
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: +lqR4SJutPzLT6ZXNj5+cDsFZ8LwifjfY0vsokkifuM=
Subject key identifier: E1:7C:E8:6A:34:2C:A0:ED:B6:67:56:16:31:49:03:08:0D:38:97:34
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 0649
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 060D
Signing time: Mon 26 Oct 2026 22:52:29 +0000
Manifest this update: Mon 26 Oct 2026 22:52:28 +0000
Manifest next update: Mon 02 Nov 2026 22:52:28 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: xKuJjmHwo3WAns5B1TxwinlurPq3piKiheHHcJV36rg=)
2: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: Ukm0DVCqjUixRydQv4qcXv+u8T+wMYMGwPEsfYHBwSA=)
3: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: EDSyywAlth0253L1QQ+IqMEAMKfmaNqjJ/pES0YetTA=)
4: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: O7p2Rox+M+s9pTIEfTjnlL45TRNUxOOP3aNdA+7UA2o=)
5: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: 9OTaeXdaTZPqCV756z5HWqZ/zRVxSyJJvaSBvdg7Ej4=)
6: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: daXo2DmOXN6G+PHtlqM7SlytT+MtdjtgYiK4YJOI0z8=)
7: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: AQCdnyWc2A0RuJ5m4pn2aOSXExDCTyUrz6gNwl8Ipp0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 22:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1609 (0x649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Oct 26 22:52:28 2026 GMT
Not After : Nov 2 22:52:28 2026 GMT
Subject: CN=6adfd9ad-0332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:eb:19:7f:a1:ad:9e:9b:12:ae:55:cf:86:f4:
71:f5:e3:e4:9a:86:5a:23:7f:54:93:2f:6d:7a:53:
91:64:ab:3a:4c:8d:e0:96:78:41:c8:3c:ba:f9:25:
82:c8:8e:20:13:61:51:70:16:90:5d:25:2b:19:44:
ea:3e:6a:2e:df:04:8d:66:e2:91:71:22:7c:72:f8:
14:69:9a:a1:90:60:4e:4d:02:f0:fb:54:f5:b0:f2:
33:f9:86:be:62:a6:f9:3e:e2:d8:bb:81:22:6f:bd:
42:1f:80:5f:6b:94:7c:6c:a6:d0:6e:82:67:51:b5:
76:74:86:a4:ec:dd:b8:91:12:ab:fd:0a:37:a1:5c:
a2:f5:cc:e7:81:9c:64:20:b0:85:0a:d3:ac:3a:bf:
31:6b:ef:ac:d9:e8:30:c8:f6:c5:93:e6:38:df:0c:
d5:cb:c9:bd:31:98:1c:64:18:10:ff:a3:06:ff:2d:
c7:85:0d:db:3c:34:88:49:19:04:28:68:bd:a7:b3:
60:28:ba:3a:39:20:0d:c4:ad:f9:59:fa:55:b7:49:
c6:d9:5e:3d:2e:7d:a9:d4:1a:b1:87:9c:05:73:13:
19:b4:fc:51:34:bb:61:96:c7:8d:ac:ac:1a:21:fd:
89:98:ff:2b:fa:e8:98:a4:ec:74:92:df:3d:ca:5f:
a3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7C:E8:6A:34:2C:A0:ED:B6:67:56:16:31:49:03:08:0D:38:97:34
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:5e:88:02:47:0a:35:2a:bc:53:cc:5e:3c:f3:7c:ba:69:
8a:6e:52:72:61:26:a4:fe:d3:aa:37:84:79:b9:24:96:25:7b:
f5:52:2c:54:f8:03:8e:7e:bd:9e:a6:83:60:28:8c:1f:eb:21:
dc:5d:17:a0:cd:36:e8:61:21:a4:9c:b3:ad:5e:59:37:ac:82:
93:cb:6a:19:e9:48:94:09:5b:af:fb:f7:58:bb:3e:33:37:05:
eb:14:99:a5:a7:34:73:54:54:d1:4b:d4:f9:0b:84:91:e1:b2:
ae:69:05:78:52:31:e9:6f:ce:11:35:dd:db:9d:3f:f7:88:5a:
35:c0:97:9d:44:32:f6:36:b6:99:55:ad:d1:43:7a:74:80:91:
53:44:d1:e5:33:e1:92:fc:f2:a1:19:1e:69:c1:28:96:ec:ff:
5a:f9:fc:a7:bb:d8:cf:eb:b8:47:67:5f:0e:23:20:3f:e8:01:
7e:79:6e:2b:c1:52:e5:da:30:24:5c:df:58:34:e2:dc:1e:66:
3e:32:0e:31:05:3b:65:fc:90:73:13:81:52:be:d0:79:27:81:
51:0f:55:37:e0:35:03:b1:61:ef:f2:43:f6:b1:1b:1e:ba:ca:
bd:1f:a6:2e:58:4d:7c:42:51:0e:81:77:87:73:89:a8:c4:7b:
b7:08:80:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:42:26 2026 by rpki-client