
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
File: vrUOQRzD4sQGA7FqkWCepNQGZJU.mft (raw, json)
Hash identifier: bNKkLGUjW0/PlwjzARpwMXIE/vAn0IeTPDJDi1XJinQ=
Subject key identifier: 64:17:AD:1B:D5:F4:E3:B8:83:D8:D2:F8:A2:65:79:72:7C:F6:DE:B2
Authority key identifier: BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
Certificate issuer: /CN=A918B2F8/serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Certificate serial: 0EB8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
Manifest number: 0EAD
Signing time: Tue 18 Aug 2026 17:56:06 +0000
Manifest this update: Tue 18 Aug 2026 17:56:05 +0000
Manifest next update: Tue 25 Aug 2026 17:56:05 +0000
Files and hashes: 1: vrUOQRzD4sQGA7FqkWCepNQGZJU.crl (hash: o8GxTAVyPPlRIM10BSmFMKFxjaJEoELS4dSa1aPX+3Y=)
2: 4BECBAFCB99811E98000600AC4F9AE02.roa (hash: e2hj/VgpX5o9xzRU7qTEPDMxfSaulRInvkdOWz8lhh0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 17:56:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3768 (0xeb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B2F8, serialNumber=BEB50E411CC3E2C40603B16A91609EA4D4066495
Validity
Not Before: Aug 18 17:56:05 2026 GMT
Not After : Aug 25 17:56:05 2026 GMT
Subject: CN=6a849cb6-2479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:8d:97:cb:ba:26:8d:8c:1a:87:f4:ed:7b:
4a:15:f0:43:a5:22:dc:2b:4b:59:3a:99:ca:2c:40:
f0:b0:5e:f4:11:f7:d6:bd:0a:f6:1a:05:dd:ef:5b:
ce:89:9d:14:d0:ef:09:90:0e:8b:87:6f:b3:34:db:
b7:2e:72:25:48:f9:d7:09:4b:28:bd:69:6d:2f:9c:
dc:38:d4:e7:cf:31:25:4e:49:30:f9:67:82:2a:c8:
29:78:6c:5b:0d:01:47:82:45:14:b1:5b:6f:4d:08:
d4:68:f8:87:53:28:3e:79:d7:0a:cd:28:b1:6c:8e:
09:8e:2c:7d:ca:78:f6:c7:63:31:26:4f:db:dd:2c:
df:eb:23:cf:1c:80:9e:79:5d:31:d0:17:c9:7d:90:
b8:b5:43:bc:35:e8:37:06:c8:d3:44:b1:63:c8:a4:
dd:d3:97:c0:f4:af:43:7c:35:81:dd:ff:d7:0a:35:
da:85:67:92:76:a2:fa:6b:f6:c9:2c:3b:65:33:4d:
e0:20:57:db:8e:c5:3d:f0:ea:cb:0e:e5:a7:ff:7c:
85:87:8a:a4:8f:a4:d7:35:aa:08:69:2b:59:32:5d:
d1:04:2f:98:a7:58:de:db:5d:55:22:04:ed:a3:c2:
92:2b:f3:91:65:6f:d1:f2:0a:a4:96:b1:57:1e:11:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:AD:1B:D5:F4:E3:B8:83:D8:D2:F8:A2:65:79:72:7C:F6:DE:B2
X509v3 Authority Key Identifier:
keyid:BE:B5:0E:41:1C:C3:E2:C4:06:03:B1:6A:91:60:9E:A4:D4:06:64:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vrUOQRzD4sQGA7FqkWCepNQGZJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B2F8/DFEE61DEB99711E9B0990E0AC4F9AE02/vrUOQRzD4sQGA7FqkWCepNQGZJU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:02:a9:22:e9:8d:74:6f:0c:bf:35:80:cc:48:87:34:19:79:
c2:1c:f3:81:a9:28:9c:dc:53:17:f0:1a:77:d4:43:38:85:41:
ae:ab:71:66:3d:e6:3f:d7:ee:a3:03:ae:8f:26:2f:c5:73:76:
62:ed:e9:7c:d1:ef:e0:a5:18:46:bf:80:19:ce:ab:49:f3:b5:
86:c2:d4:6a:43:48:db:e3:fb:70:5c:0b:b3:84:f7:c7:e1:6a:
d6:63:42:0a:e9:4a:15:7b:a7:4a:bc:a0:b4:a6:33:d3:37:66:
af:77:8d:0d:24:57:6e:81:2f:15:80:ef:2c:a3:9f:be:57:6b:
c9:1a:9a:98:0a:67:39:89:c8:dd:4f:f0:c5:94:7a:82:92:14:
d7:5c:cd:90:90:d5:ef:32:dc:33:ee:d8:1d:9c:d9:6f:cf:88:
dd:e7:54:1a:93:b7:d4:f5:cf:c9:04:ea:ba:49:28:1a:da:44:
3a:a9:8d:90:bc:af:18:d7:43:29:d0:dc:6d:6f:8c:8e:75:00:
be:94:e7:b6:22:3a:c0:5b:5a:5d:08:16:0c:2c:b4:7a:a2:c7:
63:9a:a9:91:c4:52:3f:e5:5e:fb:31:e1:9f:93:6b:bd:a8:f4:
67:63:f0:c0:53:da:fc:fe:a5:5a:ec:c3:0a:39:ca:84:e4:7f:
7b:4e:15:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:35 2026 by rpki-client