
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: oJMWveIZ0/LBUp5XAQhe73o3PP2ArEcql+SxSHcvfF0=
Subject key identifier: 6F:BD:F2:AD:B8:6D:A7:36:7A:81:EE:4C:5D:12:12:EE:58:6A:69:9C
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: 67
Signing time: Mon 11 May 2026 08:05:59 +0000
Manifest this update: Mon 11 May 2026 08:05:59 +0000
Manifest next update: Mon 18 May 2026 08:05:59 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: HWgOi4HvkjpaDumrL8rQVtdZL2YSFR6jyV7aAHg327k=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 08:05:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: May 11 08:05:59 2026 GMT
Not After : May 18 08:05:59 2026 GMT
Subject: CN=6a018de7-dacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:10:85:47:7d:5c:bc:43:26:b7:16:a6:72:f2:
84:d5:ce:38:9b:44:e5:53:bd:dc:7d:02:3a:6c:41:
88:09:f5:d9:57:e2:36:b1:bf:a9:ee:59:42:db:bc:
a0:05:32:7d:73:b3:90:72:06:c8:a0:f3:b3:b8:ad:
75:32:f7:e4:a4:03:1f:22:fa:2c:5f:92:45:c0:7e:
7f:8a:6e:a1:34:29:12:7f:55:d4:c2:24:0c:80:6e:
2c:8e:6e:65:fa:ec:f0:6a:c3:81:c3:fb:66:02:2a:
24:f8:58:87:0e:d8:ca:85:89:8f:e8:e5:bf:78:90:
04:c2:94:bd:1d:96:8d:81:f4:65:74:c5:6b:89:0b:
27:36:8d:d7:09:4c:c9:ce:e0:d8:f4:8f:f1:67:84:
75:59:0f:d3:8d:8f:7a:75:24:53:b7:6b:ed:83:59:
93:e5:5f:08:96:23:df:92:44:1d:e6:89:db:e4:a6:
41:eb:f1:62:fb:4f:1f:f1:e5:f7:d3:dc:0d:d4:ee:
a4:16:9b:bb:6b:fd:da:65:d6:84:48:fa:64:79:d9:
b6:a7:7d:46:73:02:fc:62:90:bf:1f:84:07:25:ac:
fb:1e:71:60:65:d6:40:38:04:c2:15:5b:36:75:cf:
14:76:fc:2f:a5:e9:b2:e4:1d:4f:1e:7f:33:b2:ed:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BD:F2:AD:B8:6D:A7:36:7A:81:EE:4C:5D:12:12:EE:58:6A:69:9C
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:bb:3f:52:9c:f9:9d:f3:8a:bb:ce:10:8d:27:0d:0f:dc:
e2:9d:9c:47:73:43:8c:10:1b:52:40:c7:86:0f:7c:79:b3:eb:
60:9c:5b:73:d1:93:42:12:ca:8c:fe:18:15:f5:3f:ce:7a:67:
89:97:70:d5:ac:66:b1:cb:2b:1c:ab:26:06:15:23:a8:69:5e:
59:c8:c8:c1:f1:50:a8:42:28:5c:4b:f8:5e:b3:16:16:48:9f:
8d:43:b8:b6:88:e8:55:2a:7e:cf:da:8b:11:f6:43:a8:24:64:
32:38:55:93:07:00:18:e1:b9:de:4e:a3:9d:37:92:a2:83:39:
ed:8a:f6:ed:07:2d:c3:92:86:79:cd:ce:e1:c8:ae:91:4d:0a:
ee:8d:e4:7e:65:61:d5:59:59:5e:1f:ae:f7:0a:07:3a:0e:c4:
da:ec:aa:a7:cd:cf:a1:dd:d4:45:3f:48:8d:db:2d:c8:3d:17:
99:8d:4e:24:43:35:3d:94:94:5c:7c:01:dd:fd:0b:d7:56:ad:
10:e1:1b:72:0d:db:5a:67:f2:63:19:f3:03:50:c8:a6:78:44:
1b:fe:60:50:45:6b:d5:c3:a2:d3:aa:13:48:21:11:aa:85:c8:
f4:52:9b:d2:fc:ac:c0:6a:fb:ac:af:ea:2b:22:c0:84:47:55:
41:91:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:26 2026 by rpki-client