
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier: /Ht+DfPyTlcskyIs5BTp/lH112indlmZqYxsRixCi2k=
Subject key identifier: 54:1E:A6:E8:B0:4A:DA:64:D4:76:C9:5A:A3:6F:71:54:2F:2A:D9:12
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 0420
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number: 0408
Signing time: Wed 22 Jul 2026 16:23:35 +0000
Manifest this update: Wed 22 Jul 2026 16:23:35 +0000
Manifest next update: Wed 29 Jul 2026 16:23:35 +0000
Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: Iz6fFjVxmQDmaTg0D1e8xBJOvChJpOzlYNUXIZnscNM=)
2: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: MnQKwxbbpwYvCT9UEDUb9YHnOUTSQHiCV3o0jnph1XA=)
3: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: j8Yr7Ss4joe6oU5k+fjglOWHr8Bf9I77TQW0zKWVXNc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: Jul 22 16:23:35 2026 GMT
Not After : Jul 29 16:23:35 2026 GMT
Subject: CN=6a60ee87-af49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:5c:26:58:da:02:d6:56:5b:f6:7d:c0:b7:
3b:09:74:92:90:03:30:96:63:6b:63:ee:ca:a5:97:
63:fc:a4:58:18:24:bd:32:a2:90:8d:e7:47:4d:c6:
ab:cf:f4:be:19:b2:66:7e:22:d7:d5:27:fa:3b:cd:
b7:55:f4:05:e2:f6:11:47:be:08:a1:71:09:7d:c3:
2c:72:cc:b8:28:b9:92:f1:10:1c:06:71:19:f5:94:
52:6f:c1:60:b6:c3:5c:75:7f:e4:b3:5e:23:8f:f0:
25:91:c1:d8:bd:e8:b0:44:b0:7b:8d:4e:20:50:47:
75:d3:e9:95:a3:8a:58:27:cb:36:64:0d:2d:91:51:
da:e9:5f:b3:9d:80:10:3a:8e:94:b5:60:b3:4a:9e:
b3:26:25:5a:bd:73:7b:f2:ce:af:81:83:23:8e:25:
c9:50:4b:9d:6a:14:30:35:1a:92:0f:6e:7c:dc:70:
dd:d7:94:ba:fd:16:d6:b8:db:62:2a:d4:d7:aa:00:
5d:d3:51:c7:d5:37:e9:45:91:5b:af:80:aa:0f:b5:
57:c3:67:58:28:20:4d:ae:bc:e3:9f:6c:6d:d2:2b:
98:a2:7b:86:55:cb:30:1e:b7:d3:61:8d:5f:b6:69:
45:de:7a:49:be:43:7e:8f:d9:f0:06:33:ea:89:74:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:A6:E8:B0:4A:DA:64:D4:76:C9:5A:A3:6F:71:54:2F:2A:D9:12
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:59:66:9a:e2:9d:84:b3:dc:12:59:61:7c:8c:c2:19:c2:05:
66:57:35:9b:70:a7:32:c8:4e:ac:8e:f9:75:2c:22:f4:69:d2:
7c:b4:50:52:f4:d7:28:2b:4f:40:fe:8e:0e:ad:72:5d:be:0f:
34:6f:c4:f0:de:71:5c:16:c6:30:56:9b:4b:86:c4:93:a4:13:
c6:e1:82:ec:3e:82:e5:a9:a1:ee:b0:50:7f:4f:52:47:b5:81:
9d:3f:9d:4a:94:59:27:b7:9a:cc:1a:36:2f:6d:bc:d2:3d:6e:
3a:24:60:3f:d4:dd:e5:80:d3:60:3e:36:d5:67:4c:33:9f:f7:
4e:c7:c7:f7:34:b4:b1:95:c1:41:93:cb:51:ba:03:da:97:fa:
0f:3a:be:06:68:92:cc:69:10:ca:88:26:32:ac:d2:5a:cb:38:
0d:b0:ea:1b:7c:08:55:f0:4b:b9:ec:2a:58:7f:4b:28:fd:14:
d3:f0:32:bd:4b:c9:e3:d1:fe:cf:1d:66:cc:e0:07:d9:b7:87:
fc:ba:72:7b:7e:f1:b5:20:12:59:b8:10:ec:5f:1b:18:00:cf:
60:5b:89:c0:6e:61:d7:bd:12:ca:7a:5c:c7:03:3c:b7:2b:d0:
c8:f2:64:5b:f2:9f:7e:2f:be:25:ad:d0:22:7b:30:5c:54:bd:
9a:d3:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:53 2026 by rpki-client