
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json)
Hash identifier: zyE3DeoGNJp2zmM4nf21yuOYx+Fk+XUwSTJqL43eykI=
Subject key identifier: E5:EC:F8:AA:16:47:16:4E:1A:3A:EE:3F:59:BD:AE:A9:EC:A0:5D:AD
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial: 01F4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
Manifest number: 01EC
Signing time: Tue 12 May 2026 23:20:05 +0000
Manifest this update: Tue 12 May 2026 23:20:05 +0000
Manifest next update: Tue 19 May 2026 23:20:05 +0000
Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: aNQ5ca+CkfP5iFI2WNcZi/FsE4ApnQ26HuVh+cO39Pg=)
2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: h1GjFRWsL8zm9w/JK18XEZpcDgp9Hd5wn7O3sw9gPUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 500 (0x1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Validity
Not Before: May 12 23:20:05 2026 GMT
Not After : May 19 23:20:05 2026 GMT
Subject: CN=6a03b5a5-7f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:14:ec:37:6f:b1:8f:16:f2:c3:00:cc:56:01:
97:4a:06:1c:f9:75:0a:28:df:bb:c1:61:a8:0d:78:
6a:55:f2:9c:2c:81:ed:b5:41:9d:da:5b:d2:81:c4:
c4:60:e2:a1:f9:dc:b3:dd:af:24:e3:53:a6:99:34:
61:d8:f6:b2:2c:4d:42:18:6f:e6:d2:22:e7:1c:25:
ce:5a:17:50:99:4a:f5:72:4e:3e:01:6e:cd:aa:50:
f1:c3:fd:24:76:8d:b2:f0:bb:8c:21:68:04:2a:d7:
11:2d:e2:3a:65:19:1c:cf:24:3a:30:21:ed:a3:42:
46:b9:bc:d6:da:a8:7f:7d:1b:5a:70:39:b8:f8:78:
1c:8a:3b:3a:89:98:3c:ef:b3:f5:bf:55:8f:4f:f1:
76:a6:bf:a2:fa:1e:09:85:92:eb:8d:23:25:52:d3:
69:1e:94:48:e2:15:88:42:e2:59:67:f0:80:22:8c:
05:65:fb:92:8e:70:4d:39:4c:54:9b:d5:1c:1d:fb:
e3:73:38:6f:1b:d4:66:0f:99:13:7e:86:8c:c0:44:
e0:51:ef:bd:92:38:04:db:3b:a1:3f:a3:c5:37:d6:
26:43:ad:79:c7:0c:ba:62:fa:f1:bb:57:40:9a:72:
c1:09:61:11:d6:59:a4:4b:f8:55:6d:af:e2:79:ee:
c7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:EC:F8:AA:16:47:16:4E:1A:3A:EE:3F:59:BD:AE:A9:EC:A0:5D:AD
X509v3 Authority Key Identifier:
keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:99:24:62:0a:e4:ac:47:e1:e6:33:dc:d6:04:62:98:e5:9c:
67:42:fa:17:1e:3e:28:44:b5:ec:49:75:b8:6a:86:e7:ba:dc:
89:c8:24:27:8f:11:21:46:34:b5:85:a6:99:c1:62:05:77:b7:
84:2f:f7:a6:a7:55:da:00:bb:ae:21:38:d7:e6:b6:0f:b1:3e:
c0:0e:ef:b2:f1:93:08:e3:df:c7:e9:0a:ee:be:85:5e:4f:d6:
e7:d2:1c:bc:fc:9a:f0:7e:48:c2:30:8e:5b:4e:49:e5:a5:0d:
cb:a1:d8:38:bd:a3:57:14:9b:4b:bd:e4:5d:39:6e:45:59:bf:
b6:3c:3a:a3:1f:b7:c2:4d:af:56:b8:5f:17:9e:ad:c5:5d:60:
a0:98:5d:e5:99:cd:2b:6d:d9:6d:3b:c6:df:07:0a:33:54:0b:
11:a1:98:3c:77:61:15:55:b4:3a:cc:71:a1:ab:88:a7:af:54:
8f:29:29:8a:13:0e:86:0c:17:66:eb:ef:ae:ed:d7:e7:d3:ce:
af:9e:5c:f0:03:b1:9b:a1:1c:d5:3f:6c:d6:68:62:45:bf:39:
69:07:09:ec:a3:58:49:c2:23:11:91:d3:bb:7a:71:b0:38:c4:
11:f8:19:d9:d2:b5:e0:ad:6d:7b:ac:bd:4e:be:62:5b:aa:19:
ae:78:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:04:44 2026 by rpki-client