:fd:30:d6:e7:4a:f3:f4:7a:e6:
e9:36:cd:1c:74:a0:55:48:42:09:e6:2d:8d:52:8a:
49:73:84:f7:ee:55:f3:0e:a1:5c:89:09:5e:88:f6:
c3:c7:d8:fa:f1:03:1f:1b:e6:d4:e9:81:75:9f:f2:
37:bb:85:fa:6c:16:11:e7:bf:31:33:b4:f7:2c:2d:
51:93:1b:3c:d5:78:a5:4d:54:9c:82:62:af:5d:a8:
b9:39:9c:5b:d3:77:ba:f1:ee:8d:2f:86:ce:f7:6e:
3c:91:cf:39:10:b6:f5:5e:55:22:38:8d:df:f7:4b:
4d:d1:70:33:ce:75:40:5b:9b:e1:5d:55:d1:f6:81:
bd:aa:a8:cd:34:6f:db:0f:57:e3:a4:4d:a2:8f:21:
49:79:e9:f0:9e:b4:69:52:a4:4d:1e:6c:1c:9e:95:
09:d0:c9:bc:1b:a7:c1:c0:1a:88:49:72:42:82:f0:
7a:9f:50:6e:58:82:03:28:d3:c6:53:f5:d3:c4:09:
cd:0b:6d:16:ad:20:6d:c5:30:74:ed:4f:38:09:01:
d5:9f:5e:db:a1:70:e6:c7:b4:14:35:ca:fd:da:f3:
dd:79:c5:e1:7d:23:a9:8b:43:0a:42:b2:08:f8:6e:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:1F:31:63:A8:96:7C:79:9F:79:EE:C8:AF:E6:03:1D:04:56:FE
X509v3 Authority Key Identifier:
keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:47:41:d0:f1:4f:ab:50:2c:b2:63:f1:bd:a4:d1:73:7d:cf:
6c:fc:0e:81:29:4f:9b:f1:76:8c:5f:6c:db:1d:79:b3:6a:4e:
bb:1f:35:f4:6e:64:dd:fb:27:e0:1f:9b:64:39:e4:fe:53:db:
8e:f7:fc:f5:eb:ac:45:c0:2a:fc:1f:b7:2f:d3:8a:bc:37:af:
e0:f8:37:34:33:0b:c4:9c:ba:15:f2:1b:b6:ba:82:60:3f:96:
64:e8:46:42:6d:ef:ea:12:91:fc:c4:25:70:e0:81:c1:ef:ac:
fc:68:f7:07:9d:9d:b1:c0:35:d2:d4:4f:75:2f:fa:8f:0a:3b:
32:b5:e9:c7:fd:04:71:39:c0:a1:74:54:76:1b:d6:f6:29:2c:
19:c8:81:d5:79:2b:04:f2:e5:2e:c5:e3:e5:f3:3c:aa:53:32:
61:a0:f7:77:2d:82:5f:4d:7d:5e:33:15:a0:25:b2:2c:19:99:
95:8d:ad:be:33:82:ec:3d:b1:10:67:d4:47:46:72:c9:83:c3:
2a:65:c8:0b:c8:78:59:53:08:d3:de:c3:af:7c:56:ea:64:76:
52:ec:37:a3:a1:48:66:03:7d:8c:91:03:30:b3:15:67:c8:5e:
ac:1f:72:25:27:55:09:3e:71:a8:07:98:e3:3c:1b:39:30:a8:
45:b4:f9:7c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkYyODExMTAvBgNVBAUTKEJDRDVBQkQ5QzkxQ0ExRTdGMkM0NTU1NzA1QjI5NDA0
RjUwNUJEQzUwHhcNMjYwNzI5MDcwMDE2WhcNMjYwODA1MDcwMDE2WjAYMRYwFAYD
VQQDEw02YTY5YTUwMS1kODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoQJ4/bRGhP9bPggACZL0Nl3azcL9MNbnSvP0eubpNs0cdKBVSEIJ5i2NUopJ
c4T37lXzDqFciQleiPbDx9j68QMfG+bU6YF1n/I3u4X6bBYR578xM7T3LC1Rkxs8
1XilTVScgmKvXai5OZxb03e68e6NL4bO9248kc85ELb1XlUiOI3f90tN0XAzznVA
W5vhXVXR9oG9qqjNNG/bD1fjpE2ijyFJeenwnrRpUqRNHmwcnpUJ0Mm8G6fBwBqI
SXJCgvB6n1BuWIIDKNPGU/XTxAnNC20WrSBtxTB07U84CQHVn17boXDmx7QUNcr9
2vPdecXhfSOpi0MKQrII+G6vJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDN6HzFj
qJZ8eZ957siv5gMdBFb+MB8GA1UdIwQYMBaAFLzVq9nJHKHn8sRVVwWylAT1Bb3F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjI4MS8xMkRFOEE1RUM2
NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi92TldyMmNrY29lZnl4RlZYQmJLVUJQVUZ2
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZOV3IyY2tjb2VmeXhGVlhCYktVQlBVRnZjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjI4MS8xMkRFOEE1RUM2NkUxMUVGQTc4N0Y4NjVDNEY5QUUwMi92TldyMmNrY29l
Znl4RlZYQmJLVUJQVUZ2Y1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa0dB0PFPq1AssmPxvaTRc33PbPwOgSlPm/F2jF9s2x15s2pOux819G5k3fsn
4B+bZDnk/lPbjvf89eusRcAq/B+3L9OKvDev4Pg3NDMLxJy6FfIbtrqCYD+WZOhG
Qm3v6hKR/MQlcOCBwe+s/Gj3B52dscA10tRPdS/6jwo7MrXpx/0EcTnAoXRUdhvW
9iksGciB1XkrBPLlLsXj5fM8qlMyYaD3dy2CX019XjMVoCWyLBmZlY2tvjOC7D2x
EGfUR0ZyyYPDKmXIC8h4WVMI097Dr3xW6mR2Uuw3o6FIZgN9jJEDMLMVZ8herB9y
JSdVCT5xqAeY4zwbOTCoRbT5fA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:16:54 2026 by rpki-client