
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier: aJF8GhaP80yYGi5oSJbnYXqsUk0xjT+BTC/lh1bJQec=
Subject key identifier: AF:A5:EC:15:CE:44:44:E1:7F:5C:0A:6D:E3:8A:8F:97:5F:C0:0A:B9
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial: EF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number: EB
Signing time: Mon 11 May 2026 06:34:00 +0000
Manifest this update: Mon 11 May 2026 06:34:00 +0000
Manifest next update: Mon 18 May 2026 06:34:00 +0000
Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: 1ZXAvnl49KcR0DgE4Iy5D3+mkuuzGACFmZqIfSKDLvQ=)
2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Validity
Not Before: May 11 06:34:00 2026 GMT
Not After : May 18 06:34:00 2026 GMT
Subject: CN=6a017858-dd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:47:9b:ec:e0:dd:ec:46:99:7e:87:2c:1c:
55:23:25:cd:6f:77:8a:ee:08:03:88:66:2f:0e:56:
54:5d:40:ed:a0:c1:19:e9:11:fd:d1:8e:d1:14:c2:
30:0f:83:fa:5e:b9:6b:30:dd:84:13:0d:d0:ba:74:
de:ff:7a:a9:43:da:3e:a8:7c:e7:d9:0f:ed:54:3a:
a0:61:74:9b:d0:79:03:15:7d:f8:b9:5f:71:57:17:
2a:72:e9:26:05:83:d8:1c:79:9c:09:ac:1f:a1:9d:
96:99:99:32:1d:99:a8:a0:52:ac:c9:33:61:d6:4f:
ac:85:00:0f:f3:ff:d6:7e:87:f2:71:8b:2c:bc:12:
ac:36:97:6e:96:7c:87:94:0e:b2:00:3e:bd:2f:ed:
fa:fd:9d:0b:ad:f9:55:3c:71:37:5a:ca:6e:88:55:
8e:cb:13:d4:ae:f5:ec:33:45:70:e4:69:e5:bd:78:
6d:4d:aa:31:52:93:b5:ca:77:78:56:03:1e:33:e0:
91:c5:8c:2a:0a:7f:d2:12:a4:41:31:5d:07:54:7e:
e6:36:ca:26:46:4c:bf:d7:7a:30:3b:b6:3b:7a:bf:
a4:f7:8e:50:3b:04:ed:ee:69:b0:93:fc:d0:f0:ff:
8b:08:76:82:fc:b4:8b:62:cf:01:94:3d:38:5c:db:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:EC:15:CE:44:44:E1:7F:5C:0A:6D:E3:8A:8F:97:5F:C0:0A:B9
X509v3 Authority Key Identifier:
keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e8:87:1e:3f:d5:27:8a:b0:f8:24:04:c0:00:0b:68:05:de:
8e:de:7f:3a:a4:15:44:0c:60:cc:52:00:48:49:03:27:10:bd:
18:3c:ee:10:d4:a1:78:34:c1:e3:3f:04:70:cf:be:eb:8d:2a:
67:c2:37:e2:27:69:5b:1e:32:50:a7:9d:b7:60:bf:69:b5:be:
28:7a:aa:63:a5:a5:96:8c:b1:75:e0:ec:e6:f4:82:90:01:05:
05:30:a8:1e:20:30:03:a1:1a:78:7c:bc:7c:68:ba:cd:0f:7e:
5a:2f:f2:db:71:2c:f1:42:b7:7e:0b:03:28:57:75:df:78:b2:
24:7e:c9:a1:bf:b6:f2:e4:c3:fc:d3:06:a5:1c:a1:b9:99:e6:
2c:fc:de:4d:dd:01:05:a4:01:f2:48:05:d4:8d:2c:32:5c:c2:
d8:f2:1b:91:05:29:1d:9b:f5:fe:28:c1:76:af:bc:5e:be:cd:
55:40:4b:d0:ae:77:55:c2:28:cc:fc:9a:13:4c:38:fc:b2:8e:
83:c9:ef:72:c8:d7:aa:4c:55:10:a7:45:b6:52:b2:c0:b4:44:
1e:5c:a3:b9:fc:86:3b:78:33:d1:21:ea:d4:11:27:07:a0:09:
81:88:04:f7:59:a0:fb:9f:5b:41:38:13:10:e2:2e:ec:91:46:
4e:aa:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:16 2026 by rpki-client