
$ rpki-client -vvf rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
File: vBeIK_xKhjChu_avBlGLkLpNFoo.mft (raw, json)
Hash identifier: 8piZOl4ijY2vOrATYlAczIy+stRj/QvVmRktmA+bsdA=
Subject key identifier: 41:7F:F7:17:01:CC:FF:1B:BD:85:4C:05:0E:26:1F:3A:65:9A:55:A1
Authority key identifier: BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
Certificate issuer: /CN=A912FDDD/serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Certificate serial: 01DF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
Manifest number: 01DA
Signing time: Mon 27 Jul 2026 05:12:42 +0000
Manifest this update: Mon 27 Jul 2026 05:12:42 +0000
Manifest next update: Mon 03 Aug 2026 05:12:42 +0000
Files and hashes: 1: vBeIK_xKhjChu_avBlGLkLpNFoo.crl (hash: YURcGVzcC5+qXSwfFPpRJyXxb8/PDZ/+QpTDb6TMAPE=)
2: 744F6602B5B511EEACE32B4DC4F9AE02.roa (hash: 2Lw/zrNhfXPZUVb6tJNCIUuOt97MTrdaQiGSvEdRrSg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912FDDD, serialNumber=BC17882BFC4A8630A1BBF6AF06518B90BA4D168A
Validity
Not Before: Jul 27 05:12:42 2026 GMT
Not After : Aug 3 05:12:42 2026 GMT
Subject: CN=6a66e8ca-9566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:bc:c6:23:29:d6:eb:0c:c0:0f:fd:cd:63:
18:fb:e9:9b:76:b0:06:06:da:df:a1:18:e7:62:21:
41:6d:15:df:fa:cc:60:ca:dc:24:27:ad:67:d0:a5:
36:5a:9d:52:d1:99:10:17:c2:73:32:09:75:52:92:
08:7c:54:fd:7e:dd:fc:d6:04:a5:22:09:c3:5b:99:
d4:ae:7f:c5:f9:3c:c9:a8:10:0a:c2:41:a0:f9:3f:
8e:4a:35:20:9e:20:78:4f:6b:ed:c4:a2:12:93:79:
ae:ea:ca:c5:53:9d:33:56:7f:1b:bd:dd:a5:46:aa:
62:69:a1:9f:0a:0e:34:79:27:d0:b3:fa:6a:41:f1:
93:4d:d8:81:34:46:a8:d5:22:33:5c:94:b6:94:ef:
bf:58:67:e8:62:a5:5b:7e:5f:fd:2a:04:96:91:a6:
d2:14:a8:84:8b:bc:06:3f:fb:54:85:a9:ae:0d:77:
6b:d4:2c:8c:02:a4:4e:a4:d1:6e:ec:ce:e6:4e:72:
0e:4f:da:86:fa:67:0b:c7:1a:77:d1:75:8e:16:a2:
00:ff:0a:f6:87:da:74:86:60:6d:0d:ac:cd:4c:17:
81:fa:13:62:44:35:9f:cd:bb:fb:93:89:da:75:71:
27:9a:12:99:46:94:9c:e6:93:47:6f:ad:99:5a:dd:
06:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:7F:F7:17:01:CC:FF:1B:BD:85:4C:05:0E:26:1F:3A:65:9A:55:A1
X509v3 Authority Key Identifier:
keyid:BC:17:88:2B:FC:4A:86:30:A1:BB:F6:AF:06:51:8B:90:BA:4D:16:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vBeIK_xKhjChu_avBlGLkLpNFoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FDDD/ECDEA1F6B5B411EEB7E70C4CC4F9AE02/vBeIK_xKhjChu_avBlGLkLpNFoo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:45:d4:38:01:45:2f:96:12:48:8b:6c:42:cb:8a:82:f5:45:
4e:ae:88:e5:51:da:d5:88:28:3f:81:13:73:0b:3c:1e:fa:8e:
1e:e1:0f:c2:31:64:1e:b4:02:5f:6e:4c:69:21:34:0d:57:4d:
05:df:a4:9b:87:8a:f9:3e:4e:28:18:e0:9c:3d:79:f1:7a:f0:
d4:2f:66:a8:8c:e2:81:7a:c9:5b:dd:fa:c9:62:64:a6:6e:32:
b1:9a:19:b9:28:6b:55:71:dc:20:f0:0f:5f:17:05:d8:58:9b:
e3:3b:33:30:3f:9d:f7:d9:22:96:f6:50:a4:1d:50:29:fe:c9:
de:66:41:a6:97:d1:8d:c7:3c:dc:83:0f:46:f8:9b:6d:e4:06:
d8:f8:e1:81:c9:b7:a1:b8:16:19:f7:5b:a1:a5:bf:b2:52:aa:
f0:e6:80:99:3f:6a:f8:cc:8b:4d:81:dc:d5:c3:7d:55:0d:e2:
9d:8f:b8:5a:6f:8b:ee:06:d5:74:89:a2:0f:11:f6:20:03:08:
7b:62:73:ca:d3:17:2a:d1:bd:5f:aa:48:33:0d:7c:10:27:76:
1d:00:c2:bd:7c:9b:38:c2:96:c3:6e:44:20:61:d5:ba:66:7f:
9a:9b:52:b1:d8:dd:d4:26:d6:c9:7c:07:86:ea:f6:1c:c8:b2:
53:2b:68:b7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZEREQxMTAvBgNVBAUTKEJDMTc4ODJCRkM0QTg2MzBBMUJCRjZBRjA2NTE4Qjkw
QkE0RDE2OEEwHhcNMjYwNzI3MDUxMjQyWhcNMjYwODAzMDUxMjQyWjAYMRYwFAYD
VQQDEw02YTY2ZThjYS05NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1Ra8xiMp1usMwA/9zWMY++mbdrAGBtrfoRjnYiFBbRXf+sxgytwkJ61n0KU2
Wp1S0ZkQF8JzMgl1UpIIfFT9ft381gSlIgnDW5nUrn/F+TzJqBAKwkGg+T+OSjUg
niB4T2vtxKISk3mu6srFU50zVn8bvd2lRqpiaaGfCg40eSfQs/pqQfGTTdiBNEao
1SIzXJS2lO+/WGfoYqVbfl/9KgSWkabSFKiEi7wGP/tUhamuDXdr1CyMAqROpNFu
7M7mTnIOT9qG+mcLxxp30XWOFqIA/wr2h9p0hmBtDazNTBeB+hNiRDWfzbv7k4na
dXEnmhKZRpSc5pNHb62ZWt0GmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEF/9xcB
zP8bvYVMBQ4mHzplmlWhMB8GA1UdIwQYMBaAFLwXiCv8SoYwobv2rwZRi5C6TRaK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkRERC9FQ0RFQTFGNkI1
QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hqQ2h1X2F2QmxHTGtMcE5G
b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZCZUlLX3hLaGpDaHVfYXZCbEdMa0xwTkZvby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkRERC9FQ0RFQTFGNkI1QjQxMUVFQjdFNzBDNENDNEY5QUUwMi92QmVJS194S2hq
Q2h1X2F2QmxHTGtMcE5Gb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn0XUOAFFL5YSSItsQsuKgvVFTq6I5VHa1YgoP4ETcws8HvqOHuEPwjFkHrQC
X25MaSE0DVdNBd+km4eK+T5OKBjgnD158Xrw1C9mqIzigXrJW936yWJkpm4ysZoZ
uShrVXHcIPAPXxcF2Fib4zszMD+d99kilvZQpB1QKf7J3mZBppfRjcc83IMPRvib
beQG2Pjhgcm3obgWGfdboaW/slKq8OaAmT9q+MyLTYHc1cN9VQ3inY+4Wm+L7gbV
dImiDxH2IAMIe2JzytMXKtG9X6pIMw18ECd2HQDCvXybOMKWw25EIGHVumZ/mptS
sdjd1CbWyXwHhur2HMiyUytotw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:14 2026 by rpki-client