
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: FttnXzGBoqp+dobG1EvjEb1CAaWLZlWjqpIUjZX5A3w=
Subject key identifier: 3F:F8:44:92:CE:B5:E1:D4:0E:8E:75:52:CC:38:D7:28:AC:53:D7:C2
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 060B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 05D6
Signing time: Wed 22 Jul 2026 23:53:28 +0000
Manifest this update: Wed 22 Jul 2026 23:53:28 +0000
Manifest next update: Wed 29 Jul 2026 23:53:28 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: x3KLaNDrVr8ibSMP/rXvVXZi+ou9upKN/JJvZvWTOt4=)
2: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=)
3: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=)
4: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=)
5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=)
6: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=)
7: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:53:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1547 (0x60b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Jul 22 23:53:28 2026 GMT
Not After : Jul 29 23:53:28 2026 GMT
Subject: CN=6a6157f8-dd20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:df:a8:e6:ca:0f:98:f2:66:e7:88:75:79:
19:39:d9:28:e4:eb:8b:74:4a:2b:ed:f7:0a:ee:84:
ea:1b:3d:10:83:ea:8a:bc:99:47:f0:91:02:f6:e9:
af:e5:5a:14:06:1e:4d:3c:87:45:f8:d9:2d:15:ba:
2a:9d:03:c2:ee:a6:80:13:be:74:77:b1:9c:0d:96:
26:fb:4c:b7:19:d3:a2:26:2e:9c:3c:ca:d5:9b:3b:
8c:85:10:6a:1f:8d:a3:9a:ff:0b:2c:77:a9:39:e7:
9b:e8:ed:b7:6b:e1:d8:cf:cb:ac:fe:bd:06:bd:df:
c1:fc:43:f0:35:dd:4e:b9:9a:57:ab:a8:26:45:3b:
5e:8f:23:70:86:73:e7:4d:5b:34:26:7f:65:4f:16:
10:a0:2c:cf:24:fb:f0:4b:d0:ea:bc:ec:3b:40:74:
2a:b6:f4:a2:87:f2:01:ba:7c:21:32:42:ab:9c:90:
2c:ed:67:a2:68:ec:ec:b5:c8:82:b2:22:fd:09:e2:
1a:a2:54:5f:55:cb:4a:44:76:56:12:6c:6b:94:4b:
5e:ce:dd:3d:7c:41:9c:18:4b:98:87:8d:b8:cf:1b:
12:c3:3b:d5:88:6a:2e:22:e4:15:0d:17:82:83:81:
52:ef:bf:d3:6f:15:72:2d:4e:3a:39:83:68:ee:04:
f3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:44:92:CE:B5:E1:D4:0E:8E:75:52:CC:38:D7:28:AC:53:D7:C2
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:1c:ab:57:84:b5:1c:3e:ce:eb:ba:41:6f:66:94:17:89:0b:
bd:1b:9e:5d:0d:ef:c7:25:fc:4a:10:e9:2c:13:17:68:49:59:
41:06:cb:da:f8:31:e3:dc:8b:9f:6e:c3:09:3b:d5:79:bd:d2:
6b:69:47:41:d4:0d:51:d7:92:02:09:fa:b9:f8:b5:36:00:b1:
4d:87:20:51:af:59:8f:8e:7b:23:bf:91:51:3f:5e:ed:b4:a9:
85:8f:4e:74:43:2e:1a:09:63:bd:46:84:03:4d:5a:25:22:9b:
b1:1f:da:ca:40:c3:df:fd:0d:22:8a:59:74:92:e6:78:84:f9:
00:65:17:5a:29:83:8d:2c:e5:ea:a7:cd:88:66:b7:52:93:9c:
02:a0:24:f1:18:af:eb:09:38:60:f0:2e:c0:af:b8:3c:13:e3:
ae:f3:a0:f5:b2:90:d7:0f:95:4a:03:5e:f7:20:36:0a:99:77:
9f:0f:e0:04:f4:90:40:d5:ea:ed:25:9d:74:51:28:a7:e8:8a:
ec:18:f8:94:78:25:cb:36:e1:22:c8:cc:89:dc:d0:dd:a5:55:
ac:92:b5:83:b9:cf:95:42:bb:ee:b7:2c:a7:99:23:84:80:e1:
6a:d6:3a:60:1c:2c:f4:c3:d6:f0:16:18:6b:76:fc:57:0e:0c:
44:6c:0a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:53 2026 by rpki-client