
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: ubz5VEJ5ScYbNZDhjRFVW/g4wbr92pApaFkgaqM6FR0=
Subject key identifier: 89:8A:29:7B:59:77:92:68:D4:DE:A4:F3:D0:4A:25:DB:E4:97:95:2A
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 18C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 183E
Signing time: Wed 10 Jun 2026 16:31:36 +0000
Manifest this update: Wed 10 Jun 2026 16:31:35 +0000
Manifest next update: Wed 17 Jun 2026 16:31:35 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: a9YjXrndgJ9aU3n8O+MpEK5joFLAupLajZVuxLcgmkU=)
2: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
3: B04675FC959711EA9F290A33C4F9AE02.roa (hash: bVsFv/oKfnNnwxPwmc/HnCYntRgfJw5+yTQyNn6XJ1s=)
4: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
5: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
7: 696975861A3611EEA597E872C4F9AE02.roa (hash: 7YXOp3teJtrS9dzegbjo4GbkVtyL1T4sQutI8Izq/14=)
8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
9: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
10: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 16:31:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6339 (0x18c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Jun 10 16:31:35 2026 GMT
Not After : Jun 17 16:31:35 2026 GMT
Subject: CN=6a299168-4887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:e8:83:c3:6e:ff:b0:23:73:36:ac:0a:be:
e0:a4:4c:b7:49:23:d4:b6:7f:8f:71:66:cb:5c:ac:
35:11:ab:f3:77:ac:24:20:ea:c8:67:83:72:6c:a6:
f6:83:82:35:b8:20:77:fe:86:4d:7c:2d:30:bf:df:
81:d8:03:c5:8c:14:c5:46:57:a9:4a:d6:12:b4:cd:
72:25:42:cc:aa:3a:06:f9:cd:ed:e6:95:5b:5c:08:
a7:4f:9b:5f:cd:1e:22:c2:06:9d:ca:ca:bb:d1:cd:
13:b4:30:0f:53:da:5e:ab:dd:96:27:dc:a2:60:17:
37:dd:56:48:36:f9:48:73:40:5f:e1:13:05:dc:32:
6d:68:91:52:67:16:43:ee:5d:5c:45:18:38:2c:7f:
9d:86:09:29:a4:37:50:6d:8b:0a:9c:57:21:f1:3c:
f8:19:f3:37:e2:36:39:81:2a:1e:7d:00:9d:82:39:
da:3c:23:53:36:2f:1f:2c:06:c3:4a:88:36:a7:99:
96:cf:03:2b:de:c8:12:b9:f9:d6:91:97:1e:cc:e9:
9e:f4:12:d8:27:9a:39:5c:e7:f9:8b:80:55:78:c3:
e9:39:3c:d1:72:36:d5:f0:6c:32:36:17:13:2f:af:
9c:a9:69:f8:bc:f5:ec:28:04:b6:f7:54:7f:75:f4:
c6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8A:29:7B:59:77:92:68:D4:DE:A4:F3:D0:4A:25:DB:E4:97:95:2A
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:ea:2d:95:72:da:e0:f2:cb:cb:d4:62:87:fb:4a:70:0d:
0d:f5:46:a1:a3:82:a5:73:75:e0:77:d6:4e:f8:cc:de:92:7c:
d5:ac:78:cc:07:60:c6:bd:f2:58:eb:f0:fe:4e:04:2e:d7:46:
94:ef:d1:40:09:b8:14:ac:d2:3b:53:d6:70:55:b9:75:dd:ef:
22:95:67:a1:53:7d:11:e2:b9:ec:53:67:13:3a:ea:cc:29:f2:
03:38:06:81:1d:7a:39:07:19:c1:e7:9e:d3:3d:8c:82:af:81:
e3:02:dc:a7:38:42:a4:69:81:79:ba:f8:c4:58:b6:57:30:ac:
45:5c:b8:b7:ce:86:71:92:3e:85:09:58:7e:f8:a6:03:da:e3:
3d:22:f6:d3:40:4e:02:ad:e1:f5:d0:e6:45:34:98:51:f1:32:
db:65:95:49:5e:67:b9:b9:2f:6a:da:57:75:11:5c:f1:dc:cc:
82:65:e0:27:f4:a1:f1:6f:e7:f0:ad:93:5c:65:6b:af:c7:cf:
4b:10:d4:de:a1:e7:57:42:0c:6d:c8:4b:74:c6:a5:ac:c6:a5:
87:26:02:63:07:58:d7:72:d9:bc:4c:16:60:dd:8d:e3:61:57:
e2:be:31:19:11:cb:5e:5b:22:92:f0:d1:65:1a:9b:b7:9b:4c:
42:53:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:15 2026 by rpki-client