
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File: zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier: TB70ITCdmVgim+nbQ9LgYZj9RmsNraElOyHJo+0uRDI=
Subject key identifier: 4A:84:C5:76:14:94:C6:85:B5:C5:BF:5D:A4:43:60:93:59:42:9D:12
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer: /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number: 018B
Signing time: Sun 05 Apr 2026 03:55:07 +0000
Manifest this update: Sun 05 Apr 2026 03:55:07 +0000
Manifest next update: Sun 12 Apr 2026 03:55:07 +0000
Files and hashes: 1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: B5bpVIbf2J5pZKMM60hHLyC63xRZfwsDF3HdnroPOv0=)
2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: kdFRNXxjRgZGt+XKW4jgp2QykvKoS0+45SQN11kAp98=)
3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: XaSQUf21ebfeg5fi8gs+vpqt0VSgirtRpmEUkskZ/hY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 03:55:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Validity
Not Before: Apr 5 03:55:07 2026 GMT
Not After : Apr 12 03:55:07 2026 GMT
Subject: CN=69d1dd1b-7d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:9a:c5:7f:c8:80:98:37:58:f4:b9:5a:6f:
3f:30:95:be:03:2b:20:fb:83:09:e7:47:7b:54:48:
1b:34:bf:e2:a2:ec:02:29:37:03:cf:b9:f2:34:41:
ee:fe:ec:78:27:9f:3e:78:bf:1c:3b:03:1c:66:fd:
2c:eb:74:26:20:8a:a3:6a:e7:22:35:aa:94:46:54:
1b:39:2d:cd:25:91:17:f8:1b:44:65:85:fb:8c:32:
5c:95:22:16:dc:92:be:63:f2:15:25:14:73:30:d6:
a9:62:05:3e:8b:85:3c:e5:3a:d4:58:ae:b5:a1:dc:
c5:9d:fa:7a:56:82:53:e0:83:88:51:db:71:7e:9f:
5f:df:95:98:cf:81:4b:fd:48:ca:05:30:b3:a9:3d:
fd:2b:ce:5d:d9:35:da:c0:d9:b2:05:c4:33:9c:92:
09:d1:cc:e6:fb:d3:88:6d:f9:06:9e:04:6c:cd:97:
7e:30:d1:4a:aa:d2:ff:67:95:4e:47:ac:e6:49:95:
59:83:77:1c:5d:16:f3:7b:7e:bb:37:99:45:62:08:
5d:7c:70:0d:ae:af:e5:fd:78:3a:5c:b0:2b:7d:7c:
9c:d5:82:d5:74:55:1d:8c:a8:39:e5:bd:46:0d:6f:
70:67:d1:01:f0:0f:f2:e0:14:19:48:f0:6e:9c:5b:
3d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:C5:76:14:94:C6:85:B5:C5:BF:5D:A4:43:60:93:59:42:9D:12
X509v3 Authority Key Identifier:
keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:91:a4:62:63:d3:d7:bf:52:25:b4:08:9f:f5:7a:bc:e6:32:
28:27:e4:fb:bf:d2:bd:15:b7:2b:ec:b0:ee:3b:73:e5:b2:2f:
f0:b4:f5:f7:a4:99:82:66:99:fb:96:b1:57:78:9b:2c:56:2c:
55:c0:02:23:b6:a8:d1:49:8f:28:68:8b:a1:e4:c1:42:b3:eb:
b5:0b:ff:d3:eb:cc:4e:67:17:eb:76:1f:2f:6e:dc:1b:c3:89:
d0:fa:fc:c4:ee:13:fd:8a:c2:90:f7:10:06:3e:f5:6d:4f:64:
2c:2a:e6:47:17:c3:f2:e5:53:1d:86:88:fa:c5:4a:7e:9a:f2:
35:1e:f1:96:ec:68:32:6c:94:c5:84:9c:97:2b:21:25:ae:01:
28:e2:2e:6d:6d:9c:73:a7:43:f6:a9:fa:58:d0:59:d6:1d:8c:
29:d9:2f:96:10:44:46:3d:69:b3:25:f3:ff:ef:9c:4b:b6:c2:
9d:7a:e4:e4:1c:56:af:a9:ec:fa:c7:37:da:3a:cf:d1:d3:d0:
bb:78:bb:ec:72:17:f4:38:72:7a:20:34:93:e6:c8:ad:f4:d3:
ea:6d:00:36:42:15:b5:61:e4:c0:9b:35:82:e6:19:ef:c3:97:
fd:d4:a2:91:7e:56:fc:f6:a0:5c:6c:1c:08:1b:2d:d3:bd:78:
0e:f7:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:00:07 2026 by rpki-client