
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: wjTT4EkXuwM6bfxAoxjZNxdZqko++LFeEn8sYhbibP8=
Subject key identifier: 75:EA:7A:22:49:2A:EF:27:37:19:44:E7:EE:4D:5C:7B:43:69:4B:D9
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 116B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 1122
Signing time: Mon 26 Oct 2026 17:16:35 +0000
Manifest this update: Mon 26 Oct 2026 17:16:35 +0000
Manifest next update: Mon 02 Nov 2026 17:16:35 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: O/3MlgOgL8CVnn+KmfX4qE9pomnvTdJsxR5nyP5MWcE=)
2: 6007188446B111E98B793856C4F9AE02.roa (hash: HQ5O+9mRfxlZe018Fv7FZowJEc9rSkkY86rQQbccY7k=)
3: 5E46267A46B111E98B793856C4F9AE02.roa (hash: yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=)
4: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: 3/voHj4jHKfuqihLM62Y/5qIYqF3rvS4lIjjd/S2Lmw=)
5: 3848F884F23311EE97946A35C4F9AE02.roa (hash: iLTm1oru1pBo+aA4NVsRCbbmKUmROroBew15v4NmRQY=)
6: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: SwLY0AF1xggMZuymN/EMAtTFPl3Iavmcav7HLQApbQo=)
7: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: /AeqF+peYjngSTIf+T9WoCZ55bAwGRELlp7tryj0tdI=)
8: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 04JIhOgeUPt5qMEq9+42uBTRgwhR8wzDVRX5FbEh3wA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 17:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4459 (0x116b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Oct 26 17:16:35 2026 GMT
Not After : Nov 2 17:16:35 2026 GMT
Subject: CN=6adf8af3-a2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:08:66:63:cf:85:85:e9:4a:d9:9b:0f:47:
d8:26:27:7a:9a:c1:1f:bc:f9:95:52:eb:08:55:89:
a6:12:36:43:8d:1e:e5:50:8b:a0:ae:24:e5:29:ce:
e0:2d:d1:2d:6e:07:06:71:e4:83:e9:2b:dc:c7:de:
75:94:39:3c:76:2d:ff:ae:52:dc:e9:db:28:da:be:
08:5e:8c:ae:ae:92:9b:c2:8d:a4:9b:a0:aa:02:d7:
a9:50:f4:35:09:d6:e1:28:fd:ee:09:df:12:9e:a2:
20:ca:d1:94:e0:a0:17:a9:ec:a4:f2:9e:ba:9b:24:
16:29:cc:75:83:d9:3c:2c:df:89:53:b1:56:9f:a7:
14:da:93:65:49:84:0c:a5:9f:c1:74:e2:a2:b5:e4:
8c:05:bb:6a:9e:d4:65:ce:a6:15:08:38:03:79:c3:
49:58:90:d4:b2:cf:40:07:6e:8f:e3:8c:21:2f:58:
d4:50:fc:f1:2a:83:40:b0:a2:1c:2b:af:77:b9:51:
bd:5f:9d:26:e3:5f:17:ef:89:d8:f2:60:20:a1:73:
a6:36:b8:0b:08:e5:27:f4:c4:80:e0:f8:04:c5:76:
d9:7c:06:8e:0d:0c:f9:15:42:32:40:3d:f7:4e:2a:
cc:2c:ba:e1:42:37:92:10:b7:b0:52:fd:cf:b7:6e:
7e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:7A:22:49:2A:EF:27:37:19:44:E7:EE:4D:5C:7B:43:69:4B:D9
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:41:4c:43:c1:3f:8a:cc:5c:11:a0:43:72:e1:19:3c:75:3d:
3f:1c:79:72:06:db:3e:7d:08:14:c6:1b:34:3c:b3:cd:6e:09:
f0:8e:60:bd:43:14:19:f2:7e:12:96:fe:37:81:01:04:cb:f1:
f4:08:4a:e1:0b:65:11:84:de:ef:6c:c9:65:67:8c:dc:68:f9:
ef:54:e7:f9:1c:e3:e3:6b:d5:df:77:df:13:3a:97:72:74:c8:
de:86:f1:b6:b0:54:bd:a2:97:3d:6f:aa:a8:76:c6:35:14:ff:
80:47:91:ce:d1:24:28:1a:f8:ae:4e:56:65:e7:e2:0a:f4:7f:
54:f8:be:42:72:6c:60:ae:3a:96:07:de:89:64:1d:2d:56:92:
19:3f:c5:c8:df:75:f0:cb:cb:e3:a6:71:8c:95:68:97:12:27:
fb:ac:74:18:09:13:6f:00:3b:5b:53:c7:78:85:17:a7:b7:30:
a6:c8:cb:d5:05:0d:d5:bf:0b:93:04:a5:d3:85:41:ae:44:57:
c8:03:0a:80:d8:83:97:47:32:74:d9:2a:06:cc:23:4d:1f:62:
7a:99:e1:67:35:e4:1d:ee:14:79:4c:73:e9:e5:3d:9a:6c:7a:
03:b2:6e:6e:ac:56:22:f9:c0:32:14:88:4a:09:8d:97:08:bf:
91:ba:34:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:32:55 2026 by rpki-client