
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: w+7CoGbw6f2Co+lIFGJ0xQtlz6HyqrgT7xT7uXxHp5w=
Subject key identifier: 74:ED:AD:E8:C8:49:6D:A3:80:35:0C:17:8E:A8:52:4D:71:8C:BC:31
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 18EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 185D
Signing time: Wed 22 Jul 2026 16:37:33 +0000
Manifest this update: Wed 22 Jul 2026 16:37:33 +0000
Manifest next update: Wed 29 Jul 2026 16:37:33 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: +AFDS8fBkUlm6252TuURnD3L9WiiJ1hN6VBL1tE6ito=)
2: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
3: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
4: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
5: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
7: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
9: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
10: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 16:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6379 (0x18eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Jul 22 16:37:33 2026 GMT
Not After : Jul 29 16:37:33 2026 GMT
Subject: CN=6a60f1cd-4c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:7a:8d:9f:9d:1f:d7:e0:7b:47:6b:20:98:
3c:c2:78:2f:79:d4:fa:79:3f:38:b4:2f:de:62:7f:
c8:ca:01:5e:97:d6:92:a2:5f:70:4d:58:90:35:f7:
a4:b3:c0:b5:c2:ed:5c:72:3c:3f:6e:fb:b1:01:d8:
c4:5f:fd:a1:b0:93:02:ea:f1:30:d4:1b:dc:68:35:
82:7d:2f:4a:e7:4d:55:50:59:89:01:0b:63:cf:df:
1c:7f:4e:61:61:da:59:36:2f:97:c8:41:99:db:c0:
f1:f4:c1:23:4e:c6:c9:a3:d7:47:ff:6e:63:c9:84:
f1:d8:d1:0b:8c:2e:b9:5d:6c:0e:cd:c5:4d:fb:b9:
c4:30:00:92:ef:14:7f:d7:12:1a:3c:e3:08:6c:19:
fd:75:0e:42:f9:10:72:8d:38:1b:98:29:7f:5d:bb:
ac:55:ac:a7:69:3f:ce:e9:99:b9:da:d3:db:0b:de:
8f:16:09:f6:26:28:0b:b3:ed:ce:d4:46:bc:29:21:
2d:67:45:7d:18:07:e9:bd:6d:4e:ce:7e:ca:52:a0:
c6:26:e7:d2:1d:53:ce:ca:24:95:0b:99:74:f1:69:
69:eb:76:63:c2:d8:b5:df:9a:46:54:35:d9:ce:fd:
81:89:b6:fc:ec:18:34:3d:7b:98:2d:75:e2:07:4e:
f3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:ED:AD:E8:C8:49:6D:A3:80:35:0C:17:8E:A8:52:4D:71:8C:BC:31
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:de:23:99:fb:c8:38:f9:60:c4:0d:3c:3a:05:a6:76:96:c1:
9b:68:74:e8:f9:1c:c4:c8:19:cc:41:e5:24:c4:96:fa:d9:ef:
a9:e0:a1:c7:79:c2:a7:2e:3f:2a:4e:de:d6:b5:ea:d2:d2:f2:
ee:ec:67:2c:87:c1:4b:8e:ca:d8:74:9c:9e:e3:6b:db:80:6c:
7c:d4:9b:b5:00:98:70:3a:21:43:e0:8d:a1:00:6c:06:c2:11:
f6:ab:34:2a:16:b9:b1:1d:17:1c:9b:bc:3f:c4:8a:07:88:59:
8d:69:18:13:40:58:16:f1:84:6b:e3:b0:ad:7d:09:a2:ed:7e:
ba:31:45:43:e8:49:97:65:9c:ba:c1:d5:15:2b:01:78:d1:58:
2f:eb:8a:ea:6f:a8:f0:16:1d:c1:ed:c9:fa:fe:8d:f0:31:4b:
d7:1e:6c:02:49:df:90:e7:e8:03:4b:f2:0e:7f:34:7f:2b:f7:
00:1e:87:db:7b:15:5c:c6:1f:37:9b:29:59:4d:57:71:24:91:
76:c4:ec:8b:13:eb:4f:cd:17:e1:e9:40:0d:0a:b0:ab:64:6a:
ce:eb:8c:71:2c:af:1d:f8:02:cb:b1:00:f2:87:7c:bf:80:c8:
9a:e8:60:da:1d:b8:a3:3e:2f:0d:d4:e5:dc:83:f7:c7:41:55:
45:01:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:46 2026 by rpki-client