
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.mft
File: vShmMlc2GvKb0hjT4Qz78352Kaw.mft (raw, json)
Hash identifier: C5tta3gUfZ9gL7fJtQTaATsVzDAbrFmbNKeMEi3o/38=
Subject key identifier: 92:86:49:BE:28:0C:61:33:A9:77:9E:A6:D6:EF:10:F2:74:59:4F:2E
Authority key identifier: BD:28:66:32:57:36:1A:F2:9B:D2:18:D3:E1:0C:FB:F3:7E:76:29:AC
Certificate issuer: /CN=A918D3DF/serialNumber=BD28663257361AF29BD218D3E10CFBF37E7629AC
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vShmMlc2GvKb0hjT4Qz78352Kaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.mft
Manifest number: 0E
Signing time: Fri 13 Nov 2026 09:19:32 +0000
Manifest this update: Fri 13 Nov 2026 09:19:31 +0000
Manifest next update: Fri 20 Nov 2026 09:19:31 +0000
Files and hashes: 1: vShmMlc2GvKb0hjT4Qz78352Kaw.crl (hash: dMce8Vo8WtmUJg2dypCwoeCKTJst3kGXMky9Ozb8cOI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.crl
rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vShmMlc2GvKb0hjT4Qz78352Kaw.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Nov 2026 09:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D3DF, serialNumber=BD28663257361AF29BD218D3E10CFBF37E7629AC
Validity
Not Before: Nov 13 09:19:31 2026 GMT
Not After : Nov 20 09:19:31 2026 GMT
Subject: CN=6af6d624-8b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:12:b3:f0:ae:ca:f6:f4:37:17:c7:84:0a:02:
d2:0b:ed:e6:a1:d1:1f:32:ff:3f:af:0d:74:87:86:
cc:ac:06:7d:0d:84:54:6d:fc:6e:09:fe:66:06:bc:
61:cd:4c:3a:fd:26:f3:ac:9f:48:39:23:99:c8:24:
39:1e:9a:29:bf:1b:fc:fb:1e:33:6d:ab:96:9e:b2:
f6:ca:46:57:86:f9:4d:32:85:73:d0:38:af:14:4f:
cf:67:8c:25:07:a3:2e:84:19:f8:34:5c:59:b7:53:
6c:17:b6:42:a3:08:d4:81:ae:a9:8c:40:61:dc:86:
c8:77:f1:a7:34:a0:17:da:93:78:de:87:ff:59:c3:
a4:69:3e:7d:fd:70:c1:13:c7:0d:c8:d5:d9:7c:9a:
d0:1f:f0:1f:eb:e1:50:ba:08:47:9f:82:e0:61:29:
8b:3e:68:c5:ca:c4:1b:ea:8c:e5:c0:97:a0:30:3f:
1d:79:d6:52:1b:8d:69:84:79:47:26:6a:5c:0e:d0:
8e:9e:87:ff:f9:39:46:88:22:6a:a8:67:e8:b9:6a:
e2:72:0e:e0:8e:7d:b1:c0:43:43:1a:88:c3:b5:39:
93:ab:31:aa:c2:69:56:a8:e1:26:bc:d9:b7:3a:2e:
05:b1:a9:87:ef:8b:8e:92:9e:3a:30:6a:c0:91:20:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:86:49:BE:28:0C:61:33:A9:77:9E:A6:D6:EF:10:F2:74:59:4F:2E
X509v3 Authority Key Identifier:
keyid:BD:28:66:32:57:36:1A:F2:9B:D2:18:D3:E1:0C:FB:F3:7E:76:29:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vShmMlc2GvKb0hjT4Qz78352Kaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D3DF/3CFFCA94CDB711F192B14700F865CEF9/vShmMlc2GvKb0hjT4Qz78352Kaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d6:fe:89:6a:1b:62:a4:99:69:fe:52:a7:a4:92:1d:c5:f8:
ac:56:0f:67:2c:43:a8:ba:54:93:f0:f4:c8:5c:f1:4a:d7:72:
4a:a5:09:23:6e:5f:97:82:ca:94:84:38:ad:c8:85:20:3b:9b:
bf:d2:16:dc:3e:2a:43:a8:59:f4:f7:24:75:87:9b:17:3b:5d:
ef:6e:d9:be:ce:12:d7:f0:13:5e:eb:0b:97:91:fd:3d:1d:5d:
0b:da:4c:f2:12:d6:2e:46:f2:4d:61:33:85:a1:fa:a4:02:b1:
36:5f:36:8d:fc:e4:5a:38:d3:78:f8:93:52:34:15:44:54:cc:
48:bc:9b:b2:f6:d2:25:f1:8f:a7:95:be:29:c8:30:cd:aa:67:
7d:f0:49:42:20:28:37:87:04:e2:e1:dd:58:70:b3:4f:2a:08:
9e:58:91:22:5e:8a:a8:5f:d0:73:33:e8:df:28:81:79:ae:3c:
80:dc:ad:3a:a3:ba:0c:11:83:22:5b:7d:e2:55:a7:7f:3f:5f:
e4:f7:f6:ee:17:4b:06:8c:9d:27:88:14:f0:4e:74:1d:0c:49:
d2:38:b7:aa:58:86:91:69:73:c4:ef:4c:ff:9d:6c:bb:40:9d:
61:89:bd:a3:7a:49:c4:f5:a6:05:73:b9:fb:9c:1b:ae:6e:c7:
36:93:ab:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:16 2026 by rpki-client