
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json)
Hash identifier: 6beM29E0mu3DzpgIYDPM2rGFPpAQza83AFDN7cYdl04=
Subject key identifier: 5F:22:8E:69:A0:BC:86:EC:8D:F5:3E:69:2C:A4:92:94:DE:CC:19:02
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
Manifest number: 01CC
Signing time: Wed 23 Sep 2026 03:35:43 +0000
Manifest this update: Wed 23 Sep 2026 03:35:43 +0000
Manifest next update: Wed 30 Sep 2026 03:35:43 +0000
Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: 8Bk0YP+p34mj+DO9VN1jzTn4y/UmxxqXciQuvr3eyNc=)
2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: /m0o2RYXlVzJfDGAuvr1e/kZrSjtpAFdFgupCqbwiOo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Validity
Not Before: Sep 23 03:35:43 2026 GMT
Not After : Sep 30 03:35:43 2026 GMT
Subject: CN=6ab3490f-741b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:ab:62:82:91:f7:3b:83:22:bd:36:3c:b6:
ab:17:b3:71:81:f3:ec:0d:51:80:06:63:84:60:53:
da:d8:3d:77:81:ab:61:7a:7e:b7:1d:ea:f7:af:a5:
8f:4d:cc:18:f3:9b:00:f4:ae:83:45:d8:18:0a:85:
67:36:55:79:da:38:5e:ef:29:0c:4b:b4:be:0a:f8:
48:87:8c:f0:df:e6:de:24:f7:18:ef:14:be:97:e0:
6f:1b:64:53:15:5e:73:00:69:d6:0f:0a:c6:62:e6:
b2:fb:a9:58:74:87:6d:af:8c:eb:23:98:5b:c4:40:
ec:de:ef:92:3e:5f:4d:77:27:15:ba:a6:13:bb:28:
a0:17:87:0a:7c:6e:30:4d:f8:e3:dd:17:ee:e3:30:
71:20:a6:54:5b:07:dc:0c:60:36:bd:e1:91:99:ca:
53:27:97:94:f1:10:a2:cf:62:97:06:ff:f3:57:8b:
76:30:f5:3d:3a:84:16:ba:c2:7d:e8:f8:28:07:a9:
69:bb:dc:55:d7:5b:32:e1:3f:25:cd:57:ef:4b:dc:
49:8a:fc:1c:5b:2d:f6:76:61:b1:6f:8b:11:a6:c3:
f4:e9:a8:64:47:2c:ae:ae:b2:f0:12:60:44:20:66:
1c:1a:3b:98:8b:48:b6:58:50:54:f6:7b:5b:9a:88:
cc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:22:8E:69:A0:BC:86:EC:8D:F5:3E:69:2C:A4:92:94:DE:CC:19:02
X509v3 Authority Key Identifier:
keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5d:26:5f:39:c5:a8:8e:9f:c8:5b:16:38:90:cd:86:ff:52:
44:7d:69:2d:08:bc:df:26:49:1e:e8:9d:b9:72:16:d6:e6:a2:
ff:95:e3:9c:0c:ad:b6:c4:b0:f5:e7:c2:14:0c:8e:cc:fa:6d:
af:2a:1c:a6:8f:8b:14:75:c1:1f:49:f0:e4:cf:cf:8a:85:64:
89:d4:bc:91:9f:1f:d7:0f:1a:e2:31:32:3e:b1:43:49:cc:66:
5d:1f:fc:3a:17:7e:9e:0a:8b:b7:56:78:59:0f:2f:05:4a:77:
d3:02:bd:97:8e:98:7f:34:43:5d:47:27:0a:96:a7:07:c6:99:
2a:9d:8f:dd:06:ae:9b:6d:3a:2a:b2:e7:52:ef:1e:e9:f7:ac:
ca:95:e3:2e:00:b2:56:9d:32:1f:4b:b4:f1:ac:3f:17:35:94:
e9:1f:3a:cf:6a:d8:5d:f2:cc:9f:52:5e:e5:f3:bd:29:e6:f4:
64:4d:55:85:ec:74:5b:b3:a1:9b:b3:a0:63:8d:a2:48:26:b4:
25:f6:de:fb:3f:3c:fd:7f:b3:dd:45:1d:88:2b:82:51:aa:94:
92:72:e7:0f:c3:96:65:9a:94:4e:aa:17:8f:9f:54:91:97:ba:
80:7e:46:f6:39:10:d6:92:d4:b2:6e:84:97:d6:f1:23:2c:91:
93:ed:db:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:49:54 2026 by rpki-client