
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
File: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft (raw, json)
Hash identifier: pl+MVHkmXXAmYAcKDYfVzSxxkcr8igBZ2rBxcquP/wA=
Subject key identifier: B0:AC:24:E8:DD:E1:88:9D:E0:5E:48:E7:0B:16:FC:C1:27:34:CE:FA
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Certificate issuer: /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial: 07FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
Manifest number: 07BE
Signing time: Sat 10 Oct 2026 21:33:12 +0000
Manifest this update: Sat 10 Oct 2026 21:33:11 +0000
Manifest next update: Sat 17 Oct 2026 21:33:11 +0000
Files and hashes: 1: 70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl (hash: QKTuw3bfvAK9H3VkWytkl2+ll84/yyclGYF64ypdZGk=)
2: 8065DE3E355D11F0A8C7F559C4F9AE02.roa (hash: A40clfmAKuJ8DEHrvMmO8Qnj68wptppXgv295ggRwK0=)
3: 364089B4D75511EF80E68A39C4F9AE02.roa (hash: DnHW+mUJVZtv9B6gIXhv28KjbtfF/KXWmIFAYGVyHlE=)
4: 5997C4D0719A11EEBBA64415C4F9AE02.roa (hash: E8oectp52r79zD2pll37RXbntNqRlP25s0rz04IvcYE=)
5: 34956990D75511EF80E68A39C4F9AE02.roa (hash: DPlXMT8frXQbGoG9pLaFh0WB63E0zOeIFvm13T+J4dI=)
6: 35A4EFE0D75511EF80E68A39C4F9AE02.roa (hash: w9Hm03eT/l3NaX+cWE9OYZMWae4MoDDL8yDbbkk4nA4=)
7: 58EBEC82719A11EEBBA64415C4F9AE02.roa (hash: 74fwn/pB3FeTVbF+ifCCl3ioLhx2dKq5ZlY27D8g9dQ=)
8: 05F05106586011EE9399A92EC4F9AE02.roa (hash: NRdz74W1noDs/Jst6l7nB8fE2ZHETWFi07LKykhjq1A=)
9: C0681BF2CF4911EF8531B085C4F9AE02.roa (hash: FuAuOSeZqyhv7xBUkLpYtgZN4CG+Zmtssp+xgIjrFpk=)
10: 80DE56F2355D11F0A8C7F559C4F9AE02.roa (hash: Z5JNXuyK8pVpVTXZRSw/3NXfULy4gdDfbm5KVqS1fJs=)
11: 3524F8BCD75511EF80E68A39C4F9AE02.roa (hash: Lc4YME8skp8fONCgNP9FlElHrE/WnBABUYskf2DRHEI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 21:33:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2046 (0x7fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Validity
Not Before: Oct 10 21:33:11 2026 GMT
Not After : Oct 17 21:33:11 2026 GMT
Subject: CN=6acaaf18-8592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:52:96:0e:fd:4e:cc:8e:d7:eb:33:e6:8a:
38:7d:57:58:a1:d0:45:d9:92:8b:dc:20:f0:af:2e:
10:f8:bd:cf:af:c0:5b:61:88:9d:b0:e4:95:14:3c:
f6:c6:79:d7:eb:1c:e1:57:0d:05:40:ff:83:23:1b:
01:d2:b4:23:42:65:3f:99:fa:da:39:5d:0c:d5:fb:
ce:22:be:77:4a:31:2a:00:c6:07:50:e2:ec:41:17:
0f:45:d1:22:a4:bf:c5:2c:ab:a7:ab:72:a0:92:2a:
86:ed:56:11:01:e3:98:f5:13:f5:7c:c2:ba:f3:7d:
f9:a9:29:b5:45:0f:a8:cd:c2:75:79:37:27:8a:10:
bb:df:41:9f:1b:14:76:3f:75:3c:4b:0e:d6:8c:b2:
5e:71:e0:fc:2a:d1:73:71:19:ba:99:df:02:ec:c3:
85:41:47:3c:13:9a:2f:ce:1e:cc:04:da:2c:6f:d4:
14:79:60:02:8d:8b:ea:6d:68:12:62:c2:25:2c:11:
32:19:41:b1:df:15:c1:05:1f:65:a6:68:84:72:72:
ba:f0:92:86:c5:df:5a:f1:44:be:13:ed:11:4d:7d:
73:3d:85:65:f2:d6:2f:8c:16:fd:9b:10:49:1c:e7:
cb:17:41:f6:a0:77:f9:36:6f:45:82:f2:e8:95:99:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AC:24:E8:DD:E1:88:9D:E0:5E:48:E7:0B:16:FC:C1:27:34:CE:FA
X509v3 Authority Key Identifier:
keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:81:38:d5:0e:70:5f:73:18:1b:31:32:f7:4a:4c:f0:e3:ad:
48:3b:4f:df:b3:ef:82:7c:c9:1a:21:2a:e0:4e:d0:84:44:fc:
ad:d8:03:b0:85:05:d6:66:0f:60:45:94:25:77:bf:25:93:39:
3f:85:50:ee:78:76:c1:26:87:11:b6:6e:2c:ac:c7:4d:f7:a2:
39:02:30:e2:d2:c9:38:10:a9:0f:37:86:33:24:e9:f5:b4:5a:
4f:1a:79:de:9e:f6:98:12:ff:9b:cd:e5:d1:f3:c7:5a:8f:7d:
33:f8:e5:a7:8d:c4:9b:e0:2b:36:80:e5:f4:7a:2a:28:75:fe:
25:ef:92:40:d1:5e:b6:5c:9d:32:76:dd:14:01:5d:62:c6:5b:
f6:ce:f8:81:8b:e5:ae:0f:a4:6f:39:b4:5d:89:d2:de:34:12:
a1:5e:6e:52:7b:7d:af:fc:73:2a:03:e4:5b:89:c2:54:dd:7a:
44:77:bd:25:60:87:d4:ca:19:3b:9b:06:4e:bb:dd:1a:f1:24:
00:50:64:81:42:9a:d1:a3:ad:2e:ab:e2:d4:15:8f:dc:1d:c9:
dd:a4:97:e4:14:e5:77:3a:69:8a:70:ed:47:7b:a6:9c:f5:91:
9f:99:12:c8:9b:47:7f:0f:da:d1:4a:e5:c4:b7:73:d0:b1:9e:
bf:35:1c:e3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0
QzkxNTRGMjQwHhcNMjYxMDEwMjEzMzExWhcNMjYxMDE3MjEzMzExWjAYMRYwFAYD
VQQDEw02YWNhYWYxOC04NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZBSlg79TsyO1+sz5oo4fVdYodBF2ZKL3CDwry4Q+L3Pr8BbYYidsOSVFDz2
xnnX6xzhVw0FQP+DIxsB0rQjQmU/mfraOV0M1fvOIr53SjEqAMYHUOLsQRcPRdEi
pL/FLKunq3KgkiqG7VYRAeOY9RP1fMK68335qSm1RQ+ozcJ1eTcnihC730GfGxR2
P3U8Sw7WjLJeceD8KtFzcRm6md8C7MOFQUc8E5ovzh7MBNosb9QUeWACjYvqbWgS
YsIlLBEyGUGx3xXBBR9lpmiEcnK68JKGxd9a8US+E+0RTX1zPYVl8tYvjBb9mxBJ
HOfLF0H2oHf5Nm9FgvLolZm43wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCsJOjd
4Yid4F5I5wsW/MEnNM76MB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkI0RC9DQTU2M0JFODY1MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlL
NXRuV0l2bXVfWHBNa1ZUeVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAiYE41Q5wX3MYGzEy90pM8OOtSDtP37PvgnzJGiEq4E7QhET8rdgDsIUF1mYP
YEWUJXe/JZM5P4VQ7nh2wSaHEbZuLKzHTfeiOQIw4tLJOBCpDzeGMyTp9bRaTxp5
3p72mBL/m83l0fPHWo99M/jlp43Em+ArNoDl9HoqKHX+Je+SQNFetlydMnbdFAFd
YsZb9s74gYvlrg+kbzm0XYnS3jQSoV5uUnt9r/xzKgPkW4nCVN16RHe9JWCH1MoZ
O5sGTrvdGvEkAFBkgUKa0aOtLqvi1BWP3B3J3aSX5BTldzppinDtR3umnPWRn5kS
yJtHfw/a0UrlxLdz0LGevzUc4w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:39:15 2026 by rpki-client