
$ rpki-client -vvvf rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
File: vNWr2ckcoefyxFVXBbKUBPUFvcU.mft (raw, json)
Hash identifier: IKT7IGQx682+1a+dkh98xhM91auZRK/pVO48VET93FM=
Subject key identifier: 81:6D:C3:53:68:8D:39:C6:59:F6:15:DE:3C:5A:4C:37:56:8F:8B:10
Authority key identifier: BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
Certificate issuer: /CN=A912F281/serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Certificate serial: 0157
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
Manifest number: 0153
Signing time: Sat 17 Oct 2026 05:51:54 +0000
Manifest this update: Sat 17 Oct 2026 05:51:53 +0000
Manifest next update: Sat 24 Oct 2026 05:51:53 +0000
Files and hashes: 1: vNWr2ckcoefyxFVXBbKUBPUFvcU.crl (hash: tQ23By0P1xDN2rpP47UeZ3IZ3DRwuuK36Exkddtln0M=)
2: 89EA22F0C67011EFAE929D0DC4F9AE02.roa (hash: QoSObG+7a268+sX8T2Z5nD2wpsEf/h3WqHnAbvclosE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 05:51:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912F281, serialNumber=BCD5ABD9C91CA1E7F2C4555705B29404F505BDC5
Validity
Not Before: Oct 17 05:51:53 2026 GMT
Not After : Oct 24 05:51:53 2026 GMT
Subject: CN=6ad30cfa-fb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:3d:c6:27:34:2a:e8:e8:9b:48:fd:32:73:
71:ba:c1:f9:4b:2b:3e:d5:ec:4e:53:7d:70:86:6f:
66:9a:70:93:9a:c3:84:63:4d:eb:2e:6d:9d:68:1b:
b3:aa:c5:91:fb:5a:58:16:de:0e:a2:94:56:c8:a5:
f2:fb:33:b2:9c:89:a9:96:e8:c3:9b:cf:8b:5d:db:
0c:7c:73:21:f6:1f:da:f7:bb:67:aa:42:6d:30:46:
06:33:5c:2b:36:13:f9:05:37:fa:3a:02:6b:47:57:
a5:bf:a6:11:21:46:83:4c:0b:bf:42:ed:7d:93:c2:
6a:86:93:6a:e6:16:a4:70:1f:ff:77:ba:b3:9b:9b:
67:03:a4:be:b5:65:38:ce:94:40:04:bb:02:cb:5f:
a3:af:c6:54:c9:72:99:16:a0:89:66:b1:7a:84:61:
1d:94:f8:e3:64:38:fe:49:b1:74:b9:ca:84:82:4c:
31:04:95:ce:21:75:cb:b6:dd:bc:e3:4a:91:1f:a3:
63:ff:5e:19:ae:95:bd:72:27:40:2d:5c:58:57:18:
2f:96:53:ec:7a:db:6d:d2:bf:d8:04:01:30:7b:66:
83:16:d8:52:ac:3e:03:3e:27:b8:49:8a:d0:3c:02:
a5:0c:98:fe:29:d3:d2:55:4b:7b:fe:94:aa:6a:94:
d5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6D:C3:53:68:8D:39:C6:59:F6:15:DE:3C:5A:4C:37:56:8F:8B:10
X509v3 Authority Key Identifier:
keyid:BC:D5:AB:D9:C9:1C:A1:E7:F2:C4:55:57:05:B2:94:04:F5:05:BD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vNWr2ckcoefyxFVXBbKUBPUFvcU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F281/12DE8A5EC66E11EFA787F865C4F9AE02/vNWr2ckcoefyxFVXBbKUBPUFvcU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:63:fb:d9:f4:7c:3e:00:28:9e:91:e8:b2:29:be:dd:7c:24:
0b:01:a8:bb:7f:58:04:65:a1:4f:25:5e:7c:aa:af:a8:94:4c:
54:6e:62:a6:cf:71:b3:12:dc:91:5e:d1:81:2b:9d:1d:67:a4:
63:87:e9:2d:ba:76:7e:13:d3:ca:5e:7d:32:d4:fc:50:25:71:
5a:2d:94:aa:38:0c:3e:9d:59:53:f4:a5:0b:77:3a:08:fc:37:
0e:80:f3:13:f0:b6:22:5b:48:0e:2c:96:0a:39:cb:a6:99:34:
a5:fb:59:48:3c:35:17:94:b4:61:b0:14:09:a6:23:81:3c:f5:
82:a2:29:dc:d9:6c:c6:cd:df:cf:36:51:dc:42:e7:6a:a5:29:
26:e2:bc:eb:2c:e6:ed:3b:7a:e6:4b:dc:47:7e:f9:39:bc:3c:
30:10:62:c1:3e:34:58:67:a9:53:b4:e9:0f:6d:33:31:b3:9d:
83:d7:d0:fc:3d:6b:9f:a3:04:03:cc:f1:84:e3:10:48:69:dd:
05:1c:60:c6:18:9f:c3:9c:28:f3:44:cc:65:d3:31:c6:2b:ad:
46:60:01:71:2b:ce:5e:62:fa:16:e1:fd:66:5a:34:75:41:fb:
88:86:de:06:49:66:74:7d:9c:a6:09:5b:21:00:3c:86:2b:2d:
9e:ca:5b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 23:50:44 2026 by rpki-client