
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: ZHTuXFmQyAzEtVjkc9w1g5Ib+sNeVXQpZUPjEackBFs=
Subject key identifier: D3:A5:9E:C5:9C:91:30:DD:AF:79:82:72:5C:CD:65:63:1F:EB:53:F7
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 18A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1825
Signing time: Sun 26 Apr 2026 16:27:43 +0000
Manifest this update: Sun 26 Apr 2026 16:27:42 +0000
Manifest next update: Sun 03 May 2026 16:27:42 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: C1Xvt0vcjzgdpHUDBJlweUpYkF1PbjN5FSQwFnED+H0=)
2: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: OEgEDUAjf9BTlI+eiF5A69LmOCeN7jWjg18CXPzKJG4=)
3: 696975861A3611EEA597E872C4F9AE02.roa (hash: g5hRhUjRB9v/my+gZgSF2vbEiEILSavEGnsxaVKF6Gc=)
4: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 4QNrndXiZuD30u6eautmZHQMpuP/Z26DQJUBDiWiMvc=)
5: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: lvExdvN+lyTanXvVTvJV8T9/V8jM577ymUYa0b51pmw=)
6: B04675FC959711EA9F290A33C4F9AE02.roa (hash: wWZc4DPL/CIi2uHPFRZ5kI0NT8FM5d7k/tcwO50MfhM=)
7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: yYFIGBneEQXcRJvNNN1W9kEQ69UHSaUHBezF58BxRJY=)
8: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: HZBfZMAFJxlkSmjIQOZstgSCx4ashGb51vkWovEUYbs=)
9: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: /8pZ9hmnX1KrX5+xHUTJd205PrwYJNS6PnS3wtcG9wI=)
10: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: LlVbkIBf55WD9ol7tZ+8YsYWKIE8b97eX9bCwSF3NSs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 16:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6305 (0x18a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Apr 26 16:27:42 2026 GMT
Not After : May 3 16:27:42 2026 GMT
Subject: CN=69ee3cff-34fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:95:d1:13:d3:e3:1f:99:ca:3e:f1:dd:f3:
ea:e8:1d:7a:d6:7f:6b:a1:34:88:99:31:7f:a5:1b:
0a:f6:b5:5c:7e:c9:f6:3b:20:4e:98:f0:3d:a1:b9:
c0:6c:19:44:72:63:12:d2:d4:ec:60:33:56:ef:4e:
e3:04:4b:dd:76:fd:25:d0:c0:58:3e:a2:ae:8e:d5:
21:30:91:e4:79:b3:f2:a0:64:94:31:c9:44:d4:62:
a2:bf:03:a6:08:10:c0:be:2f:bf:a9:d0:54:15:5b:
69:c2:03:3f:f8:22:00:f8:60:af:2b:9e:74:a9:66:
be:9a:8a:e2:e5:1f:bb:47:ee:c0:02:fe:ea:6e:29:
8f:10:95:8b:27:e0:5f:ae:ac:5d:fc:16:4d:79:eb:
bc:f6:95:10:2e:46:ec:98:fc:cb:d2:30:13:83:e6:
c7:84:2a:40:4e:58:e2:48:3c:af:3c:a2:11:eb:d9:
86:fc:5c:07:92:d5:39:0c:0a:55:83:b4:44:86:48:
9f:39:0b:c8:df:21:0f:08:ab:10:d6:7d:73:31:3d:
75:fb:fa:e7:72:95:74:93:b7:54:34:86:08:2f:24:
d2:16:1e:02:e4:f8:dc:34:21:82:fd:d0:9b:60:6c:
1a:9d:ac:20:78:65:22:c1:93:89:9d:50:56:8b:c7:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A5:9E:C5:9C:91:30:DD:AF:79:82:72:5C:CD:65:63:1F:EB:53:F7
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:52:9d:8f:0b:71:94:ba:e5:12:af:7f:f4:65:33:31:6a:95:
12:b6:95:da:45:78:81:36:a5:0e:16:20:90:03:b4:56:99:d3:
b5:47:99:e0:00:60:40:ed:41:f2:c2:d7:41:fa:fd:2a:75:28:
14:af:0b:d0:dd:e3:2e:1c:1c:46:79:a8:7a:f1:ba:46:bc:82:
01:4e:14:a2:92:8a:3a:67:78:41:b3:57:cf:dd:06:15:ef:4c:
8e:8b:08:47:31:21:7f:5d:7b:9e:28:21:5e:47:af:35:95:b3:
80:0e:1f:69:9c:ff:41:39:c9:c9:42:a7:cd:48:66:0b:d6:68:
08:3f:b9:0d:ff:20:4b:28:dc:77:d9:d2:5c:ff:d7:0f:95:fd:
6d:ac:9c:05:bf:fd:de:68:48:4f:a9:9f:67:bd:d6:44:3d:eb:
a0:67:c4:ed:3f:b5:af:08:16:21:1c:fb:a9:c9:0d:d4:26:90:
7a:2d:ff:67:83:a6:4b:d6:8e:0e:2f:33:1f:bd:3d:61:30:af:
b8:96:0a:e6:62:15:71:11:21:a0:ce:1f:79:d7:ae:d2:fe:78:
c3:9a:87:6c:a9:2e:60:89:66:5b:d9:8a:23:0d:df:18:84:89:
fb:66:72:d2:1d:29:10:23:4c:98:9e:e5:40:51:6d:09:14:aa:
72:f4:a0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:57 2026 by rpki-client