
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
File: S18cktxo2UEqrDB3GD-jbdA9zRU.mft (raw, json)
Hash identifier: 2llKBe+7xuheV8mNFfTzMMbE0Pd0CNoO1//V8vlwaUk=
Subject key identifier: C6:6D:9D:05:A0:64:70:51:97:CB:6A:CC:12:32:D9:30:94:71:82:83
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Certificate issuer: /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial: 2F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
Manifest number: 29
Signing time: Mon 27 Jul 2026 11:14:45 +0000
Manifest this update: Mon 27 Jul 2026 11:14:45 +0000
Manifest next update: Mon 03 Aug 2026 11:14:45 +0000
Files and hashes: 1: S18cktxo2UEqrDB3GD-jbdA9zRU.crl (hash: QzhUrS4OEvajqbnIRmALoAunuApCTf6XlMuEnnX1ZjI=)
2: 5525C30C7C5011F1B4BAB03D68A30FBC.roa (hash: z8FOKVvYXByRhy5QCFuuv5pOXxsDGdJf5ZmT4swtT0Y=)
3: 1CA9AC0E55E111F18B979D53AF833773.roa (hash: Dbwt6nm5VyyCTjwVUdPIQGcNeUg1GDeIUpEjZ2v1gJ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Validity
Not Before: Jul 27 11:14:45 2026 GMT
Not After : Aug 3 11:14:45 2026 GMT
Subject: CN=6a673da5-b3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:39:57:ec:7f:48:bd:0d:1c:05:18:1f:a6:
25:c1:24:98:1a:4f:0b:f7:e9:8c:49:6a:b0:2c:e6:
5d:8e:81:60:7e:92:31:33:28:82:41:ae:bb:ca:fc:
14:aa:13:b6:6b:47:24:40:e5:3d:06:89:27:88:1d:
04:32:39:fa:25:46:f8:37:57:10:09:15:da:7b:1a:
a3:28:78:1e:54:3c:38:09:ab:b9:46:11:c4:0b:cd:
26:66:73:a9:84:00:98:64:86:3c:8a:23:ab:86:f8:
76:ad:df:86:33:32:54:a8:06:cf:e6:ea:fd:c1:ef:
11:d4:54:85:af:80:6e:c8:81:d0:98:52:36:10:a1:
ea:de:c4:f7:7f:3f:6f:a9:9c:3e:5d:12:54:c7:db:
bf:7f:28:d0:71:d4:eb:c5:f7:6e:57:3b:69:ac:1d:
1e:28:d6:96:9c:65:cc:60:fe:87:be:50:79:2f:8c:
d4:ab:cd:a5:94:a0:89:b8:91:41:00:4b:ca:29:2f:
6e:2d:72:cc:43:7f:d6:a9:11:d7:23:c3:56:23:52:
f0:70:24:31:f7:e1:4e:50:62:a5:59:fd:d3:32:e3:
9f:19:4e:c3:e4:7c:03:63:f0:9e:ef:6e:a0:cb:82:
13:1a:80:63:b8:7f:46:78:1e:65:0d:fe:54:3b:62:
72:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6D:9D:05:A0:64:70:51:97:CB:6A:CC:12:32:D9:30:94:71:82:83
X509v3 Authority Key Identifier:
keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:bb:75:95:11:af:f0:e2:cb:4c:b6:79:4d:5f:2a:8a:5b:8a:
08:e3:3d:a1:d3:bf:ec:8f:b4:99:59:c2:26:74:18:5b:21:52:
87:40:0f:41:ad:cc:42:ee:ff:d9:ec:c1:3b:89:6a:bc:52:91:
e2:3a:f9:46:9a:fd:ba:75:ef:73:0b:e1:2c:05:da:22:ee:56:
8e:3b:4f:bb:49:83:42:1a:d4:82:b2:fc:90:57:f3:ae:3b:54:
43:b9:14:ba:4f:1b:94:0c:09:fe:83:5f:21:1a:41:c4:6f:dd:
07:a8:ba:43:c7:e9:7a:14:dd:95:c5:a6:cd:16:13:3b:b6:8f:
4b:4c:59:f6:9d:9d:49:28:29:c9:fe:46:fd:50:cd:e5:2a:15:
a8:4e:bd:89:25:6e:07:a2:b3:bc:a7:bd:e5:76:06:1f:ef:00:
15:06:cc:04:44:1e:30:46:4a:1f:91:10:c9:d5:68:a9:8a:42:
a4:a3:c7:d4:fb:45:92:f7:30:76:14:87:dc:62:76:15:15:9a:
02:53:69:d5:ce:b6:14:6a:8b:03:bc:1b:3f:f8:15:e1:8d:fe:
ee:ed:44:18:e8:80:46:c1:1a:f0:47:51:11:c9:1d:cb:76:85:
bf:41:96:23:79:f1:e0:5f:2e:06:67:9c:c5:a5:19:c8:90:16:
fa:1e:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 04:23:52 2026 by rpki-client