
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
File: vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft (raw, json)
Hash identifier: tITMuc10x7KulXkrRQ6aZexEhja0YA9ODSFd4TYtLMI=
Subject key identifier: 5A:83:8D:FD:12:F8:A4:BF:33:58:1B:2E:B5:29:03:8E:52:5A:9B:14
Authority key identifier: BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
Certificate issuer: /CN=A9162744/serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Certificate serial: 0220
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
Manifest number: 021A
Signing time: Wed 19 Aug 2026 03:28:07 +0000
Manifest this update: Wed 19 Aug 2026 03:28:07 +0000
Manifest next update: Wed 26 Aug 2026 03:28:07 +0000
Files and hashes: 1: vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl (hash: 0AGjxImsERGcL8NvWYZL3Hw8NIS9DE0QBLHQeElGWSc=)
2: 1ECF63EE674511EEBD995841C4F9AE02.roa (hash: iThWY1Te53u7qY3P9l4W83gV/0c/JXwrsnbyFaLKk8k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 544 (0x220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162744, serialNumber=BD21BE98307542916D81E0FED9F8F53240494480
Validity
Not Before: Aug 19 03:28:07 2026 GMT
Not After : Aug 26 03:28:07 2026 GMT
Subject: CN=6a8522c7-0581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:42:9a:d6:42:1c:fa:0e:75:9c:dc:01:bb:
5b:e5:95:e2:8c:e6:2e:46:8c:22:ba:9f:62:1b:6e:
50:5b:e7:cc:0b:e0:1c:73:3a:be:4a:e9:65:41:01:
44:56:7f:6e:8a:06:cd:c4:6f:20:26:81:75:f5:f0:
6d:9e:92:2e:40:f5:4e:a0:5d:ad:76:e8:c7:7c:44:
87:4f:73:f7:03:b6:59:cc:2b:fa:29:07:d7:f2:4a:
90:04:1c:7a:8c:04:4d:f2:56:ba:e0:b2:ad:37:09:
2c:47:68:59:c2:2a:4c:3f:79:52:e2:da:d7:2f:d2:
a4:00:c8:c5:93:84:e8:50:8b:bb:ad:77:be:23:a0:
76:52:d3:8f:c1:f4:8b:9a:39:4a:30:30:28:36:39:
c6:5d:6d:de:e8:32:fe:fe:8f:2a:dc:b5:92:fd:2f:
98:e1:52:fa:f0:e4:3b:f9:7e:db:c0:12:6a:97:e0:
c0:40:f2:7a:3d:a5:c9:d0:d8:7a:d3:da:05:2a:a8:
13:4e:9f:92:2d:4d:63:76:47:a4:5f:06:b1:dd:18:
25:d6:f2:8d:40:e5:b8:e9:c4:cd:b8:c6:08:34:3f:
d2:6e:a6:f8:0f:e3:19:78:5b:b9:a3:27:6d:b9:db:
c7:ec:ab:3c:1b:6c:bb:bf:48:f6:c9:79:1b:b8:03:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:8D:FD:12:F8:A4:BF:33:58:1B:2E:B5:29:03:8E:52:5A:9B:14
X509v3 Authority Key Identifier:
keyid:BD:21:BE:98:30:75:42:91:6D:81:E0:FE:D9:F8:F5:32:40:49:44:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vSG-mDB1QpFtgeD-2fj1MkBJRIA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162744/8E8B9C9E674411EE8A92F83FC4F9AE02/vSG-mDB1QpFtgeD-2fj1MkBJRIA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:e0:36:75:ae:73:3d:a3:e2:ea:4c:81:ea:f0:06:be:11:1e:
b0:92:32:1e:7d:f4:10:1a:b7:ed:b4:4d:08:7d:49:3b:6f:a0:
1c:31:5c:b7:ff:09:b9:51:30:d6:be:30:ee:fa:2e:cf:71:4f:
3b:b0:fd:e3:03:9b:b4:f4:f0:b8:a5:be:22:0e:ad:4c:b7:4b:
2c:a2:de:16:52:02:91:e3:4c:a6:13:5c:70:6c:de:6e:d9:6b:
40:99:3c:f5:a4:fc:76:92:0c:08:e3:98:2f:9f:f1:f0:cc:14:
92:a4:d8:62:b2:73:a4:11:b7:29:17:aa:92:c3:f8:95:c7:19:
f6:de:22:97:26:7f:b9:f8:6c:87:67:f9:5b:80:aa:23:46:c5:
55:52:b1:d6:b4:d7:fc:5c:13:66:4c:e5:db:73:63:a7:ff:63:
16:89:19:ed:5a:37:03:16:3c:d7:ee:0e:7d:29:42:16:7d:23:
62:72:41:05:cb:85:8f:4b:99:5d:33:f5:64:ac:21:68:c9:c3:
7c:16:e2:b5:1d:d7:6b:5c:1e:46:7f:26:e5:b0:53:28:ba:a6:
43:29:43:45:47:05:29:1c:66:5f:74:ca:d9:a7:25:ca:bd:6d:
2a:fc:05:fb:d4:f2:26:27:37:8e:04:0c:0d:17:ec:5e:4b:1f:
5e:88:6a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:52:54 2026 by rpki-client