
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: SlNdODIrn68RgbKCWy6/VSOACO34k2JaZXWf6Ax421o=
Subject key identifier: 22:AC:1B:CD:1F:B9:8A:9C:E2:C3:CC:09:2C:D3:7D:7F:EC:49:BB:4A
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 18ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 185F
Signing time: Sun 26 Jul 2026 16:39:05 +0000
Manifest this update: Sun 26 Jul 2026 16:39:05 +0000
Manifest next update: Sun 02 Aug 2026 16:39:05 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: +ZpXyhRMMo1i73MrqckXSp4hkToXPDuT0nwnDudZWyA=)
2: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
4: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
5: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
6: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
7: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
8: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
9: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
10: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 16:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6381 (0x18ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Jul 26 16:39:05 2026 GMT
Not After : Aug 2 16:39:05 2026 GMT
Subject: CN=6a663829-6dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6d:93:0f:6d:07:dc:b0:17:a2:34:2c:78:2b:
9b:3c:af:5f:68:4d:98:8f:d6:d3:42:53:eb:72:12:
e4:31:76:86:89:32:49:0e:c4:f7:6e:bf:65:fd:9d:
01:7d:22:75:26:20:ad:5f:e0:78:46:b1:69:4f:b1:
7a:e5:8a:a2:58:2a:44:ba:aa:63:ba:85:21:fa:16:
7a:ce:cc:da:88:2c:c0:d3:4f:e8:9b:04:3e:53:30:
b7:ca:b1:42:bd:77:f0:35:45:b6:46:35:d8:88:5c:
a7:40:da:35:e3:5d:ea:57:d0:35:c9:15:20:e8:a8:
2a:dd:fe:ba:cd:1b:7d:40:da:69:3d:10:17:1a:7c:
f2:d3:44:2a:56:57:23:3c:54:bf:24:34:51:97:41:
d6:82:8b:17:5e:38:c2:cc:92:b6:01:88:98:e3:fa:
f3:56:52:14:58:08:33:b6:81:45:bf:df:84:18:cf:
17:9d:6c:9a:ca:e4:c3:69:fe:16:d4:b3:5f:f7:b3:
20:56:76:ff:1f:78:82:ef:46:39:b1:e7:08:2b:46:
2f:1d:03:05:d3:ed:06:9f:eb:3f:4e:00:7d:36:29:
24:6a:7f:37:df:9e:f2:25:ef:76:0f:4d:91:b2:dc:
ca:a8:17:01:39:2f:4a:72:23:89:f3:cb:a3:29:a1:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AC:1B:CD:1F:B9:8A:9C:E2:C3:CC:09:2C:D3:7D:7F:EC:49:BB:4A
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:1b:9c:65:9a:a4:4c:86:b2:35:bc:8c:1c:fb:08:2e:fa:b6:
a0:48:cc:e1:fe:35:50:fc:ec:99:8e:b2:0a:d5:b4:9d:cc:1a:
81:43:76:b0:7e:cb:9a:70:f9:11:7d:2c:fe:e4:d1:70:23:c0:
ef:1d:40:77:0d:aa:26:94:53:b3:de:d6:33:7a:40:c5:65:a0:
29:20:ac:3e:0a:9d:04:21:2e:18:4f:b4:22:d0:07:f7:9f:d0:
f2:db:aa:fe:61:9a:6c:9a:5b:0c:53:8f:82:72:0a:bc:fd:7b:
e5:3a:65:5b:eb:ab:96:f6:3e:33:d5:81:29:e7:86:8b:e1:8e:
19:e6:3b:c1:20:4a:6e:48:2e:59:e4:07:5b:08:03:3b:3e:8a:
d6:7f:41:23:b2:7b:6f:21:0c:71:52:77:32:24:34:bd:45:94:
fd:a1:ff:e7:b2:2e:86:bb:7b:d3:10:fa:af:0c:54:2f:48:62:
2d:f7:c2:92:05:8d:d4:9c:7c:b9:45:f5:16:30:48:20:64:5d:
dc:d0:9f:58:04:6d:5c:a3:a6:87:b9:38:54:41:40:43:64:74:
f4:64:d4:04:1e:d9:bc:b0:cc:1a:ad:9e:09:1e:da:74:7d:3b:
71:64:46:77:0c:52:70:24:c2:11:39:b2:30:3e:c8:6e:2a:0c:
3f:a1:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:46:41 2026 by rpki-client