
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: j6x6siyJ7ohOCJOTH7CbSPlH9a5T6+f5ciQkkAYGTRQ=
Subject key identifier: 19:A2:EF:93:5E:7E:58:B4:5E:C3:B3:32:30:EF:22:8E:95:79:58:1E
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 6AAE7157873D84AF61030A1AEA69BFE645451D62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 07DC
Signing time: Thu 23 Jul 2026 14:39:02 +0000
Manifest this update: Thu 23 Jul 2026 14:34:02 +0000
Manifest next update: Fri 24 Jul 2026 17:50:02 +0000
Files and hashes: 1: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
2: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
3: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
5: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
7: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
8: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: CwkdznfHzan0uR/HjLO/fi+QPrRBTYVetmeExG9GxSE=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 17:50:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:ae:71:57:87:3d:84:af:61:03:0a:1a:ea:69:bf:e6:45:45:1d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Jul 23 14:34:02 2026 GMT
Not After : Jul 24 17:50:02 2026 GMT
Subject: CN=19A2EF935E7E58B45EC3B33230EF228E9579581E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:c2:f1:91:14:bd:91:e1:2f:0d:ab:62:81:
78:bd:43:99:2e:e8:b3:5f:9b:64:9c:d6:d3:36:2e:
90:26:f3:3f:a1:7f:61:ee:93:a2:9e:82:a3:1a:ee:
be:f9:54:c9:11:aa:ba:e5:24:e0:d7:d7:c5:59:5d:
8c:e9:e2:49:88:9e:85:c2:f2:85:ee:13:f3:e1:4b:
05:45:02:8e:a5:e7:73:1a:e4:f2:af:8b:d0:b9:29:
92:5a:0d:a6:16:4c:ac:3c:5e:65:00:2e:1d:c1:e2:
74:51:09:ed:27:95:95:88:1d:db:8b:87:36:1e:eb:
f2:fd:20:16:c6:de:2c:ed:2b:71:f3:3e:1c:02:f3:
7b:1c:93:3f:e9:d3:45:47:9f:4a:55:7e:12:ea:96:
c4:a2:65:a2:22:c4:d4:40:1e:24:13:ef:5c:67:8d:
f9:19:64:89:20:b3:bc:09:5d:74:0f:e2:b1:29:81:
0c:6b:a8:d1:6b:54:59:bd:b8:08:c9:3d:25:b5:fa:
fa:0f:5b:45:7b:f4:26:7e:a7:6f:5f:bf:9e:ae:88:
5c:35:76:ab:af:73:e6:fe:56:57:04:88:63:86:ff:
2b:fe:51:a2:fd:d3:34:19:e6:bd:38:af:cb:7c:63:
d7:d0:51:03:11:c0:68:da:93:40:13:34:2c:3c:44:
3a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A2:EF:93:5E:7E:58:B4:5E:C3:B3:32:30:EF:22:8E:95:79:58:1E
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:77:03:21:d1:a0:2f:d7:da:14:f2:50:f9:e1:ff:d3:6c:7d:
c3:f9:6f:24:cd:30:5f:ab:5b:70:f6:75:71:03:c7:cf:96:03:
11:e4:79:1e:7b:bb:89:ca:ab:ff:6f:82:c9:9f:c7:0b:fe:c6:
89:c8:08:87:76:91:fc:21:42:f6:2e:07:20:64:c8:06:33:d4:
bd:28:06:e8:35:1c:a5:3a:3c:82:70:73:38:3b:66:9c:5f:90:
4c:25:87:98:3e:f0:51:bb:c2:1a:68:90:f8:d5:b3:ed:9c:a3:
fc:8b:e6:a4:90:17:ce:88:ed:8c:8c:85:a2:99:d1:c4:5c:09:
5a:5d:f2:51:ab:97:f2:78:76:b8:3d:96:ce:bb:a1:70:e2:9c:
d1:72:3b:61:14:40:6c:fc:1e:9a:7d:4b:0e:be:0f:a0:86:a6:
c6:ac:7a:4e:10:ca:7a:49:12:59:ba:3d:68:57:ec:67:e3:75:
ad:d8:12:80:24:78:27:f7:b2:f8:f8:41:28:b9:e7:2e:22:01:
54:5d:16:e0:9e:79:72:78:37:9c:e0:30:36:3d:c7:18:08:ef:
28:8c:5f:63:38:0b:12:4e:e6:98:46:55:05:eb:cf:6f:c4:43:
3e:45:f2:2f:ad:f0:eb:94:5f:9a:be:05:ab:98:14:6e:79:55:
5a:07:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:19 2026 by rpki-client