
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: 1Ofmzx0YLdprZpp3H7PeThyYVr/ty0roSUzQuw1CB9c=
Subject key identifier: 71:B5:5B:47:46:DC:6E:9F:95:0A:CD:FA:8A:77:1D:51:C3:A3:B4:BD
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 1990
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 18E6
Signing time: Wed 22 Jul 2026 16:37:23 +0000
Manifest this update: Wed 22 Jul 2026 16:37:23 +0000
Manifest next update: Wed 29 Jul 2026 16:37:23 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: GRQqHQTENrci7UUlW/+74gZsfmcvSJ4HTVjXUF8+Yzs=)
2: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: +WxHowAkXhhm4CWJn2Q37AObUBKHnH8KIVC1880YsN8=)
3: 08BA573C238411F1939D14F6BF833773.roa (hash: xxJZ8fh8OevGtDqD2fFdZvJLlua6AUcbR2guUvdkT3k=)
4: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: tGZ1EQohcaFkRzhNu1V2kEqpiSxxUDeKDaiWT5xRABQ=)
5: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=)
6: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc=)
7: DFD5ED287F6211F1AA84F3C05FA30FBC.roa (hash: Go3QadrBBnaBsIy2cR0jzTE/X0A/sPlYJggr6zqhTSM=)
8: EF885538C28B11EBBF310469C4F9AE02.roa (hash: DV1tl1AIWtGKEO7bG4GEI9a9HN5E72mdCdTltMO/MB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6544 (0x1990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Jul 22 16:37:23 2026 GMT
Not After : Jul 29 16:37:23 2026 GMT
Subject: CN=6a60f1c3-0247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:e7:36:27:f8:d0:13:da:f9:1e:c8:08:6f:
00:90:a4:d6:06:23:85:68:be:f2:78:f4:2c:b3:4e:
4f:5c:89:05:8c:31:e6:63:7a:4a:42:45:29:43:09:
3e:38:7b:96:ea:61:35:4a:4e:f4:be:4c:8c:be:c3:
04:53:e2:0b:85:89:ed:04:2d:c8:40:48:4f:ca:e3:
e8:00:9b:03:cb:51:19:a1:6b:b8:90:b3:c9:54:19:
cc:f0:67:fa:7e:34:44:36:e1:3f:71:94:d2:c3:8c:
d7:fe:a8:36:3d:34:d8:4e:92:80:b5:98:95:73:46:
76:ef:08:ae:93:c6:98:eb:a5:3d:c0:54:f2:d0:74:
97:c2:20:35:7a:05:92:fe:be:a4:34:59:b8:df:2c:
da:27:0f:9f:82:d5:d2:6f:28:b2:f9:35:a3:5a:b8:
2f:c7:89:15:5d:0e:02:8f:fb:3e:80:d9:9e:a1:2c:
9c:13:9f:0d:a5:3a:cd:c4:92:60:fd:53:d1:fd:b6:
e7:44:9d:c4:f6:e8:bd:11:9b:2a:87:04:42:e1:56:
ab:9a:4e:9a:2b:1c:54:77:12:66:d7:cf:94:e1:9e:
df:df:48:bd:06:19:5b:b2:8c:96:32:06:19:fc:ad:
d9:c1:30:f5:2f:82:74:3f:c0:8b:d8:82:61:cb:ed:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B5:5B:47:46:DC:6E:9F:95:0A:CD:FA:8A:77:1D:51:C3:A3:B4:BD
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:b3:2b:8b:1a:82:af:10:a1:87:ed:0d:62:c0:ef:34:94:f0:
d5:eb:17:39:ef:57:69:a9:2b:be:01:52:0c:dd:b9:d5:25:aa:
96:fd:78:d5:54:27:a2:dc:ed:1c:d8:02:9a:ab:2b:b0:72:52:
b5:ad:12:8b:f7:17:07:30:95:c7:aa:38:f7:ed:e0:64:0c:1a:
57:e8:4b:04:45:af:64:82:3d:8d:e4:dc:fb:62:06:81:a1:d5:
1c:19:1b:73:7a:07:80:a8:75:8e:a0:78:36:3f:b6:7a:6a:c5:
a2:e8:5c:41:26:9c:d1:5c:6c:0b:3e:c5:cc:a2:0d:e2:a9:b9:
65:3b:76:c9:fc:f6:94:06:0f:cf:b4:21:76:82:c1:ff:61:a0:
6c:cf:f3:7e:92:d0:42:4e:c3:78:22:f3:a4:58:db:8b:43:10:
46:00:7c:13:79:2e:38:8d:3b:a2:73:79:7b:d5:7b:d9:94:97:
a6:bd:f1:b7:e0:9e:c9:92:e9:61:2c:d1:a8:bb:0a:d3:05:6f:
b7:e1:5c:26:e1:99:26:17:c4:c5:5d:55:0c:00:78:9d:09:c9:
22:18:40:98:0c:94:a1:c8:92:03:3d:f0:92:75:cc:7c:93:8e:
4a:23:e0:93:05:fc:ef:55:5d:c8:85:f6:94:b5:15:dc:7a:8a:
98:da:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:09 2026 by rpki-client