
$ rpki-client -vvf rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
File: vadiHhrG4FsLoMLvFUF0yL5cE7k.mft (raw, json)
Hash identifier: LUv8RqXdjvZZciQOsBDl+h5mFbYBnekuoQmU9HSWhi8=
Subject key identifier: F6:E4:D5:64:42:ED:BC:08:0D:D7:5D:99:C1:02:2A:85:69:74:26:7F
Authority key identifier: BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
Certificate issuer: /CN=A912885B/serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Certificate serial: 02D3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
Manifest number: 02BF
Signing time: Wed 19 Aug 2026 01:52:21 +0000
Manifest this update: Wed 19 Aug 2026 01:52:21 +0000
Manifest next update: Wed 26 Aug 2026 01:52:21 +0000
Files and hashes: 1: vadiHhrG4FsLoMLvFUF0yL5cE7k.crl (hash: G3Z82aWcRMQWWtoWyhvEZu5uLA+lQq/cqPdACxIuO5I=)
2: A8A932CC894911EE8CA8D26EC4F9AE02.roa (hash: ePfF/CUpcT9AQZe6qaQ1N1RSOdvv3ZT2eXxXmDrwqb8=)
3: 673F4DC6894911EEB032426EC4F9AE02.roa (hash: /+jelo79YovQA7YZplF1xBN2qAqSTGjRE0MBwtFZbrg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:52:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723 (0x2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912885B, serialNumber=BDA7621E1AC6E05B0BA0C2EF154174C8BE5C13B9
Validity
Not Before: Aug 19 01:52:21 2026 GMT
Not After : Aug 26 01:52:21 2026 GMT
Subject: CN=6a850c55-c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:15:ec:27:fc:ff:86:64:87:2e:f1:44:42:ef:
ff:8a:d9:8b:25:1a:c3:dd:34:98:9f:3e:0d:02:5f:
d7:cd:30:d7:e8:ca:48:20:f6:bc:79:7a:ec:ac:f3:
a6:4d:ca:1a:20:c6:08:51:54:74:f4:e0:e0:36:f8:
78:63:5e:f8:3f:d1:12:6a:5f:9f:f3:a6:54:12:c3:
18:96:e7:a8:8c:bd:0f:cc:77:0b:07:8a:0d:d9:0d:
63:9d:12:7d:39:0d:fe:bd:1c:46:03:c5:17:61:83:
be:43:2e:d1:9e:01:51:c3:15:cc:4e:5c:27:d8:bd:
0d:28:da:fc:55:b6:96:96:39:96:d6:11:4f:94:3b:
5f:bd:84:bf:a3:7f:0b:ba:97:b4:e1:1f:9d:3c:7a:
77:82:02:d8:b0:54:a8:f4:1b:0f:a7:a7:34:b8:e2:
69:3b:74:1f:dd:79:11:89:f2:6b:62:70:5b:d0:f3:
ed:37:66:da:ba:95:53:4e:4c:ba:6a:ef:c4:b2:45:
cc:83:6b:43:f2:5b:e3:a7:cf:75:b1:76:dd:73:59:
5d:e1:70:f4:d7:be:18:b5:1d:5a:7d:61:14:46:c9:
23:00:5c:f8:c5:f8:f7:9d:c0:c2:6d:7d:ef:8e:86:
a2:b4:8f:1d:e5:66:37:c1:e1:8c:e2:18:bc:b5:6b:
6c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E4:D5:64:42:ED:BC:08:0D:D7:5D:99:C1:02:2A:85:69:74:26:7F
X509v3 Authority Key Identifier:
keyid:BD:A7:62:1E:1A:C6:E0:5B:0B:A0:C2:EF:15:41:74:C8:BE:5C:13:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vadiHhrG4FsLoMLvFUF0yL5cE7k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912885B/A99C18906C7911ED8CB6BC6BC4F9AE02/vadiHhrG4FsLoMLvFUF0yL5cE7k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:b6:6d:fd:bc:77:2e:32:2d:32:73:3d:41:e9:51:2a:88:
30:0d:e4:fa:b9:cb:ce:ee:ff:37:ef:40:0d:bf:32:12:a4:da:
28:bc:23:24:0a:97:70:42:ac:d8:36:29:5b:36:f6:a4:69:8a:
a6:2b:43:d8:53:7d:67:1b:40:e5:4f:1b:56:53:6b:47:b7:44:
77:23:c2:fb:fa:c4:12:e3:e9:b6:e9:2d:c1:5d:d9:7b:3f:4e:
26:cc:ae:60:50:e0:f2:1d:26:c0:9a:e3:6c:f1:8f:67:60:9c:
51:b5:f5:4d:91:4e:0e:4d:67:72:1b:3e:bf:8c:58:50:2a:51:
a6:f4:70:a4:12:6d:23:d1:81:90:1a:ec:f9:1d:0a:45:8c:ad:
76:fe:21:5f:01:47:77:91:cf:1b:b9:e1:24:82:a7:9d:43:e1:
75:1f:19:e3:60:88:6d:34:87:ad:85:db:4c:ae:31:a1:78:e7:
c4:c1:56:cb:39:75:55:4a:a8:76:90:80:20:f9:ad:5c:da:cc:
3f:f9:2f:0e:7c:16:2f:4e:1e:2d:8e:51:5e:6e:4b:cd:bd:82:
61:6e:1e:7b:1a:b0:a2:7b:85:63:20:63:f7:b8:19:c2:58:64:
49:32:53:91:8e:fb:75:40:19:28:b1:eb:3e:df:61:62:0e:d0:
d5:40:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:29 2026 by rpki-client