
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: ziXyZpJyQaA0Eeg5lJD4qkxBc+BiEwpky5JV8pSMo3c=
Subject key identifier: 7B:38:02:F4:80:77:16:9D:F9:99:AC:7D:BD:CE:34:81:F3:BD:09:74
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 191C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 188E
Signing time: Mon 26 Oct 2026 16:30:27 +0000
Manifest this update: Mon 26 Oct 2026 16:30:27 +0000
Manifest next update: Mon 02 Nov 2026 16:30:27 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: yxrP46GELWUmpEnl9NwvE96YYoB0eQnvZFhpSZOmutA=)
2: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
4: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
5: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
7: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
9: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
10: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6428 (0x191c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Oct 26 16:30:27 2026 GMT
Not After : Nov 2 16:30:27 2026 GMT
Subject: CN=6adf8023-8afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:40:fa:27:b4:08:cb:ba:07:a1:f6:79:1c:
e4:34:ca:69:b9:01:9f:c1:4a:84:52:62:88:c7:ec:
6b:4e:90:fa:d0:9d:d0:3b:b4:d7:37:c0:b4:26:d0:
69:a5:fc:45:49:13:46:79:2d:b3:d7:3e:f0:8f:2f:
7c:0d:31:a2:a8:5b:30:e6:08:c7:bb:a9:7b:9c:b0:
ed:1e:83:ef:83:cc:51:08:d5:57:fc:f7:eb:c1:e5:
99:df:40:f7:b4:4b:2c:a3:e6:ca:34:b8:4f:b8:b9:
03:4c:4b:80:c3:f6:7b:75:09:37:39:6e:fc:42:7b:
87:66:87:87:9f:ca:5f:a5:51:da:64:7b:af:82:5a:
e2:50:86:3d:a1:93:05:cf:be:e0:21:b5:74:fe:d1:
fd:03:39:8b:b3:02:35:45:8f:be:6c:24:35:06:42:
fd:ba:86:ad:f8:1f:5d:6b:70:d2:76:63:19:23:c9:
aa:21:fc:99:01:8b:b2:06:59:a5:98:e5:88:f1:e6:
a7:6b:d3:55:de:9d:ab:01:89:a5:7d:29:4a:2a:9f:
da:e0:0b:60:61:22:54:9e:17:7b:20:3f:c7:49:c7:
f6:ab:e3:e3:1e:88:f0:b9:32:20:ae:ac:11:86:f4:
5e:bb:58:48:5e:4a:04:00:0c:78:00:33:00:92:d1:
10:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:38:02:F4:80:77:16:9D:F9:99:AC:7D:BD:CE:34:81:F3:BD:09:74
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:20:d6:48:99:f1:98:39:e7:49:09:0e:6f:c6:c3:e3:3d:26:
c6:a7:4a:81:28:54:d4:a3:a2:2d:75:0a:08:f4:87:d5:b0:69:
ea:73:d3:22:80:1c:84:0e:1a:13:76:bf:f3:8e:48:b4:b6:2d:
46:2e:54:99:51:04:45:ad:44:68:b9:c7:db:c5:98:5f:b0:9e:
13:c0:fa:a9:2e:b4:9e:9a:3e:a1:99:71:70:dc:33:a0:aa:20:
27:41:37:b7:6e:f1:6e:3a:35:d8:93:61:d0:5e:5e:62:59:9a:
5a:06:8c:84:39:32:6c:e2:23:68:d0:fd:f4:03:98:7f:5d:29:
a1:04:13:39:6e:a9:50:d2:ec:1a:10:11:1e:4f:d6:e0:6f:ed:
eb:6b:66:1d:90:30:7c:b7:8c:11:13:7d:04:08:01:eb:b0:b4:
83:69:86:cd:de:88:42:e6:f5:81:4b:13:26:ad:c8:db:17:d0:
a3:19:67:a6:4c:d7:c3:0c:e9:18:c8:97:7a:cb:63:29:9a:b3:
3f:d3:5d:59:8d:99:90:5c:47:2e:42:21:fa:70:88:4a:cd:e6:
9d:df:11:a6:ed:00:df:38:8b:aa:b2:ef:38:32:19:79:e8:ba:
dd:ec:e6:ca:7a:56:48:86:0a:50:c6:50:f4:29:f6:26:9f:cb:
96:b3:25:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:59 2026 by rpki-client