
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: MGI7mSgSFOvgVydFSCQiuoBwXiHOHo8X/WyT5r6ow3Q=
Subject key identifier: 2C:99:0B:24:02:2D:45:7C:5D:14:DA:25:DF:A7:37:D7:91:5A:30:95
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 190B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 187D
Signing time: Tue 22 Sep 2026 16:27:29 +0000
Manifest this update: Tue 22 Sep 2026 16:27:28 +0000
Manifest next update: Tue 29 Sep 2026 16:27:28 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: 8yVlzOiRCTwjD6ZNjCQ89tqQVrU7/s6ZJIRGGVSDuG4=)
2: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
3: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
4: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
5: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
6: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
7: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
8: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
9: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
10: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:27:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6411 (0x190b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Sep 22 16:27:28 2026 GMT
Not After : Sep 29 16:27:28 2026 GMT
Subject: CN=6ab2ac71-66f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:40:b4:db:5b:0e:a5:3e:b2:61:36:ea:99:c2:
e6:58:27:f3:20:b1:34:b1:8c:3c:5d:7b:89:b9:d0:
73:3f:53:bd:e6:59:e3:60:1f:4c:ac:31:aa:b4:22:
6e:fe:5f:06:e5:75:f3:98:ed:41:0d:eb:04:10:a1:
db:8e:3f:2a:40:a0:9b:84:85:50:64:7b:e1:16:c0:
64:c2:32:8d:7b:c5:96:33:00:b8:c1:76:dc:b0:d4:
18:ef:7e:49:d1:7b:c7:2b:58:03:7f:1a:e7:cd:af:
6c:09:43:a5:76:ec:b0:3a:e4:66:2d:0d:9a:e5:d1:
39:f6:4c:b2:d8:55:07:10:46:9a:18:bd:bf:d9:c9:
47:b3:6f:ed:69:b2:4e:bb:08:89:17:bb:68:ef:8a:
80:23:00:d7:52:f2:af:33:01:10:05:86:18:97:64:
7d:9d:85:0e:8b:78:82:f3:17:1b:22:ec:17:4d:83:
b5:5d:18:81:b3:b9:75:f1:57:84:41:63:5b:91:b3:
d4:00:10:70:7f:2c:54:9d:9c:bf:59:94:33:53:ae:
ba:78:86:b2:5f:94:49:e4:73:0e:ae:e2:5b:ab:fa:
49:2b:06:13:db:64:0f:1f:dc:30:dd:bc:b3:3b:3f:
97:fe:8a:eb:a8:33:16:7d:d6:c9:30:5e:42:b8:a2:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:99:0B:24:02:2D:45:7C:5D:14:DA:25:DF:A7:37:D7:91:5A:30:95
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cb:ae:9d:93:6b:4d:df:32:09:50:24:d1:a1:8f:83:73:b2:
3e:be:38:7a:41:37:6f:97:18:7f:e0:b4:02:e9:ba:14:70:21:
c4:54:3c:1b:58:25:a1:87:cb:e2:08:4b:13:93:a6:69:3c:f0:
3b:74:ec:74:8b:f7:f9:cb:49:2a:b9:e6:8f:58:73:5a:53:1f:
e9:9b:2c:25:92:84:22:1e:70:d5:f4:04:9c:b6:c4:92:ce:e2:
63:96:12:f2:60:a3:fd:a2:b9:59:21:4b:2b:29:c4:55:a3:3b:
c5:bf:e4:f2:6c:b3:e8:37:20:5d:70:70:d7:b3:88:7c:eb:ca:
16:75:ce:f6:1d:c8:55:e1:f5:f2:35:e5:53:ce:b1:83:cc:4d:
51:95:68:3a:67:11:65:b5:20:a6:0d:69:4f:70:43:de:f7:2e:
4e:da:de:82:9c:ae:15:9d:5d:f7:e7:57:2a:c5:5b:6f:b1:77:
b5:7c:ea:0a:35:d4:35:b7:0d:6b:dc:cb:05:39:af:22:27:af:
23:7e:97:20:63:38:ee:49:a6:fa:e3:9d:16:21:33:6d:f2:e7:
2e:64:06:e0:7e:68:da:40:3d:a8:8c:2a:81:99:c4:5d:58:fc:
f4:91:ec:07:f8:37:11:f3:fb:59:2b:7d:5a:04:2d:a0:76:44:
e6:87:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:32:32 2026 by rpki-client