
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json)
Hash identifier: qchPI5Bp8ZHroQRPqlvsc0DI5QbfrZm0ifvA7K2WpLI=
Subject key identifier: 8C:7C:80:BF:56:C1:26:85:77:3F:02:8F:45:43:C0:18:47:58:7C:A0
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial: 01FC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
Manifest number: 01F7
Signing time: Mon 21 Sep 2026 03:16:58 +0000
Manifest this update: Mon 21 Sep 2026 03:16:57 +0000
Manifest next update: Mon 28 Sep 2026 03:16:57 +0000
Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: 2nyI/qT2+h49QFRF9TdpE8eGcb3AjfIDj/1PZ0Ki81I=)
2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: 2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Validity
Not Before: Sep 21 03:16:57 2026 GMT
Not After : Sep 28 03:16:57 2026 GMT
Subject: CN=6ab0a1aa-0d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:08:83:9d:dc:61:d9:07:1d:a7:f6:25:1d:
21:24:51:6a:34:db:8a:cc:99:a5:46:bd:f4:d9:cc:
8c:8d:cc:ba:a5:23:cf:17:6e:82:a7:e0:ee:f8:ba:
89:d8:a8:e2:3f:84:b9:a8:3a:84:50:c5:2f:47:52:
75:6d:d5:ee:a1:23:5b:cb:be:60:c1:f8:08:8d:13:
f2:ed:d7:82:2d:53:84:32:71:0c:a4:f3:c2:a3:de:
93:9e:eb:ef:10:47:2b:f7:7d:5c:71:c0:b7:23:54:
fb:55:71:6a:32:01:1c:8d:81:8e:ca:d8:2c:0b:32:
79:d7:a7:e0:19:02:d7:95:92:8a:5a:f7:63:33:41:
83:00:6b:4f:4a:aa:b0:68:cd:30:ae:c6:ab:c6:fa:
de:4c:c2:57:88:00:7f:b9:9b:2c:b1:7c:23:84:75:
08:51:ad:e0:ee:b4:fe:69:77:39:15:a1:e0:23:a2:
94:47:c2:d3:d2:24:b7:30:46:81:53:af:e5:49:4d:
d4:8f:3b:33:95:96:3e:94:8f:af:f7:68:44:c3:0a:
ed:66:02:a2:46:4e:21:04:71:90:64:dd:c0:eb:59:
73:a8:f9:ef:f6:0d:78:2d:2a:68:ad:b3:a6:bf:3f:
e3:91:36:ac:0b:8c:2b:77:f1:1a:eb:0c:e5:27:fa:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7C:80:BF:56:C1:26:85:77:3F:02:8F:45:43:C0:18:47:58:7C:A0
X509v3 Authority Key Identifier:
keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:f8:c0:e1:07:90:55:19:6f:10:db:2a:f5:18:8a:26:6d:aa:
c3:aa:c4:e7:e6:c6:da:b1:79:93:31:e7:e4:1c:77:8d:ab:83:
4b:cf:b5:8d:eb:83:fd:1a:fb:fe:9b:04:50:dc:61:6d:1e:b1:
8c:b5:75:e5:74:a6:c9:11:99:78:38:7d:4b:12:d3:21:8b:5f:
36:92:c0:da:37:c8:94:a6:8e:9e:d3:d5:5c:19:a0:bb:5b:48:
8a:30:aa:43:99:76:d4:7c:cb:8e:9a:5a:ff:a2:35:2a:3b:40:
8f:98:1b:2c:f6:dc:72:ca:c3:3d:27:5f:5a:b4:bb:de:17:ab:
79:b3:80:dc:a8:a5:05:b0:eb:54:24:f4:cf:2d:4f:0f:04:dc:
3e:58:22:e3:26:3d:f1:0d:46:a6:86:b6:5e:22:ea:bd:70:02:
ee:7c:b0:a0:df:68:52:2c:f2:eb:79:23:03:a5:5c:fe:b5:4f:
61:4f:d3:81:f9:91:bc:99:83:bc:bc:7e:d7:08:02:00:1d:17:
8e:8d:d3:da:c9:f6:91:de:60:81:f2:6c:77:b5:b5:16:89:d4:
17:ce:10:b1:c3:41:a4:f8:68:c9:32:88:92:37:69:1f:15:3e:
c9:e6:bb:df:d4:6e:a7:6a:4b:48:13:69:a9:c6:93:d5:06:80:
6a:fe:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:35:56 2026 by rpki-client