
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier: 9fZlxHlUKI4+SVBASDslxVZQwsWzPg7yY0awciTZ9Wo=
Subject key identifier: 45:68:7D:2A:48:BB:52:78:2C:CB:73:53:BA:74:F8:73:1C:9B:C8:B6
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial: 0121
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number: 011D
Signing time: Wed 19 Aug 2026 06:32:16 +0000
Manifest this update: Wed 19 Aug 2026 06:32:15 +0000
Manifest next update: Wed 26 Aug 2026 06:32:15 +0000
Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: qbYfcSQ78WqoGeapMVOkF8KnHeZTPZR7ES2kzHanupg=)
2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 06:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Validity
Not Before: Aug 19 06:32:15 2026 GMT
Not After : Aug 26 06:32:15 2026 GMT
Subject: CN=6a854df0-53f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7a:d3:01:11:6c:43:53:52:73:d2:81:2f:1f:
3e:b6:59:cb:6b:a5:08:e3:81:75:27:25:50:95:35:
fa:d7:67:a0:a8:50:80:8b:37:94:eb:ec:56:f8:4d:
d4:bb:1b:da:ad:43:ae:8c:f9:83:89:bf:0f:94:c2:
55:bd:61:d2:d1:b0:f7:ce:e7:ab:28:14:70:01:07:
05:73:c6:a7:c5:49:56:49:02:0f:a0:8e:20:c4:f8:
c6:e0:1f:ed:16:59:76:79:1b:69:5d:d7:9a:7c:7d:
b5:65:8a:47:11:48:68:f1:48:6d:85:57:92:85:ab:
a0:9c:d1:f0:d0:80:9c:dd:be:80:6d:6f:ab:3e:96:
d0:62:4e:02:f7:4a:e4:7b:e0:2e:8f:cf:40:46:6d:
1d:02:4f:79:81:0a:63:00:6f:e4:53:e0:b4:2d:03:
95:9e:ef:ae:ae:1c:44:90:ff:05:bf:e0:22:64:e1:
82:ca:d5:20:8c:b3:25:f8:7e:4f:24:3c:62:ed:56:
d6:6e:fc:77:73:2b:6b:dd:5a:aa:11:fd:96:c4:52:
81:20:e9:7e:8b:de:63:14:3f:6f:48:91:ac:a0:14:
7a:1c:68:3f:10:5d:ef:26:ad:09:df:a4:cc:1b:8a:
2c:f2:07:fc:c5:a5:c9:9e:71:e4:36:11:9e:14:aa:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:7D:2A:48:BB:52:78:2C:CB:73:53:BA:74:F8:73:1C:9B:C8:B6
X509v3 Authority Key Identifier:
keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:38:4f:47:14:7a:c9:b5:e8:c2:61:54:5f:ad:f8:72:d4:76:
55:98:89:3f:3b:33:f2:65:3c:bf:e0:e2:3b:ef:33:9a:77:a2:
62:24:ad:81:b3:a8:7a:81:11:80:2e:63:45:aa:82:bb:dc:92:
1f:4d:6d:63:9b:c8:ed:14:94:66:c3:45:93:4d:bc:4a:bd:72:
27:64:98:64:0e:dd:94:e5:e6:17:08:49:77:7f:65:ba:b9:8d:
13:e8:b0:48:68:b6:e2:59:b2:2b:75:58:a8:51:ac:6e:11:6c:
b8:a1:48:72:5d:b5:82:04:74:94:e0:9e:f7:01:4b:8e:0f:9c:
5e:26:e0:66:6e:e1:df:8e:0b:9a:bf:4d:31:a1:83:84:f3:e2:
2b:74:8a:96:bd:73:69:d0:8d:b4:c2:72:47:61:fc:65:8b:db:
34:83:f2:e9:da:de:9c:f7:ad:36:af:f1:aa:df:67:c9:50:fc:
a2:2c:78:52:dc:2a:11:2f:f8:d0:2c:e4:77:62:76:b5:b1:be:
df:37:80:d8:9a:f0:dd:c0:be:4e:13:2f:2e:a3:52:f1:cf:d0:
68:f4:21:10:68:a0:52:aa:60:51:e0:b8:68:8a:d8:4c:38:95:
90:7e:dd:b7:16:3c:03:f2:e3:0b:87:51:17:c3:f6:f5:76:3b:
18:04:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:25 2026 by rpki-client