
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json)
Hash identifier: QKwbQTn6+vaMHitgUfFA7vB4fWyimaErQWSaoCVW8vc=
Subject key identifier: 28:97:2E:3B:A3:A7:99:52:81:23:CB:76:D7:58:4D:48:E0:78:4D:39
Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Certificate serial: 08CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
Manifest number: 08C0
Signing time: Tue 12 May 2026 20:31:41 +0000
Manifest this update: Tue 12 May 2026 20:31:41 +0000
Manifest next update: Tue 19 May 2026 20:31:41 +0000
Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: nrGb1fqAEkqqoW2T27GmnOvMLEDCDlZr2BbvCZefPYc=)
2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: DoGtO0ioSkETngbYqtxgGr43fZyQW1n/adtL23ovKKA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6
Validity
Not Before: May 12 20:31:41 2026 GMT
Not After : May 19 20:31:41 2026 GMT
Subject: CN=6a038e2d-8c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:e5:62:d3:6d:3a:7e:de:b8:bb:5d:64:07:
7d:20:30:04:d4:30:75:92:a3:58:7b:84:09:68:be:
4b:d8:9b:f2:e9:f0:8c:9b:39:12:7f:92:64:87:a3:
6e:ce:f0:44:9d:1f:51:28:89:7b:ce:ae:c2:2c:39:
0d:99:20:be:f4:1d:46:47:6e:a2:60:3a:cb:22:3e:
c5:c6:bf:ee:b1:41:12:d5:29:9d:d9:4b:ea:f0:35:
ad:21:ab:ea:87:38:5b:49:5a:ce:57:5a:40:6b:5e:
61:8d:47:af:b3:6e:a4:2d:b0:4b:5f:ca:23:b8:2b:
3d:e1:60:b7:e5:35:22:e9:89:95:ad:0b:5d:c8:fb:
97:ed:5c:76:27:1c:c9:71:90:19:66:07:40:89:30:
30:48:47:31:4f:15:67:dc:cb:14:64:ed:4f:1f:bf:
59:0e:f7:1b:24:49:b0:68:6f:bb:0f:d9:3e:c8:74:
39:67:ba:ce:43:33:2e:9b:46:9d:0b:8c:6b:fd:35:
c6:aa:11:f2:21:bb:6e:c2:19:16:e2:fd:35:ad:3b:
86:cf:14:63:13:f7:f9:28:6f:28:9e:f6:e3:b8:b1:
4d:ed:2b:92:ce:9c:b8:a0:ab:5f:75:81:5c:ff:d4:
74:57:9b:0a:77:5a:e3:9e:d5:f8:fb:54:cb:de:c0:
3a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:2E:3B:A3:A7:99:52:81:23:CB:76:D7:58:4D:48:E0:78:4D:39
X509v3 Authority Key Identifier:
keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:81:9d:9d:2b:4b:10:9f:43:b5:c6:a7:7d:e1:73:7a:28:24:
6c:3a:f1:84:27:68:b6:f1:49:3e:c7:76:53:f6:04:6f:32:b9:
53:69:12:68:31:96:23:5f:26:47:26:ff:89:eb:76:57:8f:c9:
ad:3c:0a:91:08:3d:ad:bc:ed:9c:29:dd:33:eb:2b:44:c5:6d:
97:60:fd:1e:2f:96:b0:21:1f:8c:ae:f1:b8:5b:ab:25:c1:b7:
be:7c:13:3d:98:7c:33:a4:a6:6f:64:70:31:e4:dd:16:14:12:
73:15:9f:80:b5:17:39:9b:a6:74:bb:23:78:5f:84:d9:85:6d:
da:f9:3c:cb:78:50:7f:90:69:a2:cd:e7:91:b5:47:79:7c:8f:
88:69:67:39:02:92:64:9c:19:51:fb:ee:75:8b:25:80:8a:bb:
1a:f8:9a:55:f5:89:ca:3a:ef:ce:5d:38:b0:3b:56:63:9c:2b:
f2:dd:f3:54:12:ce:11:a9:0a:e6:58:b4:f9:cc:c7:e0:c9:5c:
9b:a7:d5:33:aa:31:15:c4:99:d9:91:c3:f4:94:de:f6:f6:87:
c7:f5:93:4f:a3:03:2c:13:cb:4b:f4:71:81:8a:27:12:66:87:
bf:dd:10:36:50:e3:1e:7a:07:58:76:46:71:5f:d0:8e:dd:9e:
d6:6c:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:05:02 2026 by rpki-client