
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: tZmjwTuSh0siKwwelnCLKj4TpHGHfl+cFIT19FK0468=
Subject key identifier: 14:F9:75:A7:5E:24:80:E8:CD:F2:F1:DE:5B:DE:0F:2E:CB:85:29:E9
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 05E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 05B0
Signing time: Tue 12 May 2026 23:20:11 +0000
Manifest this update: Tue 12 May 2026 23:20:11 +0000
Manifest next update: Tue 19 May 2026 23:20:11 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: oi3W8vnRgGpwQcjHuBbl2vaxpX6JeI1cDV0qFnEU2e0=)
2: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=)
3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=)
4: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=)
5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=)
6: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=)
7: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 23:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1509 (0x5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: May 12 23:20:11 2026 GMT
Not After : May 19 23:20:11 2026 GMT
Subject: CN=6a03b5ab-abec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:d1:d0:eb:69:90:20:5c:94:d3:23:fd:78:
e0:88:0c:18:36:c1:e6:e8:17:f9:e5:64:64:f7:46:
3c:5f:23:13:bd:89:e6:b9:c2:9e:f3:dd:aa:b0:07:
9e:fd:71:3e:f8:0b:d6:82:f5:13:5e:c6:81:4a:44:
29:4e:d4:14:87:78:f5:fc:aa:f8:c8:60:2f:b0:bc:
40:9f:77:98:73:61:db:82:05:9b:a1:8e:a9:b4:23:
92:c0:13:72:04:72:58:9e:e5:00:7b:3c:d1:fa:f7:
8e:a2:d0:0a:d1:d9:65:87:0b:b9:e6:12:11:19:80:
fc:14:48:41:96:a6:66:2a:0b:1c:9a:1f:1d:c0:a4:
8b:b4:e7:db:f9:fb:4b:ce:26:6b:d9:0d:9e:05:23:
d9:de:6d:88:cc:73:30:47:8d:38:46:90:80:f8:e1:
3a:1a:5f:cd:36:0c:cd:a0:39:d5:17:49:dd:76:73:
58:b2:ad:57:34:92:f7:c5:3e:01:32:98:84:37:eb:
4b:9a:67:46:af:84:57:fe:b7:41:0a:13:18:b9:61:
a5:1f:d3:b3:f6:3d:aa:35:d3:fb:dc:fc:9a:65:57:
38:4c:4d:25:4a:e7:df:7e:9f:c2:7d:ae:c7:ea:17:
45:70:70:52:07:a9:c7:e9:69:f6:c4:41:2c:e5:ba:
00:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F9:75:A7:5E:24:80:E8:CD:F2:F1:DE:5B:DE:0F:2E:CB:85:29:E9
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ae:04:ee:02:40:1c:60:c2:74:fd:0a:38:e2:2f:c9:00:f4:
06:f2:58:e3:2e:45:05:85:b8:ef:91:c3:f0:94:6f:da:a4:92:
97:df:71:ca:a6:a7:bb:b0:8b:12:12:88:c3:d5:0c:6d:90:e4:
75:13:1b:17:b9:c7:01:a8:0f:74:d2:26:9d:b1:0d:79:f3:ca:
f0:2c:f7:f3:c0:aa:4e:55:b7:8f:88:43:fc:ee:2b:c9:78:26:
2f:dc:0f:20:ce:db:62:4f:9f:d3:9b:df:10:c0:f1:3b:2c:7d:
2c:d8:8d:22:d5:a1:8b:b0:a7:2e:29:70:3e:69:29:ea:67:2c:
3b:0f:94:43:eb:9a:d0:fc:4f:28:d8:5e:22:bf:48:ef:ce:ca:
32:7e:1c:e1:c6:bd:e4:93:15:6f:08:3f:20:0c:4a:6f:7b:0b:
03:52:c5:6d:ac:6f:ed:9e:63:0d:f9:42:cf:8d:b1:1c:06:ed:
49:34:d9:3d:3b:08:cc:30:95:7c:7e:0a:c4:08:eb:46:74:8c:
6c:84:af:2c:8e:4a:ed:05:89:87:6c:a5:be:47:99:7d:d4:08:
7f:23:11:8b:c7:39:6d:10:90:bc:8c:94:af:c7:1b:92:d9:12:
f4:9a:e2:56:a5:e4:ae:c7:27:99:d0:9c:65:66:a4:77:9a:28:
a7:ac:67:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:33:35 2026 by rpki-client