
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: 79bnxJH2yQTrXJBQbHetICc+vYM0FjjZPEa73WzjQgw=
Subject key identifier: B0:2D:68:E9:52:F1:C5:60:FC:4B:8E:28:D5:56:D3:C3:0E:30:55:3E
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 1126
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 10DD
Signing time: Fri 12 Jun 2026 17:16:55 +0000
Manifest this update: Fri 12 Jun 2026 17:16:54 +0000
Manifest next update: Fri 19 Jun 2026 17:16:54 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: dKCjCR4+paHjVJzUoMdIA9xxbKdOe3kArwhnEGmA3k4=)
2: 3848F884F23311EE97946A35C4F9AE02.roa (hash: iLTm1oru1pBo+aA4NVsRCbbmKUmROroBew15v4NmRQY=)
3: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 04JIhOgeUPt5qMEq9+42uBTRgwhR8wzDVRX5FbEh3wA=)
4: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: 3/voHj4jHKfuqihLM62Y/5qIYqF3rvS4lIjjd/S2Lmw=)
5: 5E46267A46B111E98B793856C4F9AE02.roa (hash: yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=)
6: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: /AeqF+peYjngSTIf+T9WoCZ55bAwGRELlp7tryj0tdI=)
7: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: SwLY0AF1xggMZuymN/EMAtTFPl3Iavmcav7HLQApbQo=)
8: 6007188446B111E98B793856C4F9AE02.roa (hash: HQ5O+9mRfxlZe018Fv7FZowJEc9rSkkY86rQQbccY7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 17:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4390 (0x1126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Jun 12 17:16:54 2026 GMT
Not After : Jun 19 17:16:54 2026 GMT
Subject: CN=6a2c3f07-be01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:89:3b:c6:8a:67:4f:1a:29:c2:87:4f:05:
d6:7c:43:ba:ef:8f:c8:c9:8f:9b:fe:41:f0:bc:3b:
b2:01:2e:76:7b:22:b5:db:2a:3f:fb:61:bb:be:64:
28:d1:33:ab:e3:61:73:5c:75:7c:6e:c6:9d:38:a0:
68:d4:82:12:d9:2b:5d:69:58:be:86:b2:7b:ba:a3:
53:4e:cc:8f:bc:6c:3b:4d:e3:3e:64:a5:fe:0b:ad:
f7:e7:d3:c7:da:ce:93:9d:fe:39:8b:bb:43:52:eb:
b6:5c:fd:07:ed:bb:54:7d:ee:db:cc:60:63:e9:71:
50:9d:d5:42:7b:70:7b:6b:ba:ca:a1:1b:b1:6d:c3:
c8:4e:a6:12:45:20:35:b5:99:45:b3:58:4d:30:5c:
be:f5:07:76:95:e6:53:ae:43:ad:77:05:c8:4e:4f:
c3:a9:2d:1d:bb:0f:08:db:28:da:85:85:e1:3d:80:
4f:c4:ae:ef:c1:98:df:f5:ce:d2:a8:db:02:1f:20:
5b:7c:5c:0e:78:6a:19:8c:b2:70:6a:02:96:4d:d4:
ed:f3:32:42:0f:5f:c5:7e:5d:47:4e:df:5a:d1:e1:
48:c9:47:27:af:6e:1e:10:6a:5a:86:d1:2e:08:f5:
3f:d0:a6:b5:6c:32:19:86:68:85:83:9b:48:f3:88:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:68:E9:52:F1:C5:60:FC:4B:8E:28:D5:56:D3:C3:0E:30:55:3E
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f5:c6:bd:4a:68:f2:f3:53:3f:94:68:af:42:21:1b:70:a8:
ec:45:60:2c:7b:df:71:b4:ad:7d:f7:f0:fa:a2:4f:05:3d:76:
c8:f8:e5:f7:eb:f1:84:79:1c:45:65:ed:78:aa:f0:1b:c4:27:
63:a3:a4:e3:86:45:6b:ed:5d:3d:ca:4b:63:c3:05:2c:fb:49:
5f:f1:5b:b2:12:af:74:39:62:8a:eb:72:c6:14:13:b4:f7:04:
d3:be:42:ad:ca:ee:0b:c5:6e:7f:ce:02:2f:1f:0c:c5:98:97:
0f:80:4f:6f:6d:45:2a:a5:d9:40:18:d1:2d:af:18:99:24:86:
51:a1:0f:3c:9a:31:3b:b1:39:bd:ee:9d:10:08:a4:2d:b5:ea:
65:31:f2:79:da:10:2c:31:a9:27:c1:cc:8c:b0:f4:70:e2:00:
1f:12:f8:e0:5b:39:bf:6f:40:1d:8f:ad:d4:57:be:80:23:16:
ae:86:af:dc:1b:13:b6:ab:34:bb:57:1e:9d:bb:26:fa:41:5d:
32:84:93:c1:d8:31:3d:88:cd:49:e1:ff:bd:37:de:6f:a5:c7:
83:0e:44:8d:d8:82:d5:c6:99:88:a3:3c:ff:d8:39:1f:94:9f:
84:a9:d7:6a:53:fb:a6:5f:6b:74:b6:19:6e:06:1d:2d:f5:25:
e8:32:bf:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:51 2026 by rpki-client