
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: Am1ccoly1E9eMriM3ck8mmTsIZmNctAJJKKH/IJ7HTA=
Subject key identifier: 32:D2:55:1D:D6:C5:0F:E6:74:60:F6:15:6D:A3:BD:01:9C:A6:50:EB
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 1904
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1876
Signing time: Tue 08 Sep 2026 16:34:27 +0000
Manifest this update: Tue 08 Sep 2026 16:34:27 +0000
Manifest next update: Tue 15 Sep 2026 16:34:27 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: IymAYf4jGOTOJhfqzaNJ+8Gv+LUTubnAHAU0ueRu0qY=)
2: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
3: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
4: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
5: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
6: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
7: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
8: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
9: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
10: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 16:34:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6404 (0x1904)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Sep 8 16:34:27 2026 GMT
Not After : Sep 15 16:34:27 2026 GMT
Subject: CN=6aa03913-fb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:6f:81:26:8e:de:8b:c6:de:f7:8c:2c:d6:
51:97:0e:e6:cb:35:06:5d:31:b3:36:3f:dd:ea:b9:
d1:bf:40:81:c7:0e:22:94:ac:c9:bc:64:74:28:c2:
22:e5:b8:a3:73:78:50:6e:89:23:a2:90:a6:6f:e9:
1c:de:9a:c2:4c:30:ed:3e:b1:27:aa:e5:60:d7:fb:
34:78:98:48:e2:ef:71:a9:57:9b:a4:ff:8b:f6:a4:
b7:0e:5c:00:48:1b:87:f7:ca:73:c2:19:3a:22:9f:
9f:4e:c6:d7:00:13:85:ad:9a:62:d5:7d:d2:f3:3d:
b4:c0:fc:49:8b:f1:34:0f:ee:a5:ec:a4:31:ac:2b:
b4:af:df:d0:cd:1a:28:31:ee:de:2e:74:c3:49:87:
2e:61:8f:7b:e8:32:03:41:25:d6:ca:1f:9c:fc:38:
9c:27:ed:70:0c:e5:5f:d5:51:ba:a1:91:bc:bd:20:
02:bb:fd:15:45:14:b1:c6:4d:4a:96:dd:35:47:3c:
2a:d6:55:55:8b:0a:e4:7c:a7:22:5b:c6:31:33:82:
43:a4:69:e4:d6:37:fa:ff:67:bf:ae:0c:dc:f9:3b:
1d:76:3e:f8:97:1e:6b:cd:34:ef:7e:1f:29:d1:23:
eb:a8:f1:18:4a:55:ed:d7:84:a4:33:8e:5f:6a:f0:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:55:1D:D6:C5:0F:E6:74:60:F6:15:6D:A3:BD:01:9C:A6:50:EB
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:51:df:94:e2:13:a3:12:db:40:85:d7:ab:6a:99:bd:0b:59:
c1:3d:f8:03:25:f7:dd:94:99:bb:6d:bc:dd:57:6f:c3:ec:c5:
e8:e8:1e:7c:45:4d:bb:20:a2:84:0c:78:20:5d:5c:5a:db:9b:
4b:66:6d:67:9a:82:13:8b:68:66:cf:f3:8a:19:e8:20:60:16:
d4:83:78:ae:f4:05:94:d4:e0:2a:10:d7:41:68:2d:53:af:1e:
91:de:80:cd:22:e9:07:5a:98:0f:86:a0:54:9c:5b:fb:a8:1f:
70:4b:eb:09:e8:fe:a7:5f:3b:7d:be:1a:4c:a4:b0:5c:94:8d:
0c:15:76:2a:22:36:b4:86:fc:84:6c:ca:e0:c0:95:31:05:3c:
86:4b:ab:0f:d8:a7:78:63:18:7e:6b:96:ee:3e:f6:c1:bf:ce:
d9:d5:15:5c:d0:d9:88:73:02:9f:47:83:75:00:4d:a7:15:8b:
b8:85:24:56:5b:f3:ac:f6:5f:99:8b:c9:17:3d:98:71:5e:c9:
84:41:a1:84:2c:0e:2b:90:71:49:1c:4d:23:4f:5c:1a:1e:77:
7b:dc:f8:b0:d3:50:49:94:b8:8c:1e:d3:82:04:ff:1c:0f:ae:
5b:83:a9:ca:d6:f2:ef:12:8e:f4:60:5c:30:a8:85:76:db:ca:
a4:8c:c2:a8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5NUYxMTAvBgNVBAUTKDkwQzIyRjczOTM4NTBFOEVDRjZCNUYxRTMyMEQwN0Iy
RDFBQ0Q4RkQwHhcNMjYwOTA4MTYzNDI3WhcNMjYwOTE1MTYzNDI3WjAYMRYwFAYD
VQQDEw02YWEwMzkxMy1mYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm69vgSaO3ovG3veMLNZRlw7myzUGXTGzNj/d6rnRv0CBxw4ilKzJvGR0KMIi
5bijc3hQbokjopCmb+kc3prCTDDtPrEnquVg1/s0eJhI4u9xqVebpP+L9qS3DlwA
SBuH98pzwhk6Ip+fTsbXABOFrZpi1X3S8z20wPxJi/E0D+6l7KQxrCu0r9/QzRoo
Me7eLnTDSYcuYY976DIDQSXWyh+c/DicJ+1wDOVf1VG6oZG8vSACu/0VRRSxxk1K
lt01Rzwq1lVViwrkfKciW8YxM4JDpGnk1jf6/2e/rgzc+Tsddj74lx5rzTTvfh8p
0SPrqPEYSlXt14SkM45favCApwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLSVR3W
xQ/mdGD2FW2jvQGcplDrMB8GA1UdIwQYMBaAFJDCL3OThQ6Oz2tfHjINB7LRrNj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri84NDhDODU3Q0RG
RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRvN1BhMThlTWcwSHN0R3My
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tNSXZjNU9GRG83UGExOGVNZzBIc3RHczJQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk1Ri84NDhDODU3Q0RGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9rTUl2YzVPRkRv
N1BhMThlTWcwSHN0R3MyUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAS1HflOIToxLbQIXXq2qZvQtZwT34AyX33ZSZu2283Vdvw+zF6OgefEVNuyCi
hAx4IF1cWtubS2ZtZ5qCE4toZs/zihnoIGAW1IN4rvQFlNTgKhDXQWgtU68ekd6A
zSLpB1qYD4agVJxb+6gfcEvrCej+p187fb4aTKSwXJSNDBV2KiI2tIb8hGzK4MCV
MQU8hkurD9ineGMYfmuW7j72wb/O2dUVXNDZiHMCn0eDdQBNpxWLuIUkVlvzrPZf
mYvJFz2YcV7JhEGhhCwOK5BxSRxNI09cGh53e9z4sNNQSZS4jB7TggT/HA+uW4Op
ytby7xKO9GBcMKiFdtvKpIzCqA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:21 2026 by rpki-client