
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: xPPshNeMw/JxFIQtnEHVw3DB2Okm6b3RwQOeOFic5u4=
Subject key identifier: 28:EF:EE:B2:5C:F2:EE:44:55:B6:98:FB:B5:FD:1C:65:AE:4D:78:15
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 113A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 10F1
Signing time: Wed 22 Jul 2026 17:26:14 +0000
Manifest this update: Wed 22 Jul 2026 17:26:13 +0000
Manifest next update: Wed 29 Jul 2026 17:26:13 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: y3c3ajh0N2tXYoVBMRpDHxbzAC/ZiQvkaRFpCQheOCY=)
2: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: /AeqF+peYjngSTIf+T9WoCZ55bAwGRELlp7tryj0tdI=)
3: 3848F884F23311EE97946A35C4F9AE02.roa (hash: iLTm1oru1pBo+aA4NVsRCbbmKUmROroBew15v4NmRQY=)
4: 6007188446B111E98B793856C4F9AE02.roa (hash: HQ5O+9mRfxlZe018Fv7FZowJEc9rSkkY86rQQbccY7k=)
5: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 04JIhOgeUPt5qMEq9+42uBTRgwhR8wzDVRX5FbEh3wA=)
6: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: SwLY0AF1xggMZuymN/EMAtTFPl3Iavmcav7HLQApbQo=)
7: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: 3/voHj4jHKfuqihLM62Y/5qIYqF3rvS4lIjjd/S2Lmw=)
8: 5E46267A46B111E98B793856C4F9AE02.roa (hash: yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:26:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4410 (0x113a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Jul 22 17:26:13 2026 GMT
Not After : Jul 29 17:26:13 2026 GMT
Subject: CN=6a60fd36-82eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:bf:53:d0:ee:f1:cc:ac:c7:7e:79:c1:c5:
c1:d1:6c:da:48:33:44:ac:db:57:6e:4d:06:6c:4f:
53:82:18:be:a5:21:b9:3c:b8:2f:89:bb:6a:36:4b:
32:ac:5c:40:d1:b4:71:7c:d9:4e:fe:c7:76:72:da:
92:0f:fb:fd:0d:e3:b1:48:34:d7:7d:f0:8a:9e:a4:
79:11:88:bc:48:64:4a:da:b7:20:f8:bb:35:79:d1:
6f:94:4e:bc:bc:08:4e:a1:ec:23:f9:62:fe:bf:bb:
8f:5b:cb:ee:73:d6:ea:a2:07:fe:b2:a4:e0:31:49:
ec:ed:3b:64:37:60:d9:b2:11:e8:1f:da:29:88:dd:
04:a1:d9:4d:bd:93:e5:2c:7c:f2:59:28:25:c3:7a:
86:59:61:34:2b:ab:90:06:91:da:c8:63:54:53:bd:
97:02:e9:33:cf:5e:cf:13:11:55:85:00:51:ef:de:
dd:2e:ab:ac:85:91:76:18:4e:8f:a2:e9:9f:19:5c:
8a:6a:5b:7e:84:ab:2b:1a:15:aa:b2:7c:0c:8a:b8:
da:1c:90:cf:54:13:55:c2:3f:47:aa:ab:dd:e9:11:
5b:7c:f3:bf:02:ae:2e:cd:3e:d7:03:2c:50:d3:f3:
03:9c:4b:6e:08:5d:62:14:05:18:fa:a0:07:06:0a:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EF:EE:B2:5C:F2:EE:44:55:B6:98:FB:B5:FD:1C:65:AE:4D:78:15
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:94:ce:4f:ad:64:91:2e:60:63:78:90:3a:4b:60:15:7e:77:
5e:a2:48:74:87:26:2b:6d:06:68:b9:14:6e:25:d0:43:8b:37:
84:05:4e:4d:8a:f1:80:24:41:28:63:6a:b6:93:bd:92:77:7d:
8e:1e:4b:fd:14:f1:c5:10:2d:e6:9d:13:5c:83:a9:ea:9d:4e:
ab:a8:d6:78:81:d6:19:22:cf:6e:2e:71:16:43:c3:39:8a:dc:
bb:6e:12:ba:76:49:68:a7:22:0b:e6:61:dc:da:75:e9:29:5f:
ac:c8:56:6d:e5:9a:f9:0c:86:ac:88:f9:eb:97:f5:12:80:76:
66:4e:0b:26:1d:b7:53:88:26:87:c8:24:b0:90:d9:05:95:05:
0c:54:3e:b7:3b:3f:ee:bd:e2:58:42:59:e5:12:c7:4b:06:6d:
8b:7b:8d:72:73:95:d2:2b:b8:6b:4f:b2:af:49:40:e4:6f:d5:
a7:5e:e2:66:dc:59:3c:5f:64:45:df:f4:fe:e9:70:84:42:d1:
86:ea:3f:da:b9:02:6b:9f:db:ea:d7:a3:8e:11:3c:fe:25:f8:
f4:3d:0c:72:77:40:fa:99:1e:01:a2:93:85:c5:71:30:49:ba:
70:cd:8f:24:78:d4:f5:ef:78:e5:c5:54:0d:f8:88:67:c4:ba:
78:9c:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:56 2026 by rpki-client