
$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
File: vkMB4qQLT2pH4YWmdX2abo18dEI.mft (raw, json)
Hash identifier: OQBbn/ujT+HiLyNjgglkX60KEct9UqNIbcSDoZajXgU=
Subject key identifier: 66:C4:FF:99:2C:7E:8D:48:F0:EE:21:87:FB:61:7B:B4:BB:27:8D:38
Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
Certificate issuer: /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Certificate serial: E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
Manifest number: D8
Signing time: Wed 19 Aug 2026 07:27:41 +0000
Manifest this update: Wed 19 Aug 2026 07:27:40 +0000
Manifest next update: Wed 26 Aug 2026 07:27:40 +0000
Files and hashes: 1: vkMB4qQLT2pH4YWmdX2abo18dEI.crl (hash: Fm7bvazmmwWPIrftSrI1gQr2ufz/rV9g6s2n5oyPftA=)
2: 9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (hash: zli8UWvhlCj/6OfJgReWS/J0Zy5c1SeMbcyJruIVEGs=)
3: 99DC33DA621D11F0B3B28C17C4F9AE02.roa (hash: PaNCeOBgBausBmkVaNGCZJiD6DTSxbMiBGDU8oOrlo8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 07:27:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 226 (0xe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Validity
Not Before: Aug 19 07:27:40 2026 GMT
Not After : Aug 26 07:27:40 2026 GMT
Subject: CN=6a855aed-a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:08:20:15:46:dd:2a:5c:be:2f:54:8b:5d:
00:1c:c9:34:37:8b:bc:05:45:e0:f2:44:9a:df:ee:
52:a5:3e:83:ec:3e:cb:22:de:5b:8d:7e:70:b9:c7:
71:e2:dd:6d:de:9f:84:8e:cd:d3:56:58:a1:5e:fb:
b5:40:0d:4f:5d:b1:88:25:8a:04:c5:8d:7a:dc:a0:
ae:47:6f:a2:fe:9a:c1:a4:3a:cc:05:47:d8:2c:c7:
20:fe:09:3b:19:23:7d:2e:df:70:25:54:49:d6:de:
2d:36:13:24:d6:63:f4:cd:b3:03:33:75:54:e1:1d:
06:f5:02:ae:e5:cd:31:ce:54:22:ee:e6:65:69:7c:
a2:f6:b9:12:36:25:55:8a:4d:64:6d:e6:9a:4f:0f:
e1:aa:52:9b:a2:36:7a:4d:c9:85:8c:b6:01:25:d4:
6e:42:46:ca:23:85:e3:f2:78:a0:ee:13:43:a6:6c:
5c:c6:f6:00:77:cb:a7:48:10:e6:04:07:7c:eb:c4:
8b:fc:78:2d:1d:85:40:f2:40:26:af:dc:09:24:69:
53:19:2a:b1:f8:22:46:72:07:07:bd:19:59:30:c4:
6f:84:a8:1d:a5:70:97:d2:50:fa:de:84:30:c2:cb:
87:0c:6f:88:d8:24:e5:ff:bb:c3:b2:eb:b6:e4:55:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:FF:99:2C:7E:8D:48:F0:EE:21:87:FB:61:7B:B4:BB:27:8D:38
X509v3 Authority Key Identifier:
keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:bb:ae:d9:a8:7c:22:c5:89:a6:bc:74:b9:9c:e5:ff:07:4e:
78:86:70:19:3e:fe:71:4f:9d:d3:60:93:53:a4:89:06:fe:22:
62:ae:83:17:32:16:5a:7d:88:54:7e:38:e8:9d:63:15:4d:2b:
e0:c9:86:18:ce:9d:25:d8:e7:06:dd:6c:63:84:f9:60:ab:95:
70:1c:57:eb:b4:f1:ad:44:de:c7:ac:3e:91:9b:9f:ad:f9:46:
48:2f:a8:c5:96:d3:4e:36:f6:e2:71:09:15:f0:3f:17:55:58:
ae:82:dd:dd:b9:f7:0b:98:05:81:34:bf:f2:da:db:91:b2:6f:
2e:4f:2e:a3:bd:02:2d:f9:6a:23:eb:4e:49:ed:19:8c:bf:3d:
47:b5:cf:5f:5a:4b:8e:8d:42:55:b2:78:ed:9b:97:1f:1d:53:
75:35:16:05:f0:06:71:41:22:dd:38:cd:3c:d1:08:de:5d:cd:
50:cb:db:a1:c6:95:06:c3:c3:a0:f6:e9:01:d3:04:b7:4e:7f:
86:25:64:07:ce:1c:cf:40:2b:ec:02:8b:28:e1:5e:d4:c8:96:
71:89:e9:53:dc:40:27:f7:38:2e:92:20:ec:4a:d3:a5:a1:7e:
5f:af:1a:62:75:96:ed:d1:d1:7b:23:a9:a0:99:48:d6:96:ce:
71:75:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:50:21 2026 by rpki-client