
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
File: vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft (raw, json)
Hash identifier: E+CfS6BG7n7Dxi0azy1xrDMV2e0PxA9XG3rwWkSYwpA=
Subject key identifier: B2:6D:52:1A:E5:0D:86:F0:57:4C:AC:18:6C:D3:34:FA:A8:18:C6:D6
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Certificate issuer: /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial: 1125
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
Manifest number: 10DC
Signing time: Wed 10 Jun 2026 17:18:40 +0000
Manifest this update: Wed 10 Jun 2026 17:18:39 +0000
Manifest next update: Wed 17 Jun 2026 17:18:39 +0000
Files and hashes: 1: vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl (hash: kL5Y7Q8T+FsVNGydzavn7g8z6JGPTd2feURHZTs1PPA=)
2: 5EC43E1A213C11EE9DC66056C4F9AE02.roa (hash: /AeqF+peYjngSTIf+T9WoCZ55bAwGRELlp7tryj0tdI=)
3: 1568A012213C11EEA25DBF55C4F9AE02.roa (hash: SwLY0AF1xggMZuymN/EMAtTFPl3Iavmcav7HLQApbQo=)
4: F4D5953246AF11E9A68E7652C4F9AE02.roa (hash: 3/voHj4jHKfuqihLM62Y/5qIYqF3rvS4lIjjd/S2Lmw=)
5: 5F6DA23A46B111E98B793856C4F9AE02.roa (hash: 04JIhOgeUPt5qMEq9+42uBTRgwhR8wzDVRX5FbEh3wA=)
6: 5E46267A46B111E98B793856C4F9AE02.roa (hash: yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=)
7: 3848F884F23311EE97946A35C4F9AE02.roa (hash: iLTm1oru1pBo+aA4NVsRCbbmKUmROroBew15v4NmRQY=)
8: 6007188446B111E98B793856C4F9AE02.roa (hash: HQ5O+9mRfxlZe018Fv7FZowJEc9rSkkY86rQQbccY7k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 17:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4389 (0x1125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Validity
Not Before: Jun 10 17:18:39 2026 GMT
Not After : Jun 17 17:18:39 2026 GMT
Subject: CN=6a299c6f-c7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:86:54:d9:0e:eb:51:0f:a9:85:05:1b:73:
e8:3b:0a:d3:7f:74:49:c0:00:1e:40:ef:b1:5e:41:
29:61:b1:ba:f5:06:c8:3b:0e:72:50:74:cb:d3:85:
f3:19:dc:3e:98:6b:9e:64:a5:a0:13:5a:c9:fa:2c:
e8:97:f6:1b:ff:2e:ad:a9:29:27:d9:76:09:62:a6:
4f:10:4b:1c:dd:dc:35:73:4f:9c:c1:1f:fd:7f:10:
9f:44:00:da:06:7b:ab:c6:6d:0f:8c:6b:3d:15:43:
df:ee:b8:27:81:ff:45:00:07:d5:19:a4:25:73:94:
bd:61:b2:7e:c2:e5:5b:ea:97:b3:b4:ec:73:54:36:
24:b8:1b:8a:21:d3:86:e2:8d:b1:71:b9:12:03:c4:
95:53:da:e9:d6:a0:58:4f:24:09:6e:47:84:9a:b6:
c7:84:c6:17:56:57:c8:90:8f:d4:12:1b:19:9b:07:
74:0c:66:35:63:b7:0c:e6:0d:80:90:65:a5:bc:f8:
8b:23:02:f6:fa:fb:97:d8:64:26:72:aa:70:6b:76:
84:6c:62:fd:79:e3:bc:e9:45:bf:9f:f1:93:36:37:
48:4b:06:58:71:8b:00:d3:3e:db:d2:0a:a8:e8:da:
44:05:dd:7f:15:71:2b:22:fd:ee:fa:4c:4e:cc:78:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6D:52:1A:E5:0D:86:F0:57:4C:AC:18:6C:D3:34:FA:A8:18:C6:D6
X509v3 Authority Key Identifier:
keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:29:42:a9:79:46:0a:e3:38:4e:43:bb:c0:2d:c0:43:01:0d:
82:19:31:b6:61:5d:1b:ce:37:29:6a:0b:e5:89:34:a0:31:80:
ea:96:8a:a7:53:13:cd:02:a4:91:6e:34:1e:91:fb:b2:40:e6:
95:14:7b:1f:06:4a:02:a3:dd:3e:9f:d3:27:75:d0:d1:2b:93:
39:2c:f9:d5:d4:4f:dd:1a:8e:6a:0b:1f:52:a1:b4:28:8c:44:
e5:a6:4b:b7:4b:8e:f9:82:09:53:ba:09:2c:22:df:89:56:84:
42:e2:d6:5e:ba:e4:17:41:26:02:de:13:66:b5:55:f7:4d:18:
c5:0d:e3:7e:06:d6:a2:88:58:27:78:e9:60:48:a0:fa:f7:b9:
fe:a0:e5:c8:05:6b:75:75:b7:3a:72:3c:a6:50:fd:a4:b1:64:
26:ce:da:c7:2f:73:92:64:4b:38:5d:86:e4:93:d9:5f:82:fe:
e0:34:32:5e:0c:86:6b:e0:63:ba:80:50:8e:a5:7d:0b:3a:c0:
ef:2a:7e:54:4a:3b:da:2b:fa:4a:40:6f:2a:87:7a:24:02:51:
d5:f9:7b:31:ee:84:5d:a0:62:45:b5:ed:1a:3a:07:75:b7:78:
2e:e4:84:07:17:f5:e0:10:77:25:ec:d1:e8:9e:1e:b6:c8:03:
5d:49:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:02:47 2026 by rpki-client