
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: 4MO1INsz3I+umzIjo1opxSAvItx/wY5cRSPSY41iwAA=
Subject key identifier: 33:AF:F4:49:47:AC:CD:78:38:4A:8F:F3:AD:28:D7:7F:92:D9:EA:AE
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 1926
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1898
Signing time: Sat 14 Nov 2026 16:26:50 +0000
Manifest this update: Sat 14 Nov 2026 16:26:50 +0000
Manifest next update: Sat 21 Nov 2026 16:26:50 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: v6Z8vIHrhTMc4s8QrwnksSyNagFXRTKact60wnLETiQ=)
2: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
4: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
5: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
6: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
7: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
8: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
9: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
10: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6438 (0x1926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Nov 14 16:26:50 2026 GMT
Not After : Nov 21 16:26:50 2026 GMT
Subject: CN=6af88bca-1ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:73:fb:49:52:a7:4f:3b:52:7a:d3:c4:da:
a4:78:14:50:a5:e4:27:68:96:8f:37:04:ae:d6:c6:
f1:75:ac:90:a7:ad:b7:44:4f:31:5a:1d:83:ad:2e:
43:90:a2:c4:d3:ba:f7:86:0b:28:6d:7b:3c:ca:88:
93:2e:4e:52:9b:f8:b5:d8:8d:ec:08:c5:02:6c:d4:
bc:56:37:fd:6e:09:ce:12:08:14:69:0d:60:c1:98:
81:5d:89:6a:34:46:71:37:4a:ad:62:c3:fc:21:ff:
b7:59:2f:a6:c2:50:5c:ef:d6:d0:c9:4f:c5:c2:2f:
ee:bb:18:31:f1:62:75:0a:3b:63:9c:38:de:7e:6e:
d1:64:81:e3:d6:11:24:e2:33:29:57:e1:24:f0:b5:
c6:b9:8f:ea:41:cd:bc:22:0e:dd:08:d3:bb:62:bb:
a6:86:1a:b1:85:90:bf:49:06:e5:43:f5:f3:64:82:
21:65:1f:ef:49:14:a5:34:f2:75:22:93:79:dc:a4:
fe:1f:0b:b6:2d:9d:1f:20:99:9c:ec:89:ce:20:56:
b6:f8:a8:98:7d:de:cc:39:b9:16:87:ef:46:11:78:
a6:7a:f9:da:8b:37:f0:c4:4e:5e:1a:27:fa:fc:ef:
04:d7:5d:c1:bd:8c:3b:80:89:bf:fc:27:47:e9:77:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AF:F4:49:47:AC:CD:78:38:4A:8F:F3:AD:28:D7:7F:92:D9:EA:AE
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:bf:e2:18:e1:26:2a:77:9f:06:af:58:32:ac:6c:9d:62:
9e:0b:65:d1:a2:16:14:9b:e9:8f:11:a2:b6:99:6e:7f:f1:7b:
1d:1c:c8:e6:49:0a:49:5a:b0:6d:73:7d:d0:79:3e:ab:82:61:
f9:f0:4a:14:27:c2:b8:3c:3d:d1:08:b4:bc:21:38:58:cc:dd:
da:2c:0a:a5:3a:34:de:31:bf:b9:23:21:f9:0a:03:56:bf:d8:
35:46:ec:75:ba:72:ce:95:2f:11:4f:ae:26:1f:7e:86:60:21:
77:5b:b3:61:ee:f3:04:54:8f:aa:4d:1d:bf:04:d3:74:5f:d3:
65:73:32:0b:9a:c2:43:63:a5:b1:37:7e:e5:f2:4c:40:12:0e:
4c:d8:75:37:27:c0:af:30:3d:65:01:dd:ee:28:82:c5:d7:31:
6b:2a:68:82:18:1f:d7:26:f3:d3:c9:83:c4:95:ff:3b:39:f7:
90:dc:fc:02:fd:a8:14:46:e2:78:52:bb:2d:a6:80:4c:52:82:
07:3b:e2:72:12:8d:06:82:dd:da:4d:68:19:81:34:89:c2:35:
e6:62:6e:a5:5c:bb:86:be:f3:a7:92:b0:53:b7:c4:ec:74:8c:
f1:5f:74:1a:eb:d7:f6:8c:68:1f:cd:bd:0d:1a:dd:64:c1:fc:
2d:d2:43:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:52:36 2026 by rpki-client