
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
File: 1p-CbIwgERW0fuzDf7XgAI41a9w.mft (raw, json)
Hash identifier: XYw1cQbDnXcBmr+cP2N/tPpZm/v7Nz0/3qgdezCb5I4=
Subject key identifier: 8E:8D:D1:77:D0:61:5E:EF:7B:92:F7:6C:4B:C0:E7:C6:F7:31:B2:15
Authority key identifier: D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
Certificate issuer: /CN=A918D6AD/serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Certificate serial: 8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
Manifest number: 88
Signing time: Fri 17 Jul 2026 08:47:07 +0000
Manifest this update: Fri 17 Jul 2026 08:47:06 +0000
Manifest next update: Fri 24 Jul 2026 08:47:06 +0000
Files and hashes: 1: 1p-CbIwgERW0fuzDf7XgAI41a9w.crl (hash: 80XPkQeo53vs5lzbUu58Ry9MUIu92VcVkqLPvttkEL8=)
2: 2D57F1BAB90511F0BF94505DC4F9AE02.roa (hash: +wWjLcPKpBqVBQPIBu36nGMdiKTiR75UkPnPyB3guZo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139 (0x8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D6AD, serialNumber=D69F826C8C201115B47EECC37FB5E0008E356BDC
Validity
Not Before: Jul 17 08:47:06 2026 GMT
Not After : Jul 24 08:47:06 2026 GMT
Subject: CN=6a59ec0b-3c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:91:35:39:d2:f2:15:52:23:98:a1:c2:3b:
dc:7d:70:1c:3a:9b:eb:40:4d:21:33:29:b6:4a:33:
78:2a:ef:41:14:7c:1d:e6:0f:9c:07:e8:16:48:cd:
35:9b:4f:1e:fa:a6:c0:37:f1:81:e5:3d:d4:09:2b:
97:9b:1b:60:a1:c7:d9:37:a7:60:ff:87:5f:b9:37:
40:6a:ae:66:cc:b2:11:82:9c:90:19:62:44:7a:40:
03:d2:8c:18:a1:5e:e4:89:b1:24:63:92:99:be:41:
80:b8:db:56:9d:03:c3:38:be:45:f9:9c:bc:86:b7:
e8:54:2d:1b:71:9b:61:f1:d3:68:ea:9f:ce:4e:91:
c6:9a:61:22:74:b6:5d:66:17:d7:5a:e7:90:a2:13:
d0:15:b8:39:7b:b8:ad:a2:3f:a3:7f:30:87:b6:46:
be:7e:15:b9:1c:a9:21:63:e8:05:80:5c:4a:c0:f0:
8b:19:5e:5c:5c:fe:28:a5:37:66:87:c2:34:34:25:
bd:e9:36:30:9f:e3:8c:0e:ab:02:f9:d1:87:00:63:
f2:06:dc:65:f7:a6:ad:6a:ee:e6:a1:01:59:d9:49:
0f:9d:23:80:fb:e6:51:bc:06:3b:09:da:b1:c9:35:
78:2e:a0:38:b3:2c:15:9c:64:7a:89:e1:33:78:5d:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:D1:77:D0:61:5E:EF:7B:92:F7:6C:4B:C0:E7:C6:F7:31:B2:15
X509v3 Authority Key Identifier:
keyid:D6:9F:82:6C:8C:20:11:15:B4:7E:EC:C3:7F:B5:E0:00:8E:35:6B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1p-CbIwgERW0fuzDf7XgAI41a9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6AD/6332777AB45E11F0BD68A93EC4F9AE02/1p-CbIwgERW0fuzDf7XgAI41a9w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:52:28:1c:b9:c4:ff:20:7d:9f:b6:64:22:15:92:6c:d0:
71:d7:b6:81:43:29:a6:ad:47:15:5c:a1:1e:98:62:43:b0:02:
d7:e6:10:00:66:53:23:cb:be:dc:29:4a:1c:dd:8b:be:bd:fb:
88:cf:d4:f0:6c:cb:00:b5:f7:ff:44:80:a9:5d:a0:74:09:ed:
0f:63:3b:73:73:51:0e:58:b9:5b:97:23:69:6c:0e:2c:d7:ca:
b9:c3:60:63:9b:d8:5b:8c:a5:3f:69:54:ba:ad:f5:b6:76:9b:
30:d2:5b:6c:7f:cf:e2:fd:aa:d8:e8:ae:70:0d:44:36:fd:af:
00:31:98:ea:e7:90:44:ce:bf:ca:fe:1b:95:59:95:c5:47:4d:
7b:29:23:f7:10:2d:ab:b0:cf:ed:7e:13:3a:69:c3:6a:a7:ae:
03:98:ce:d8:9b:17:e2:31:b9:75:0d:10:ea:22:a6:b7:83:34:
a1:e1:cf:1e:02:f7:22:ca:5b:e8:b8:7c:c4:3d:b1:ec:48:0f:
56:57:8d:76:9d:82:96:0a:6f:47:aa:ca:41:1d:cf:16:18:45:
bc:12:14:1b:0f:2e:08:6f:62:1f:6d:e3:03:ca:d6:a1:2e:7a:
37:e1:bc:d6:c4:04:1f:5e:80:83:6d:39:6c:7a:cf:62:3f:02:
ed:d9:35:83
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2QUQxMTAvBgNVBAUTKEQ2OUY4MjZDOEMyMDExMTVCNDdFRUNDMzdGQjVFMDAw
OEUzNTZCREMwHhcNMjYwNzE3MDg0NzA2WhcNMjYwNzI0MDg0NzA2WjAYMRYwFAYD
VQQDEw02YTU5ZWMwYi0zYzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyiyRNTnS8hVSI5ihwjvcfXAcOpvrQE0hMym2SjN4Ku9BFHwd5g+cB+gWSM01
m08e+qbAN/GB5T3UCSuXmxtgocfZN6dg/4dfuTdAaq5mzLIRgpyQGWJEekAD0owY
oV7kibEkY5KZvkGAuNtWnQPDOL5F+Zy8hrfoVC0bcZth8dNo6p/OTpHGmmEidLZd
ZhfXWueQohPQFbg5e7itoj+jfzCHtka+fhW5HKkhY+gFgFxKwPCLGV5cXP4opTdm
h8I0NCW96TYwn+OMDqsC+dGHAGPyBtxl96atau7moQFZ2UkPnSOA++ZRvAY7Cdqx
yTV4LqA4sywVnGR6ieEzeF0yTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6N0XfQ
YV7ve5L3bEvA58b3MbIVMB8GA1UdIwQYMBaAFNafgmyMIBEVtH7sw3+14ACONWvc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZBRC82MzMyNzc3QUI0
NUUxMUYwQkQ2OEE5M0VDNEY5QUUwMi8xcC1DYkl3Z0VSVzBmdXpEZjdYZ0FJNDFh
OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFwLUNiSXdnRVJXMGZ1ekRmN1hnQUk0MWE5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDZBRC82MzMyNzc3QUI0NUUxMUYwQkQ2OEE5M0VDNEY5QUUwMi8xcC1DYkl3Z0VS
VzBmdXpEZjdYZ0FJNDFhOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOKVSKBy5xP8gfZ+2ZCIVkmzQcde2gUMppq1HFVyhHphiQ7AC1+YQAGZTI8u+
3ClKHN2Lvr37iM/U8GzLALX3/0SAqV2gdAntD2M7c3NRDli5W5cjaWwOLNfKucNg
Y5vYW4ylP2lUuq31tnabMNJbbH/P4v2q2OiucA1ENv2vADGY6ueQRM6/yv4blVmV
xUdNeykj9xAtq7DP7X4TOmnDaqeuA5jO2JsX4jG5dQ0Q6iKmt4M0oeHPHgL3Ispb
6Lh8xD2x7EgPVleNdp2ClgpvR6rKQR3PFhhFvBIUGw8uCG9iH23jA8rWoS56N+G8
1sQEH16Ag205bHrPYj8C7dk1gw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:29:13 2026 by rpki-client