
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: ZR6i1+w+lUhS4bRWAOFnf56tPqwBdOnfLQ9MxAfXynE=
Subject key identifier: A0:6E:48:3D:B1:4A:0F:48:A7:0B:E9:A3:7C:83:9F:87:75:69:ED:13
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 10EE
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 10AD
Signing time: Thu 12 Mar 2026 17:11:40 +0000
Manifest this update: Thu 12 Mar 2026 17:11:40 +0000
Manifest next update: Thu 19 Mar 2026 17:11:40 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: 9GcpePbEJwIxvBWQnkucdjuvIHLk2/pEmPe9tch/FHI=)
2: 3848F884F23311EE97946A35C4F9AE02.roa (hash: vHFFGav5jT6207ykKhwLk1mYRk+A/3Ad6NJ4mcOs2U0=)
3: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: vrAJ7z1fSpJjGKtrMPh5IwHUZxDG1ko4bALeyyyT95o=)
4: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: UuWF6KeypCIEZVIGweXbl7BvzcdwOy44XbTHZZwKzr8=)
5: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: sRW4qj4RQsjO0u1DDYNLTyYoXxRig9f6VKT6JhSAD6E=)
6: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: sxxBQXaxmx2/mhExro9TLoIXfWeEVD4qaorx3l/HsBQ=)
7: 6007188446B111E98B793856C4F9AE02.roa (hash: F74p5ch7S9ZemwYmfO7s1urmMOLkTy/KwgLFbRsCsyE=)
8: 5E46267A46B111E98B793856C4F9AE02.roa (hash: alpoJ/dJyOOayO88hPVQWa6n17xwZWeFLTeDr+7hL4c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 17:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4334 (0x10ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Mar 12 17:11:40 2026 GMT
Not After : Mar 19 17:11:40 2026 GMT
Subject: CN=69b2f3cc-2b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:5b:32:17:1f:08:d5:76:0c:a3:81:f9:66:
39:61:8a:bd:3c:ea:4a:60:db:48:f1:5f:21:87:30:
e4:07:0b:99:60:4c:35:5e:be:e0:8c:98:e1:5e:86:
d5:97:40:3b:6b:af:b5:3c:23:47:c4:c5:4a:23:f0:
4c:38:d5:ae:1f:2b:16:c9:7b:30:e1:b3:ad:59:33:
26:2e:b7:d5:94:de:57:c7:39:f3:1c:05:31:b2:8c:
d2:ef:ca:8a:e7:3e:26:7e:85:52:23:90:6f:db:80:
e6:f6:a0:8c:65:48:44:94:3e:6b:df:16:33:f7:0a:
0d:f2:9e:8c:5a:03:64:be:6e:e4:a9:e6:02:40:a3:
07:1a:96:41:bf:15:05:e3:45:28:ad:d3:a0:5f:4a:
83:c6:5e:bc:66:4c:42:a2:e9:47:90:4b:66:cc:b8:
5d:38:4e:6b:0f:6d:16:59:26:c9:85:31:44:8b:98:
ad:5a:06:d2:53:e9:0d:9f:59:8c:9f:e7:76:ab:af:
ee:44:48:1d:78:78:04:5e:27:9f:b6:13:b1:61:df:
f2:76:f0:ca:7a:53:5f:34:6a:69:54:3a:90:77:76:
ca:ab:96:66:d7:bf:39:38:30:b7:fd:ac:98:d6:db:
e1:29:45:d2:fa:bd:e9:d1:dd:9d:9c:a5:51:0e:65:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:48:3D:B1:4A:0F:48:A7:0B:E9:A3:7C:83:9F:87:75:69:ED:13
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:30:d9:25:3f:e6:80:c6:70:46:9a:f5:5a:78:55:36:1d:9c:
3b:2e:da:2d:d7:b0:f5:ce:ab:93:bb:99:0b:3f:c2:ac:02:5b:
b4:19:64:b7:1c:2c:84:bf:8d:9a:88:b6:1d:52:83:4d:ff:2e:
bb:1b:ab:81:f4:ae:f4:80:23:38:74:04:35:a7:8e:d4:e8:9a:
67:c2:0b:1d:26:e5:0b:6b:10:90:78:b6:cf:f4:12:cf:8a:09:
a5:b8:7b:eb:92:d1:a8:df:da:3b:c0:75:33:0b:ed:fe:63:7d:
48:68:fb:36:b5:5b:8b:c3:f1:68:22:8f:99:7c:49:3f:1a:90:
dd:05:00:73:c2:0b:5c:bd:0c:3c:52:ea:16:49:c9:72:69:43:
73:32:7f:11:08:4c:76:fe:8c:f6:7c:e9:8f:1e:c0:dc:4f:bb:
00:c6:85:3e:88:e3:93:94:76:8c:df:b4:52:9b:6c:1a:93:f7:
f7:a8:a2:2c:ec:b2:70:17:a1:5b:df:fb:43:30:85:34:1a:bf:
d2:8c:56:d8:eb:10:36:2f:27:e8:52:ef:a4:56:d8:97:69:ec:
9a:0b:e1:0b:28:5a:86:e7:36:b1:14:a0:2f:dc:97:00:9c:6c:
70:b0:04:ab:d8:29:2f:42:8a:37:7c:7e:87:62:7c:56:0a:c4:
a9:59:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:32 2026 by rpki-client