
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier: aKcKfsSDyqG2/+D0QmfKASPES+vpoYalNyOpq6oHCo8=
Subject key identifier: E2:4A:22:5F:F3:F3:20:3A:A0:1E:64:18:C4:17:7B:CA:B1:22:89:5E
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number: 0147
Signing time: Wed 23 Sep 2026 05:09:19 +0000
Manifest this update: Wed 23 Sep 2026 05:09:19 +0000
Manifest next update: Wed 30 Sep 2026 05:09:19 +0000
Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: /vlrNP6m8ZC+KpzXMe49KMWuFDhISD8O0vnbREFPnPg=)
2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: QoSObG+7a268+sX8T2Z5nD2wpsEf/h3WqHnAbvclosE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 05:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Validity
Not Before: Sep 23 05:09:19 2026 GMT
Not After : Sep 30 05:09:19 2026 GMT
Subject: CN=6ab35eff-08ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:42:20:59:bf:47:d7:4b:ef:ac:76:78:c5:a1:
07:bb:9c:cd:5e:8b:c3:5d:6e:b5:4b:39:af:7f:e2:
12:6c:e0:ec:f5:c1:a0:43:f7:d0:4f:0e:33:cd:6b:
1c:a1:86:75:43:14:f1:c7:f3:56:44:e9:ec:ed:21:
00:a4:33:17:6a:3a:29:1b:c0:6d:69:e0:e7:91:bd:
1c:4b:cf:47:0f:88:70:5e:cf:2e:53:de:c0:53:d4:
5d:c6:fe:92:f8:58:83:c4:ec:61:c8:af:f8:1b:1d:
66:71:19:f3:fd:b7:11:17:fd:b7:b4:e1:4f:1c:24:
2e:85:f3:48:e9:3e:63:b6:95:9c:11:91:3f:8e:34:
4e:01:43:0f:65:4e:ce:8b:d7:86:40:d6:26:1e:47:
92:88:48:f6:67:f0:9a:72:39:83:ef:16:db:64:11:
43:6a:ef:48:42:5c:9b:7f:2b:03:2b:94:7e:ee:86:
4b:82:33:3f:71:07:44:27:3f:46:b1:57:cd:8c:3c:
92:18:7d:3c:2c:29:6d:e1:c2:a2:3d:ae:26:15:b0:
71:71:cb:43:90:cb:96:3f:a3:9f:4b:f5:cc:5d:74:
c3:4e:1b:e0:ee:33:5c:c1:51:b5:04:c4:17:df:7a:
34:81:68:ce:c4:2f:63:74:4e:6d:b2:5a:a7:ab:5c:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4A:22:5F:F3:F3:20:3A:A0:1E:64:18:C4:17:7B:CA:B1:22:89:5E
X509v3 Authority Key Identifier:
keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:01:bc:d1:5f:3b:93:05:4f:28:df:15:32:bb:22:10:3f:93:
f9:c9:2e:36:19:b6:0e:fa:97:71:5f:b0:0a:ac:9a:44:cd:f2:
f0:a6:da:df:83:d5:d9:20:14:2a:eb:8a:54:f4:cb:c8:76:46:
4d:01:36:3f:4a:77:ba:0b:11:8c:3c:4e:12:05:ee:5a:01:b0:
73:bc:3a:f2:69:9f:94:3c:53:34:e1:7f:29:d3:66:bb:e3:3d:
69:e8:6b:09:bd:43:8a:ec:d4:ec:71:25:7f:f8:d2:1f:bd:c6:
ab:04:96:77:ce:72:0c:c3:41:56:25:3e:8e:43:0e:ae:40:41:
a4:13:68:a0:cf:fb:32:a8:c4:e3:24:53:30:61:ac:b6:24:a2:
c5:4c:89:9f:84:b9:ce:a4:d4:11:7e:ed:1d:38:cc:fc:dd:a1:
ed:a2:a2:9c:d6:ab:2f:b5:6a:31:d6:0a:30:b5:07:85:05:20:
2c:dc:2e:aa:80:70:23:0a:be:2f:ea:a4:fc:70:52:95:b3:d4:
d9:ad:aa:37:7a:5b:cd:9c:8d:60:c0:56:46:51:7a:09:15:4a:
d2:eb:12:2d:c7:7f:f9:75:ea:78:92:7b:3a:33:bc:b3:1c:08:
09:67:a4:1f:25:58:e0:00:2e:c6:0b:ef:e0:97:ef:4e:f3:23:
68:ed:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:58:19 2026 by rpki-client