
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: tBsPT4L4VGmuD9y8xliqxDnF6Rk1cSjCFtS9PnlVL8s=
Subject key identifier: AA:F8:D9:0A:71:E2:AA:F0:D7:0E:62:4A:38:FE:C9:C2:64:85:C0:37
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 198F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 18E5
Signing time: Mon 20 Jul 2026 16:38:44 +0000
Manifest this update: Mon 20 Jul 2026 16:38:43 +0000
Manifest next update: Mon 27 Jul 2026 16:38:43 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: AAV4prHsG3QuJ5AmGTO+p3kukxfrAGGIP4CakXMEMI0=)
2: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc=)
3: DFD5ED287F6211F1AA84F3C05FA30FBC.roa (hash: Go3QadrBBnaBsIy2cR0jzTE/X0A/sPlYJggr6zqhTSM=)
4: EF885538C28B11EBBF310469C4F9AE02.roa (hash: DV1tl1AIWtGKEO7bG4GEI9a9HN5E72mdCdTltMO/MB0=)
5: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=)
6: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: tGZ1EQohcaFkRzhNu1V2kEqpiSxxUDeKDaiWT5xRABQ=)
7: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: +WxHowAkXhhm4CWJn2Q37AObUBKHnH8KIVC1880YsN8=)
8: 08BA573C238411F1939D14F6BF833773.roa (hash: xxJZ8fh8OevGtDqD2fFdZvJLlua6AUcbR2guUvdkT3k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6543 (0x198f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Jul 20 16:38:43 2026 GMT
Not After : Jul 27 16:38:43 2026 GMT
Subject: CN=6a5e4f14-02bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9b:15:a9:f4:fd:4b:84:70:9e:d1:fc:77:2f:
10:84:48:08:99:4e:4f:49:bd:9c:b7:60:bb:b8:0d:
ff:20:7b:a0:c9:a6:aa:a0:f8:29:38:bd:26:0b:9f:
71:a6:bb:c3:da:74:b1:e6:71:90:c7:d4:dd:38:4d:
e6:4c:e5:eb:4d:58:26:b5:cb:dd:16:88:35:b6:85:
65:7f:55:e9:0c:7e:dd:41:5c:19:c4:b6:61:a3:82:
40:12:0c:62:0f:a2:64:98:e7:da:1b:3e:fe:18:ec:
d9:ca:df:b7:f3:f6:e1:4a:e2:4a:86:b5:a2:01:b6:
4b:5c:7d:1f:35:26:1b:5c:e7:06:f7:8a:19:ee:c7:
dc:e4:e1:30:2e:ec:7e:04:ad:b9:83:2f:e8:db:de:
b7:1d:09:63:6c:9b:2f:b7:fe:4f:d8:47:fd:0f:a7:
da:ff:8d:f8:11:c4:32:bd:f5:56:37:03:41:3c:7f:
55:6a:22:59:48:91:2c:bc:2c:5b:a2:68:85:8a:ac:
60:c8:2b:a1:18:e0:cb:b7:9c:a5:b3:18:44:a8:e7:
fc:ec:58:f4:e8:5c:6b:9b:23:6e:f6:41:7f:1e:b4:
6b:70:3f:0d:b0:0d:e4:1a:dd:c1:d0:83:c0:f2:7d:
48:45:e1:9c:6b:df:c9:28:5e:b6:5b:ce:b2:01:ab:
09:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F8:D9:0A:71:E2:AA:F0:D7:0E:62:4A:38:FE:C9:C2:64:85:C0:37
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:46:db:2d:e4:db:2f:83:6c:73:28:fd:c3:6e:73:e3:d6:e2:
34:a3:8e:80:56:a2:06:f2:34:08:f1:69:67:ae:d6:35:3b:38:
c4:09:79:b6:74:8a:1d:8d:04:6d:93:0c:2b:01:63:79:06:16:
16:fb:e6:76:9d:c8:54:d8:51:97:d1:cd:c4:6c:ed:8f:e5:6f:
6a:c3:05:f0:0e:00:5c:62:cd:de:c5:6d:34:d7:23:1d:ba:08:
84:57:28:bf:53:cd:63:e0:17:97:d2:56:39:d0:58:f3:17:8b:
ac:d2:9f:4d:86:5a:e7:b4:69:f1:0f:68:1b:47:b5:1a:52:8e:
cc:0f:8e:96:06:e1:73:95:3f:a2:34:d9:61:9b:2e:94:f2:69:
10:b6:20:05:af:69:2f:58:2d:ab:6a:c1:77:e3:c8:d7:c5:ed:
04:d0:9e:0b:7c:fd:05:de:75:ad:d7:f0:24:a9:86:2e:5c:7a:
ce:52:a1:3c:08:1a:5c:72:90:f3:19:b5:a6:3f:a3:30:7a:47:
d8:a1:29:50:a5:0b:f8:fc:5e:92:eb:9e:41:a9:e1:12:62:10:
21:c8:38:02:cb:f6:eb:41:73:9d:76:b3:9c:7a:a5:ad:fe:2a:
ee:42:f1:41:4c:6e:5e:8c:c8:af:d9:9e:ed:52:82:c0:65:a0:
bd:58:3d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:06:03 2026 by rpki-client