
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: 7U2Irbhofchqo2r8REGv1zDPDRxG96TqQ7/Y3Stt2VU=
Subject key identifier: 47:90:45:54:53:76:A5:7C:E8:07:44:5A:8C:CD:2E:A7:4E:07:C5:33
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 1CDCECDAEF9C946738FA2CB66035507C9C7BF337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 0734
Signing time: Wed 25 Mar 2026 19:26:13 +0000
Manifest this update: Wed 25 Mar 2026 19:21:13 +0000
Manifest next update: Thu 26 Mar 2026 22:34:13 +0000
Files and hashes: 1: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
2: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
3: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
5: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
6: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: df4IEjXZIoxnuGzMpW5pyTNPb82EXeBzzRZ4QX63Pws=)
7: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
8: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Mar 2026 22:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:dc:ec:da:ef:9c:94:67:38:fa:2c:b6:60:35:50:7c:9c:7b:f3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Mar 25 19:21:13 2026 GMT
Not After : Mar 26 22:34:13 2026 GMT
Subject: CN=479045545376A57CE807445A8CCD2EA74E07C533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:80:62:5e:29:2d:bc:39:9c:da:f0:e7:ae:
bf:83:09:1a:46:99:b4:36:ac:62:5a:76:75:8b:5e:
80:04:28:53:93:be:fc:8d:f5:35:eb:14:44:e7:54:
50:85:0f:6d:ad:e7:9b:2c:33:1a:c4:36:50:dd:2f:
b5:36:59:41:d1:83:b1:bd:98:ab:10:b2:b5:0c:e6:
00:bc:e7:70:3a:72:84:d4:58:f7:81:92:5a:97:d4:
31:96:9f:d7:22:2b:47:e6:1c:b2:11:00:59:bf:d8:
57:b3:a1:68:72:75:31:bb:4e:f3:5a:a3:bf:31:15:
62:8b:68:a3:64:91:30:d0:15:43:68:0f:2d:e3:b4:
5f:10:ba:3e:71:4f:ae:ee:19:bb:af:0e:0b:f2:64:
d6:fe:58:6a:02:b0:99:3b:fb:b9:b0:a7:f0:77:fd:
41:7c:49:96:10:5f:ae:80:8f:f0:e8:79:6e:75:d1:
8c:cd:93:69:13:b5:41:29:00:cd:2a:e5:aa:b7:c7:
5f:03:16:8a:bf:cb:ba:fc:9a:50:5c:ef:6a:e8:d7:
f6:0c:da:b6:79:cc:f0:9c:cf:cc:33:2b:de:a5:cf:
0c:08:59:53:31:f6:97:26:50:f0:2d:4e:64:73:b8:
c7:b6:4a:7c:36:ad:75:48:61:0a:15:42:33:6a:ce:
c3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:90:45:54:53:76:A5:7C:E8:07:44:5A:8C:CD:2E:A7:4E:07:C5:33
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d3:23:67:2d:24:39:be:b3:ea:53:75:a9:53:fd:ff:f2:8d:
9f:cb:64:92:c2:2e:c9:f5:ee:ef:30:5a:0f:9f:05:f8:84:b1:
38:55:31:b6:92:7a:ee:4c:71:a2:47:cf:e7:3f:38:c9:76:93:
d8:58:6e:03:1f:16:2c:7a:c2:51:4a:88:f8:23:40:39:f8:32:
2d:a5:64:fb:0f:53:8b:9a:63:c7:fc:49:9a:c7:d9:e4:17:1b:
4c:24:d7:d9:df:20:b1:64:e9:32:86:96:6c:86:f6:16:4e:98:
b1:69:f6:96:14:7b:ab:21:03:c1:a5:63:85:7f:20:6d:68:7f:
3e:33:6c:ff:bc:08:8c:32:3f:a2:a1:44:5d:09:0b:65:fc:bb:
04:b2:55:91:6f:70:6c:b4:02:69:f5:27:1b:e0:c0:92:c9:53:
62:9e:ad:d4:d7:89:e2:2c:e9:a6:ac:02:7f:ef:e8:ab:77:b3:
07:8c:10:99:0e:b3:b6:5d:c8:dc:e7:44:a0:16:e1:2c:f6:8e:
f3:b0:3f:e1:58:85:96:61:17:f9:ce:2a:13:09:44:c9:8c:c4:
da:bc:89:68:e9:cd:06:d3:b6:84:64:9f:db:1c:c3:b5:95:9e:
0b:49:dc:24:e4:9d:d9:b7:45:e2:ad:fc:5f:fd:4e:30:33:0b:
97:ee:bc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:26:16 2026 by rpki-client