
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: xjJ6hqgNddyOap7VOOoGRi0Sx6S+w8iJK2pOSEN0yLg=
Subject key identifier: 9B:8A:18:DE:93:58:68:95:32:A8:EC:11:5B:B2:BC:6A:8D:0D:AE:D9
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 03BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 0381
Signing time: Thu 23 Jul 2026 01:43:19 +0000
Manifest this update: Thu 23 Jul 2026 01:43:19 +0000
Manifest next update: Thu 30 Jul 2026 01:43:19 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: qRate/YsNbOjv3MyjxLLARY5SWFu6UQl47yBLkIR3Og=)
2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
3: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:43:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 954 (0x3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Jul 23 01:43:19 2026 GMT
Not After : Jul 30 01:43:19 2026 GMT
Subject: CN=6a6171b7-316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7e:69:db:87:0b:8e:41:77:c8:58:ea:82:9f:
37:e7:f4:e5:51:56:22:b5:f3:f9:8b:4d:cb:8c:89:
6f:ce:76:73:26:44:f6:bc:a8:e0:bf:aa:cc:72:40:
c9:b3:7b:fc:74:9d:9e:4e:3b:47:c0:34:de:f2:95:
94:e7:99:01:ec:66:6d:0c:2c:f3:5d:de:d0:f0:8a:
ac:6f:35:d7:7b:ef:e2:1c:fc:f1:d0:53:d8:ce:ad:
bc:42:83:50:ee:a2:d9:77:32:44:99:86:ef:72:57:
c7:c2:0e:93:8a:af:c2:94:e2:a1:2a:9a:d2:4c:10:
f9:64:2d:9d:74:cd:b5:70:eb:ba:6f:66:d4:20:0f:
a0:f6:3f:81:92:1a:29:58:03:82:3d:8d:7a:ef:42:
8a:f9:28:5c:f9:6d:40:c9:08:24:cf:1b:51:4f:4f:
6f:0b:4b:b2:df:b5:1e:dd:0a:69:06:b1:f6:c1:5e:
59:08:5f:dd:7d:f6:b3:11:84:17:89:54:84:56:9b:
31:2e:f1:5d:51:bb:0d:8c:2f:1b:e8:df:e3:6d:0b:
86:9b:aa:6e:91:61:82:00:4e:11:cb:3c:a9:6c:d6:
e8:f1:f8:f9:e4:da:86:3b:39:56:9d:de:b2:5d:49:
96:0d:65:38:53:4b:0a:ff:c6:22:fc:24:8f:d1:b7:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8A:18:DE:93:58:68:95:32:A8:EC:11:5B:B2:BC:6A:8D:0D:AE:D9
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:04:8c:e0:ed:cd:d7:44:3e:cd:bb:67:b3:8b:ef:eb:12:75:
79:0b:31:20:ce:33:a0:7a:ca:00:31:dd:8b:5c:5f:b5:7b:5e:
40:9e:f3:ff:a9:a1:16:d2:d7:72:7c:82:69:47:1a:99:df:3f:
7e:0f:a7:5e:f8:7d:51:f3:8b:d3:eb:0a:2c:76:98:5a:18:2d:
6b:25:be:28:0b:09:72:23:62:d7:cc:b3:07:73:87:99:0f:fe:
86:69:65:33:8b:6b:1a:e9:b4:dd:a7:dd:91:1b:a8:80:1a:11:
a1:1c:83:63:df:ed:a3:f3:dd:75:95:32:62:14:ba:c2:99:eb:
b6:05:23:bf:7d:ff:3e:72:10:1c:49:20:4c:aa:04:2a:99:bd:
d1:68:f4:4a:d7:ea:ba:b0:71:52:c3:e4:10:36:30:10:a8:25:
7c:1c:31:54:c7:df:c6:ca:75:df:9e:99:3c:29:2a:4b:9a:b4:
74:95:a8:5d:9e:65:18:40:59:2a:8a:4c:03:35:d1:b8:1b:f0:
0c:77:8c:f5:d7:c1:8f:f3:54:98:df:ce:d2:97:aa:ec:a0:12:
d2:62:8f:53:78:e1:18:8d:e4:93:91:49:c8:fe:cb:58:6d:14:
3e:c2:18:4e:dc:9d:3b:23:8b:30:19:ba:80:c0:52:57:08:c5:
10:8e:f3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:13:09 2026 by rpki-client