
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: HnLJAXb4h8hQEEtDK/hTJy17eifjHYxGfWXHA03wSZ0=
Subject key identifier: 94:19:F3:B7:52:90:5A:CE:DF:3E:31:70:D4:DD:46:82:71:94:28:7C
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 0630
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 05FA
Signing time: Tue 22 Sep 2026 22:42:54 +0000
Manifest this update: Tue 22 Sep 2026 22:42:54 +0000
Manifest next update: Tue 29 Sep 2026 22:42:54 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: b8ToU0qZ/kE5nwO6lT6b7td6PAXMkJqZoULuCWD6Nog=)
2: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: Llq8/Xlvmvs7fWUQmUTFmoYLL9C5z/28iM22A4jGmVI=)
3: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=)
4: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=)
5: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=)
6: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=)
7: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1584 (0x630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Sep 22 22:42:54 2026 GMT
Not After : Sep 29 22:42:54 2026 GMT
Subject: CN=6ab3046e-fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:80:11:58:a8:06:c1:30:e1:c4:c5:ac:82:
bb:f7:1c:59:97:a1:82:20:4e:c3:0c:95:b0:fb:8d:
0f:69:a5:66:8b:3d:ab:6c:c6:46:04:3c:43:64:ed:
68:82:04:c1:48:c7:ad:bd:42:a1:ab:f8:04:e5:44:
cc:16:75:27:54:d2:ee:2c:2a:71:27:77:0c:03:d1:
ba:4e:32:2c:37:a2:49:0c:12:2e:5a:53:bb:ea:68:
e6:4d:89:55:87:c4:00:af:d3:57:32:12:f2:e4:6e:
0c:3f:22:3a:99:fb:de:fa:22:ad:f7:f7:0c:b1:ec:
14:37:e5:a3:04:80:4a:4c:6a:1d:31:c0:c5:f6:78:
b8:40:62:4c:44:d3:4b:f1:76:0c:9e:72:58:2f:19:
18:d4:43:b1:6e:a2:d3:72:fa:1d:70:89:7b:3d:8f:
10:16:62:b2:92:91:7a:fa:29:4c:c8:c1:94:13:57:
e1:9d:12:35:ce:2f:0f:8a:2a:c1:b8:a2:f7:fc:36:
32:f0:d8:06:6f:3f:3b:62:db:81:65:9c:3f:af:8a:
5a:b6:28:b1:4b:c2:c1:35:79:b6:7e:21:02:99:25:
57:6a:e6:d7:b2:7b:bf:11:0a:0e:76:b6:e5:5e:94:
7e:0d:20:62:11:93:62:ff:2f:ff:bc:05:c6:d8:5c:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:19:F3:B7:52:90:5A:CE:DF:3E:31:70:D4:DD:46:82:71:94:28:7C
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:bc:5f:6d:0f:e9:20:87:2f:4b:61:13:39:09:5f:eb:50:
22:8f:01:15:f7:42:d0:1f:f0:2f:8e:0f:f8:9c:95:52:1e:a7:
e0:dd:3a:b7:c3:a4:23:94:9e:83:2e:77:94:1d:2a:f2:88:a6:
56:6e:fe:ee:d4:43:e4:21:74:de:1f:59:7f:93:b2:4b:3e:c0:
9a:c3:da:07:33:bd:a8:bb:39:8d:2b:b3:88:95:b2:bc:ef:18:
33:97:75:85:54:25:5b:c3:55:ea:ff:2b:b8:f8:62:e7:f2:56:
1d:7c:51:23:eb:43:25:b3:03:50:e6:e3:48:70:36:52:72:52:
95:4c:1b:e9:b5:9c:88:16:f3:aa:44:34:3d:b3:2b:07:9a:16:
3e:20:9b:cc:11:92:bb:ad:17:64:43:97:95:99:34:d8:c5:ca:
08:91:d9:0a:b9:21:2f:64:db:83:67:db:b4:86:b3:62:6e:1e:
e1:e9:0d:17:cc:41:b0:b6:1c:74:91:3c:21:77:be:0a:56:9a:
df:b0:57:b3:54:cd:18:66:d4:ef:50:2c:30:90:89:42:6b:2f:
f2:d6:ea:e9:fc:0f:63:2a:3e:bc:aa:94:4a:5c:24:e3:3a:3a:
fe:82:d8:12:25:a4:bf:49:62:65:98:f8:20:ea:b1:76:09:97:
20:ae:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:07:07 2026 by rpki-client