
$ rpki-client -vvf rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
File: vsKCSG834xbxe1ILRVKHvDB_ieg.mft (raw, json)
Hash identifier: rAwnsUliBDYA/z8buDlBBO0MJARRAQ9/RzlxLRbe280=
Subject key identifier: C9:0F:6C:19:C2:CC:9D:33:71:F4:2C:4F:13:27:3B:3B:22:7E:57:AE
Authority key identifier: BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
Certificate issuer: /CN=A918A469/serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Certificate serial: 0177
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
Manifest number: 016E
Signing time: Wed 25 Mar 2026 04:02:01 +0000
Manifest this update: Wed 25 Mar 2026 04:02:00 +0000
Manifest next update: Wed 01 Apr 2026 04:02:00 +0000
Files and hashes: 1: vsKCSG834xbxe1ILRVKHvDB_ieg.crl (hash: iQheVq3VmXZPhE5i/3SFSYTBIvYebhjxgrsBASfql7I=)
2: 71403B04F7E511EEBC67981CC4F9AE02.roa (hash: sBqGDzVDqdsPkrknp4C6rLHvQjOcX3zI0i8iLqmfuUw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 04:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 375 (0x177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918A469, serialNumber=BEC282486F37E316F17B520B455287BC307F89E8
Validity
Not Before: Mar 25 04:02:00 2026 GMT
Not After : Apr 1 04:02:00 2026 GMT
Subject: CN=69c35e39-1024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:58:11:d0:2c:9c:9f:4c:6f:bb:ef:64:50:
84:cf:66:41:2b:bb:67:46:e1:af:a8:65:33:32:be:
15:60:9e:82:ff:95:ea:a8:a3:48:e2:12:dd:5b:b0:
4a:39:b8:7c:12:85:6b:dc:72:3b:6d:c4:7b:ba:86:
a5:ae:b8:ac:44:ff:24:7f:3f:26:1b:83:5e:aa:41:
3a:fc:6e:03:d3:b2:05:d3:65:29:ea:87:d1:91:d7:
be:30:69:ab:b8:7b:56:4f:5a:a8:0e:78:a7:89:6b:
fe:1b:ee:3d:71:3d:37:30:dc:b6:1e:29:aa:26:74:
42:c8:12:31:4b:9a:a7:cb:2c:7e:79:17:43:55:db:
6a:63:33:ae:7f:49:d8:cf:32:99:d9:8d:ac:02:0f:
2f:2f:91:3f:3c:e5:3c:52:f6:8d:ab:bd:b4:13:28:
bd:47:62:59:a4:66:9c:5e:36:66:fc:3d:75:59:61:
32:55:02:2a:ff:98:1d:30:2b:55:b6:e0:87:f9:16:
36:ad:04:11:56:da:a4:c5:27:8f:1b:c2:43:62:50:
71:44:42:11:d0:78:39:b0:43:57:1a:cd:11:63:d1:
2d:16:c6:f3:30:5e:15:cc:5a:a0:60:12:34:b2:ec:
54:ef:f0:17:62:84:a4:40:b2:c2:d2:c9:9b:f8:cb:
0e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:6C:19:C2:CC:9D:33:71:F4:2C:4F:13:27:3B:3B:22:7E:57:AE
X509v3 Authority Key Identifier:
keyid:BE:C2:82:48:6F:37:E3:16:F1:7B:52:0B:45:52:87:BC:30:7F:89:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vsKCSG834xbxe1ILRVKHvDB_ieg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A469/F58438FEF7E311EEB9A1291AC4F9AE02/vsKCSG834xbxe1ILRVKHvDB_ieg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:73:68:13:58:0a:97:41:32:df:54:ba:44:70:59:f2:3d:d4:
0e:63:dd:e7:4c:96:7d:1b:0b:0f:e9:59:f3:af:37:58:9a:ce:
c9:87:5d:f9:9c:bc:62:10:a4:df:6b:4a:3e:9f:34:6a:22:56:
8b:81:18:b8:b5:b0:63:b4:32:c8:8e:f0:8a:11:14:de:73:44:
cc:89:86:20:cc:d5:d5:57:a6:16:04:d4:4f:06:0a:10:7b:2a:
37:e7:98:10:ff:2f:b4:0d:23:53:fd:2e:06:41:f5:f7:fc:ee:
96:f1:8b:bc:b6:f9:d3:69:7c:fb:e2:8b:f8:6c:af:f9:b3:9d:
d6:55:89:36:c5:99:7e:f5:b1:c3:7f:9b:74:b6:e0:1c:41:7a:
15:20:70:07:2d:b5:5b:f9:a3:7a:93:4a:a5:fe:2d:2c:94:4f:
96:10:20:1b:05:1b:36:91:cb:a3:34:7b:8a:95:b8:27:43:19:
36:ce:a0:63:18:39:bc:b1:e8:56:be:1d:31:c3:f0:f5:72:07:
25:bf:07:95:fa:6b:62:21:b8:2f:14:61:f1:18:88:1d:53:bc:
2e:52:9a:44:e0:22:a0:b1:d8:67:2b:3a:a6:25:07:9e:a4:a1:
d6:64:07:4e:7d:85:94:9e:20:59:54:bc:bd:8f:e8:ff:16:cd:
41:0a:27:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:14 2026 by rpki-client