
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
File: 18ttHdz5NKH1nk_-SYLwtMUsNfU.mft (raw, json)
Hash identifier: tLzFHMWvkJ3FBGm+aYOwSsR1z2qCGRNpTLyA7zdfUTk=
Subject key identifier: FF:C0:FE:AC:5B:AF:FB:62:7E:99:9F:41:7F:7C:1E:A4:F4:25:AC:43
Authority key identifier: D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
Certificate issuer: /CN=A914DA2D/serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Certificate serial: 0448
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
Manifest number: 0430
Signing time: Thu 08 Oct 2026 16:20:13 +0000
Manifest this update: Thu 08 Oct 2026 16:20:12 +0000
Manifest next update: Thu 15 Oct 2026 16:20:12 +0000
Files and hashes: 1: 18ttHdz5NKH1nk_-SYLwtMUsNfU.crl (hash: h2Aoa3uvwLeDUymaHd6CrWA+lMXZUtLo66EptsNIN1I=)
2: 6C330F2C7E3711F0BFE28E3AC4F9AE02.roa (hash: j8Yr7Ss4joe6oU5k+fjglOWHr8Bf9I77TQW0zKWVXNc=)
3: 83C2F8EE2F1F11F0AC29D057C4F9AE02.roa (hash: MnQKwxbbpwYvCT9UEDUb9YHnOUTSQHiCV3o0jnph1XA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 16:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1096 (0x448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914DA2D, serialNumber=D7CB6D1DDCF934A1F59E4FFE4982F0B4C52C35F5
Validity
Not Before: Oct 8 16:20:12 2026 GMT
Not After : Oct 15 16:20:12 2026 GMT
Subject: CN=6ac7c2bd-e855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3e:46:fd:3f:16:72:05:08:ab:e8:b2:dd:4d:
5f:1f:b1:9e:58:18:51:1a:ab:87:73:46:d4:a1:81:
6c:63:2c:d5:13:c6:5b:c7:e3:c6:46:29:53:3d:19:
28:c8:75:06:62:91:d2:d5:fd:32:0a:5f:38:6d:13:
06:08:43:c2:48:be:38:e3:df:29:29:f2:97:f1:d2:
d3:db:bd:29:80:21:38:4c:d1:79:be:6f:3d:7d:cd:
bc:51:a7:ac:62:06:d1:b4:96:65:2a:29:d8:59:c6:
bb:9e:f4:30:14:01:e1:f7:22:fd:5a:af:3a:70:05:
f6:ff:99:c8:31:9e:f3:19:ad:30:37:68:74:c8:ed:
b2:8b:43:79:27:46:19:bb:d2:39:18:82:21:4d:95:
4c:e6:7e:28:27:c9:28:62:5a:55:03:ff:97:a4:14:
46:aa:e5:98:64:56:af:bb:be:a1:fd:5b:a3:ff:68:
cf:b2:db:f7:e5:e5:04:eb:e3:28:b7:45:7b:c2:e6:
43:78:31:cc:b6:ce:4b:9b:f3:f0:9c:f4:31:12:95:
f7:5d:a5:49:05:f3:52:39:b7:a1:27:10:50:99:92:
3f:ef:d6:81:0a:9f:60:fd:5d:0c:49:6e:c2:b5:a5:
32:f7:38:5e:87:4c:04:3a:80:76:2d:de:67:19:c6:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C0:FE:AC:5B:AF:FB:62:7E:99:9F:41:7F:7C:1E:A4:F4:25:AC:43
X509v3 Authority Key Identifier:
keyid:D7:CB:6D:1D:DC:F9:34:A1:F5:9E:4F:FE:49:82:F0:B4:C5:2C:35:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/18ttHdz5NKH1nk_-SYLwtMUsNfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA2D/72B5F292D27D11ECA73EF154C4F9AE02/18ttHdz5NKH1nk_-SYLwtMUsNfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d6:d9:66:15:f1:a5:ce:a5:54:f7:fa:f5:f6:87:06:16:86:
e8:81:af:10:68:d3:1c:05:be:5b:48:d0:3b:a3:2a:8f:58:6a:
52:09:f7:a3:32:28:6f:15:7d:56:4f:23:63:c3:67:d4:92:fa:
b8:5c:08:ce:43:24:71:93:c2:7c:7c:ef:88:e9:05:a6:bf:e9:
08:cb:7b:d9:8d:f1:78:8b:b8:15:79:1b:be:b4:39:f3:32:0f:
2c:a1:07:dc:a3:64:ec:5b:8e:75:00:81:74:f1:34:ef:b3:8d:
7a:e0:cf:b0:f5:20:cf:3d:e9:97:2f:6e:0f:8a:db:4e:fb:a7:
00:7b:f7:f9:94:23:66:d6:7b:4a:04:01:c3:01:69:4b:bf:cf:
af:c5:3b:56:5f:61:27:f1:4b:4a:1c:07:21:04:be:9a:4c:af:
15:55:98:9f:5d:29:19:a4:f5:61:5e:63:f2:b3:9a:3b:ad:0a:
15:98:51:af:d9:46:ed:f0:91:f9:9c:c8:29:7e:59:c2:bc:5b:
11:40:8a:e5:5e:be:8c:6a:5b:a9:c7:1c:62:48:0e:45:22:cf:
6d:a2:5c:78:9c:4a:24:6c:98:cc:17:e2:25:f5:1a:10:3d:f4:
e8:99:04:11:e5:d2:eb:9e:2f:47:9b:2c:48:c0:d8:41:bd:98:
73:82:1b:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBEgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERBMkQxMTAvBgNVBAUTKEQ3Q0I2RDFERENGOTM0QTFGNTlFNEZGRTQ5ODJGMEI0
QzUyQzM1RjUwHhcNMjYxMDA4MTYyMDEyWhcNMjYxMDE1MTYyMDEyWjAYMRYwFAYD
VQQDEw02YWM3YzJiZC1lODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7j5G/T8WcgUIq+iy3U1fH7GeWBhRGquHc0bUoYFsYyzVE8Zbx+PGRilTPRko
yHUGYpHS1f0yCl84bRMGCEPCSL44498pKfKX8dLT270pgCE4TNF5vm89fc28Uaes
YgbRtJZlKinYWca7nvQwFAHh9yL9Wq86cAX2/5nIMZ7zGa0wN2h0yO2yi0N5J0YZ
u9I5GIIhTZVM5n4oJ8koYlpVA/+XpBRGquWYZFavu76h/Vuj/2jPstv35eUE6+Mo
t0V7wuZDeDHMts5Lm/PwnPQxEpX3XaVJBfNSObehJxBQmZI/79aBCp9g/V0MSW7C
taUy9zheh0wEOoB2Ld5nGcbPzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP/A/qxb
r/tifpmfQX98HqT0JaxDMB8GA1UdIwQYMBaAFNfLbR3c+TSh9Z5P/kmC8LTFLDX1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REEyRC83MkI1RjI5MkQy
N0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5LSDFua18tU1lMd3RNVXNO
ZlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzE4dHRIZHo1TktIMW5rXy1TWUx3dE1Vc05mVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
REEyRC83MkI1RjI5MkQyN0QxMUVDQTczRUYxNTRDNEY5QUUwMi8xOHR0SGR6NU5L
SDFua18tU1lMd3RNVXNOZlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC9bZZhXxpc6lVPf69faHBhaG6IGvEGjTHAW+W0jQO6Mqj1hqUgn3ozIobxV9
Vk8jY8Nn1JL6uFwIzkMkcZPCfHzviOkFpr/pCMt72Y3xeIu4FXkbvrQ58zIPLKEH
3KNk7FuOdQCBdPE077ONeuDPsPUgzz3ply9uD4rbTvunAHv3+ZQjZtZ7SgQBwwFp
S7/Pr8U7Vl9hJ/FLShwHIQS+mkyvFVWYn10pGaT1YV5j8rOaO60KFZhRr9lG7fCR
+ZzIKX5ZwrxbEUCK5V6+jGpbqcccYkgORSLPbaJceJxKJGyYzBfiJfUaED306JkE
EeXS654vR5ssSMDYQb2Yc4IbVw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:41:59 2026 by rpki-client