
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: ZoUsk/n88EjJ2kCAUtwwN+ApnkzjO6GvENqNIT2UQA8=
Subject key identifier: 1D:1B:E1:28:9B:63:BD:7C:3A:5A:B7:54:FE:FE:17:F0:F1:E4:CA:22
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 1955
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 18AD
Signing time: Sat 04 Apr 2026 16:27:16 +0000
Manifest this update: Sat 04 Apr 2026 16:27:16 +0000
Manifest next update: Sat 11 Apr 2026 16:27:16 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: VXZ1CYefr9BvM+bstIkeOFVDoE5xoFejjz1eqsornnI=)
2: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: +WxHowAkXhhm4CWJn2Q37AObUBKHnH8KIVC1880YsN8=)
3: EF885538C28B11EBBF310469C4F9AE02.roa (hash: DV1tl1AIWtGKEO7bG4GEI9a9HN5E72mdCdTltMO/MB0=)
4: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: tGZ1EQohcaFkRzhNu1V2kEqpiSxxUDeKDaiWT5xRABQ=)
5: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc=)
6: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=)
7: 08BA573C238411F1939D14F6BF833773.roa (hash: ikUyxDn1ZqEyZj+RYVDckjXLK2MGhIyviBh1zdOEtvM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6485 (0x1955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Apr 4 16:27:16 2026 GMT
Not After : Apr 11 16:27:16 2026 GMT
Subject: CN=69d13be4-f613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:56:09:4a:af:c0:98:8b:c6:3b:2e:9f:31:58:
81:b2:6a:92:7f:1e:23:d7:04:77:b7:6b:b1:8b:1f:
b8:44:2c:ef:d0:c7:33:e5:55:0d:86:12:60:5f:4c:
15:dd:d5:98:3b:49:4a:49:b7:a4:b6:58:26:49:e4:
d3:d3:47:07:8d:d3:e0:74:40:64:31:42:fc:7b:d0:
65:11:78:83:d7:5b:fc:0c:ae:a0:c5:64:f8:79:46:
74:4a:5e:c7:b8:ce:65:6d:4d:02:5b:10:f7:6a:00:
0e:71:be:01:32:a1:c3:c6:5e:12:ac:c5:c8:a4:5a:
02:5c:9f:4f:dd:8b:b3:f9:6f:52:62:b2:3a:1a:ec:
e5:b2:fd:95:ea:1c:e7:ce:18:e3:00:3c:ce:ed:2d:
0b:32:ef:8c:94:fd:52:f0:f6:0e:1b:dd:ea:33:be:
e7:bf:8f:c3:ed:37:95:40:fb:61:16:b9:93:f4:75:
0c:82:97:e9:7a:c6:d0:9a:23:2c:96:d8:19:8f:9d:
23:b8:f9:00:71:1e:94:34:ac:9f:de:72:b5:bb:2a:
08:5e:bc:48:c5:5e:b9:b1:0b:87:63:b7:17:22:fe:
05:72:11:0a:f0:0a:ab:9e:0b:2e:05:4c:4d:52:d0:
a3:4b:1f:57:b9:9a:b2:8c:38:f6:f6:a0:4a:ff:81:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:E1:28:9B:63:BD:7C:3A:5A:B7:54:FE:FE:17:F0:F1:E4:CA:22
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b8:d5:92:17:a5:c5:7f:63:f5:00:f9:bb:c6:33:fe:26:17:
c7:02:fd:8e:83:b2:a3:49:c2:04:0a:79:ae:29:d1:7f:40:2f:
2c:3c:6c:0b:80:8a:a1:f2:d1:36:72:1d:f5:9d:3c:d2:dc:41:
2e:95:6c:14:09:72:6d:af:f9:9f:69:59:5b:1f:07:07:bb:58:
87:b2:4f:05:75:0d:52:74:a8:a5:4c:78:27:e9:fd:b0:7f:f9:
56:5a:31:cc:bd:4d:2a:65:08:4b:31:5a:b0:40:9f:95:bf:aa:
c0:6c:7a:6a:65:49:1b:f4:3a:d9:4b:66:e2:84:6c:67:9a:7a:
dc:22:44:ce:ba:86:4c:c7:1a:5f:03:f6:f2:8f:4a:46:1c:f4:
09:02:d6:2c:36:59:c1:a9:56:6c:75:61:79:51:dc:8e:eb:5e:
df:77:fe:8d:eb:ce:8b:1a:91:9e:93:5c:52:53:ec:d2:9d:ca:
54:91:8d:37:7e:45:5e:5e:9b:4a:8d:73:48:18:1a:8e:83:cd:
dc:fc:b3:bc:3f:4d:b9:d7:52:01:32:ca:35:26:9e:da:74:a1:
9b:d0:44:01:bb:c6:67:d8:d1:e3:4f:9d:64:bf:fa:60:85:38:
9f:b2:5e:1d:ad:e1:11:d1:1e:b1:02:09:63:2a:c3:e3:db:ef:
6a:13:a4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:12:03 2026 by rpki-client