
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: keO5pN/Ymn26vhc5fRYPN2KmAGmEMLkX/WSyN6k7Ijg=
Subject key identifier: FE:18:DA:2E:14:42:6D:BB:00:54:08:56:80:46:FA:7B:7C:84:BA:BB
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 037E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 0345
Signing time: Fri 27 Mar 2026 00:46:18 +0000
Manifest this update: Fri 27 Mar 2026 00:46:17 +0000
Manifest next update: Fri 03 Apr 2026 00:46:17 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: XaaOV6LRddu8dO/oyh0dwTTRz64uEN77eYWa+Uc/uwY=)
2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
3: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 00:46:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 894 (0x37e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Mar 27 00:46:17 2026 GMT
Not After : Apr 3 00:46:17 2026 GMT
Subject: CN=69c5d35a-418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:81:a8:41:9b:20:cc:21:1f:e1:d3:81:e8:9f:
c4:c3:03:5d:14:5a:1c:f8:47:e1:5e:03:30:aa:93:
00:9d:c4:8c:db:13:07:0d:ea:78:7e:01:57:0a:3e:
5e:c7:7b:38:6d:68:a2:96:da:9a:20:6f:70:74:48:
3b:1e:bc:38:e6:20:cf:13:af:aa:cc:7d:81:13:12:
aa:da:77:ff:91:5a:2d:77:87:85:38:64:e1:bf:a9:
a6:80:27:5b:37:ce:d8:7d:46:f2:29:46:b9:8a:09:
3d:26:1c:99:a4:c2:e0:3a:33:51:92:0a:ca:6e:d7:
f8:37:8f:d9:ef:48:2c:a4:ee:30:40:f8:07:52:22:
de:6a:3e:96:e8:45:31:db:c9:b6:e5:8d:d7:8a:43:
f2:18:75:5b:39:fb:4d:d7:6c:aa:85:72:ca:69:a2:
fd:d4:cc:9b:0a:2b:e9:d2:a5:ae:11:2f:2d:1d:05:
80:99:26:66:9d:e3:b8:57:d2:68:e9:43:1c:9f:77:
fe:10:32:64:9c:94:07:fd:1e:c2:46:66:c3:32:82:
f0:8b:17:b3:fe:7c:c0:3f:56:04:e6:fd:71:49:8a:
f2:fd:05:5f:96:6f:e3:85:5e:ae:d9:80:a0:6c:bb:
74:a3:27:af:a2:a1:7a:db:64:bd:df:b7:b4:01:aa:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:DA:2E:14:42:6D:BB:00:54:08:56:80:46:FA:7B:7C:84:BA:BB
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:1c:7c:55:22:97:84:45:15:a3:16:21:fe:e9:81:92:1b:89:
95:4e:8f:9b:5c:6d:10:9e:6f:2b:1c:67:4b:1a:7e:a3:fb:b3:
35:c5:e8:a2:ec:28:cc:e5:80:32:45:d3:8b:a9:16:e9:8d:b1:
ee:f3:aa:fd:93:5f:20:d2:fc:d9:94:6b:24:13:4f:1e:78:2a:
c1:c9:67:2e:de:4c:a5:d4:15:95:e1:93:28:9b:23:cb:d5:95:
0f:dc:49:28:8b:4c:d4:4d:3b:14:c4:b7:32:0f:b5:6c:ec:4a:
f1:23:a4:c1:2d:5f:87:f5:93:90:45:a8:23:f1:33:51:8c:47:
b8:c4:20:4b:3d:fc:70:07:03:3b:df:29:62:14:f0:60:97:e3:
f4:11:a8:12:44:57:2b:4e:5b:2e:72:cb:8a:9e:95:fb:2b:41:
19:a0:03:3e:86:05:c9:24:6c:72:b3:da:b5:bd:8b:e0:c3:3d:
20:45:55:7c:39:d4:1d:82:c9:b0:d9:57:dd:8a:47:4d:e6:ba:
39:8d:a1:c6:67:b4:da:00:fc:2d:43:a6:a3:e1:13:bb:52:b2:
05:d5:69:a7:a3:b0:41:7a:07:38:49:0c:b0:ba:50:29:c9:42:
ba:fd:e4:2c:d1:70:17:4a:fe:20:26:ea:ac:5f:b6:ed:75:53:
4e:15:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:50 2026 by rpki-client