
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: TE344tN7xLMrbAX6ZsJQQPJ7T+R2oZNoOQkIb4bC7sU=
Subject key identifier: 3D:9D:41:12:F5:F4:70:01:D7:89:6E:3A:59:12:8A:E4:AA:3B:84:FA
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 113D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 10F4
Signing time: Tue 28 Jul 2026 17:23:57 +0000
Manifest this update: Tue 28 Jul 2026 17:23:56 +0000
Manifest next update: Tue 04 Aug 2026 17:23:56 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: Bzz3TOHksqNwMbYawIeVXcPBc8YV0lSsKLM5ysb9sbU=)
2: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: SwLY0AF1xggMZuymN/EMAtTFPl3Iavmcav7HLQApbQo=)
3: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: /AeqF+peYjngSTIf+T9WoCZ55bAwGRELlp7tryj0tdI=)
4: 6007188446B111E98B793856C4F9AE02.roa (hash: HQ5O+9mRfxlZe018Fv7FZowJEc9rSkkY86rQQbccY7k=)
5: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 04JIhOgeUPt5qMEq9+42uBTRgwhR8wzDVRX5FbEh3wA=)
6: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: 3/voHj4jHKfuqihLM62Y/5qIYqF3rvS4lIjjd/S2Lmw=)
7: 5E46267A46B111E98B793856C4F9AE02.roa (hash: yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=)
8: 3848F884F23311EE97946A35C4F9AE02.roa (hash: iLTm1oru1pBo+aA4NVsRCbbmKUmROroBew15v4NmRQY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4413 (0x113d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Jul 28 17:23:56 2026 GMT
Not After : Aug 4 17:23:56 2026 GMT
Subject: CN=6a68e5ad-e875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:e8:df:04:53:c8:2c:94:33:63:50:89:94:
4c:d3:f4:1a:08:3d:bd:15:9d:bb:9b:1f:6b:60:56:
ae:be:6c:f8:53:a7:50:a5:c2:4b:86:59:32:61:7b:
5b:92:7e:59:a2:e0:db:e5:62:24:20:bf:29:ef:c8:
ed:1e:c2:52:02:d7:b1:14:6c:03:ee:5f:2d:fd:55:
95:93:7b:ec:c9:c9:7c:a0:b4:ca:49:5d:6f:74:4e:
3c:66:c6:65:47:e6:94:9c:d2:3a:0f:b2:a7:a6:07:
4a:f5:cc:e0:79:1b:1a:5f:06:0b:cb:de:25:0d:ab:
61:58:2b:1c:40:23:d3:dd:c2:60:08:bc:e3:6e:7b:
5c:21:b0:cd:4e:0d:f9:8b:d6:30:c9:3f:40:df:cd:
fd:d2:96:d5:cc:3d:d2:fb:c2:61:76:c6:6b:a6:e5:
5b:f0:28:63:44:22:67:90:71:00:97:65:ca:3a:28:
b7:4b:f1:b5:02:ec:6c:23:32:10:e7:4f:79:ba:e9:
d7:98:87:37:79:36:f7:24:6c:47:7c:89:34:0b:27:
72:ed:a5:6a:2d:2e:d0:ff:3a:7d:d8:d0:7c:62:af:
49:e2:a8:99:f6:f0:91:2a:81:95:76:7d:99:e2:1d:
12:8b:af:5c:d0:11:60:61:f9:4b:39:d2:9d:bc:71:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:41:12:F5:F4:70:01:D7:89:6E:3A:59:12:8A:E4:AA:3B:84:FA
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:41:31:9a:3d:80:49:13:e2:83:9a:35:99:b0:f1:b3:9e:19:
23:aa:b5:cd:1a:40:dd:63:33:63:f0:18:ab:c4:e9:55:90:9e:
d6:30:6c:84:d8:e8:3a:bf:16:e3:c5:de:33:b3:ac:fe:eb:12:
2b:2c:8d:c3:28:41:97:7c:8f:c2:c2:ca:d5:8c:e3:c8:5e:26:
e1:63:4c:7d:f1:bc:76:ce:67:ac:d4:8d:7f:4d:b7:95:d0:e7:
42:e7:9b:0d:7d:f6:19:84:9e:31:13:59:b4:e9:c2:12:93:3e:
d3:98:45:6a:cf:4e:f0:6a:0a:81:28:68:67:96:9f:f0:8a:a8:
88:18:3d:1a:f3:98:dc:c0:05:c9:38:c9:86:ef:49:f8:54:27:
34:66:9a:4b:f9:c9:c6:f7:66:83:cd:10:f8:02:5b:2d:c9:7a:
37:6c:12:7d:f0:d2:4e:24:ba:c8:68:55:6c:12:b8:58:35:c8:
61:36:31:b1:b1:09:7f:9f:c2:78:5a:d2:76:6f:9b:3b:4f:03:
be:21:11:83:a8:91:51:c6:3d:1a:c5:a1:ff:ad:e5:4d:0b:47:
dd:ec:2d:55:33:1e:b0:16:17:69:f2:90:39:bc:11:7d:af:70:
1a:22:03:fd:d7:ce:c5:07:af:ed:0d:e4:38:78:d8:08:a8:59:
97:04:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:19:42 2026 by rpki-client