
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json)
Hash identifier: lDITePuMNXH2ztj/qRuGmWETtmU+nuOMHKuR/6YKkRg=
Subject key identifier: 69:96:AC:3A:E9:9D:98:DF:B2:6B:61:50:37:9C:97:5B:0B:BB:02:C6
Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Certificate serial: 01D7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
Manifest number: 01D1
Signing time: Fri 27 Mar 2026 03:09:14 +0000
Manifest this update: Fri 27 Mar 2026 03:09:13 +0000
Manifest next update: Fri 03 Apr 2026 03:09:13 +0000
Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: xVbWX94fjTMJklhCSmRxHCxhPzk9ArLiOGk+k1AvPqE=)
2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: iThWY1Te53u7qY3P9l4W83gV/0c/JXwrsnbyFaLKk8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:09:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 471 (0x1d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Validity
Not Before: Mar 27 03:09:13 2026 GMT
Not After : Apr 3 03:09:13 2026 GMT
Subject: CN=69c5f4da-b02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ad:e5:59:e5:b4:65:ac:7b:9b:1d:81:66:56:
d4:cb:ee:69:2a:67:b6:85:f7:40:2e:72:e1:dc:fd:
76:8c:4e:81:33:8c:37:43:19:c0:21:ff:b4:9f:dc:
99:e3:16:c4:4b:07:16:d0:d4:3e:14:7f:d2:ac:8a:
e1:a7:5a:ed:e8:64:b6:76:bc:d3:37:4e:ab:21:21:
3c:de:97:25:68:de:ae:e2:c4:5f:bf:a7:0b:da:37:
73:c0:4f:b8:20:dc:22:b8:2b:63:75:d9:35:6e:8e:
d6:46:ad:eb:3a:2c:f9:10:01:66:42:d3:ee:77:11:
40:a2:f7:14:b1:1e:5d:dc:fd:ae:52:7d:35:2e:5a:
85:92:b1:53:1f:7a:68:16:31:11:a9:60:cc:c6:32:
51:2a:28:c1:58:0d:fd:73:f6:02:df:f8:6f:df:27:
12:40:68:d0:c4:9d:94:06:e4:cc:de:20:2a:ac:24:
01:6f:07:2b:9e:3a:c9:91:9f:96:86:c1:dc:2c:bf:
7a:28:98:98:80:ff:29:ea:38:fd:39:43:a0:f3:de:
2f:16:39:33:ca:a0:d5:19:d0:74:71:72:2f:40:a7:
f1:43:75:9b:ca:da:cc:dd:5b:38:e4:f1:e3:74:5e:
07:ce:57:f8:4e:2b:fc:0c:74:63:48:c9:bb:92:d0:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:96:AC:3A:E9:9D:98:DF:B2:6B:61:50:37:9C:97:5B:0B:BB:02:C6
X509v3 Authority Key Identifier:
keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:0e:56:3c:6e:87:15:bb:ad:a3:53:82:04:1e:e5:95:c9:5c:
a0:bb:1a:c5:b7:c3:23:cd:f3:34:18:f2:83:3a:ca:17:a4:7d:
b6:40:79:b5:3f:2e:00:bb:c5:ab:c3:f1:66:82:8d:63:e2:8f:
cb:c6:e8:36:76:2f:8c:36:a8:7e:3f:ca:26:95:05:04:ca:2c:
b5:be:dd:1e:f8:f9:cb:38:d6:6c:95:9d:ea:e5:c6:db:19:dc:
6a:12:1c:1f:af:c4:36:f1:ec:95:e9:ad:0c:c0:08:99:22:f7:
7c:68:00:22:c4:90:66:61:5f:f6:48:64:ef:e8:ec:ae:66:16:
6d:88:2e:a5:7c:13:8c:1c:1a:5b:37:be:7f:c2:57:3d:85:73:
3b:b9:6f:d9:60:a9:e5:9d:e7:8c:7c:0b:94:0c:3f:9f:01:26:
8f:48:fd:dd:12:0d:18:0c:1d:6a:42:dc:32:e7:7b:07:d1:08:
94:5b:fe:6a:3f:6d:cc:41:3d:23:6d:fb:00:9d:7c:ef:bc:4b:
78:a2:54:41:74:98:4d:7e:f5:e3:e4:05:d0:1f:3e:c3:f1:92:
e7:d5:c1:a7:0d:be:a3:85:a5:db:ef:ba:c3:3a:78:7a:eb:34:
06:45:a4:dd:fd:6b:7c:8a:b4:b9:e2:c1:9d:26:39:7e:66:16:
38:6e:01:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:31 2026 by rpki-client