
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: ud4AoQ95C+NvoBWVkAOC+i4C0hwYFJgf106EE8buqtM=
Subject key identifier: 50:3C:71:92:28:AB:9C:1A:A8:10:F0:72:BB:3F:2C:90:CF:F3:B9:A8
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 194F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 18A7
Signing time: Tue 24 Mar 2026 16:27:34 +0000
Manifest this update: Tue 24 Mar 2026 16:27:34 +0000
Manifest next update: Tue 31 Mar 2026 16:27:34 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: 4PCRpiqCC3j5HnMdjabtkgS3/FG0XOUAjw1XO7WnKvw=)
2: 08BA573C238411F1939D14F6BF833773.roa (hash: ikUyxDn1ZqEyZj+RYVDckjXLK2MGhIyviBh1zdOEtvM=)
3: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=)
4: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: +WxHowAkXhhm4CWJn2Q37AObUBKHnH8KIVC1880YsN8=)
5: EF885538C28B11EBBF310469C4F9AE02.roa (hash: DV1tl1AIWtGKEO7bG4GEI9a9HN5E72mdCdTltMO/MB0=)
6: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc=)
7: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: tGZ1EQohcaFkRzhNu1V2kEqpiSxxUDeKDaiWT5xRABQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:27:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6479 (0x194f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Mar 24 16:27:34 2026 GMT
Not After : Mar 31 16:27:34 2026 GMT
Subject: CN=69c2bb76-6fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c9:9e:f9:f0:bc:cc:4c:f0:c2:5d:8b:d3:51:
ef:7c:d7:7c:4a:b3:7c:35:9b:60:75:74:25:60:6d:
01:a2:68:79:96:db:eb:9b:ef:8b:3c:4e:6e:9b:1b:
9b:19:0d:3a:c9:a5:09:8f:ae:cc:3d:fd:30:e0:dd:
d2:4f:81:09:ed:a6:8f:7c:58:23:80:aa:f6:47:aa:
61:37:8d:78:68:86:e2:23:27:14:7b:a5:af:89:e5:
f4:1e:22:9d:8e:c1:85:70:dd:54:d9:f7:1a:13:27:
01:77:5e:a7:1e:3b:3f:da:e1:5b:10:1a:4c:bb:b5:
a9:04:2b:30:ea:b6:c4:45:f5:50:9e:f6:8c:76:80:
8f:59:8a:81:38:64:00:f1:f7:93:5a:54:b9:3d:94:
a7:ba:e5:37:42:04:f3:4a:d7:02:d7:8d:82:b6:bd:
89:ba:2b:8d:38:b0:90:80:12:fb:e0:b7:3f:fa:fc:
30:75:e5:29:a3:32:f8:59:10:77:09:9e:d9:24:f2:
0c:d2:10:65:49:ae:a4:38:67:a4:f8:06:94:0c:95:
6c:b1:62:98:e0:eb:d0:2f:71:d4:38:1c:de:75:5c:
1c:84:56:8a:5b:de:6c:c3:fc:a7:57:a1:95:41:9c:
47:d7:7a:9a:85:ee:4e:6a:07:5d:66:8d:27:71:5d:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3C:71:92:28:AB:9C:1A:A8:10:F0:72:BB:3F:2C:90:CF:F3:B9:A8
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:97:f7:88:d4:93:02:01:6f:64:3f:ed:2c:7d:a2:9d:84:f5:
17:8d:db:6d:fc:f8:4e:48:ac:09:e7:9a:a3:e4:30:a0:9b:d8:
5f:47:36:de:23:61:6b:40:f9:0a:99:00:dc:f0:39:16:32:9f:
85:3c:43:8f:44:34:29:5b:36:9e:bd:22:0d:cf:e6:4f:3c:e9:
01:e8:01:e3:4a:e1:b5:b0:fe:d6:e4:ad:ac:0a:fb:3f:e0:66:
28:9b:78:55:57:cf:ac:42:a6:a2:e3:f4:8d:b0:ea:8c:8d:01:
9f:88:eb:b6:4d:a9:44:84:9b:07:66:2f:ef:72:63:5a:2b:dd:
a9:ef:d1:8b:45:1b:e1:4f:34:20:10:ad:1d:a9:38:2a:04:f8:
fe:6a:c8:6c:5d:b2:2a:53:62:7e:23:3a:44:76:99:6c:13:4c:
3b:41:27:28:69:7f:2c:de:11:e7:6b:f9:26:bc:f6:9a:bc:1e:
65:1b:67:4b:28:fb:d4:52:ce:3f:99:fd:c8:88:14:0a:ae:be:
72:2d:6a:95:8e:a0:0c:4d:80:de:eb:2d:d4:72:1a:fe:4f:34:
75:5e:de:08:ba:9b:2b:33:97:8f:6a:5c:b9:3b:18:8d:8a:5d:
16:57:9b:8f:fa:d1:d3:87:10:13:86:6f:f1:ac:d1:f5:bb:84:
17:8f:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:41:47 2026 by rpki-client