
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: SRdAaLVw1exweFS4MZT5UqA7WzY6pyko7msf+2aPHv0=
Subject key identifier: 76:69:C4:44:91:E6:1E:EB:48:B7:E5:F8:0B:BF:7A:92:49:3F:6B:E9
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 0397
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 035E
Signing time: Fri 15 May 2026 01:02:40 +0000
Manifest this update: Fri 15 May 2026 01:02:39 +0000
Manifest next update: Fri 22 May 2026 01:02:39 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: ASTr6HCJJdIlLHnMQzrTV9GXs/HLSsTkPgu+8ncN3g0=)
2: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 919 (0x397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: May 15 01:02:39 2026 GMT
Not After : May 22 01:02:39 2026 GMT
Subject: CN=6a0670af-898a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:96:89:da:5d:2f:f4:d4:a0:5d:23:7d:4c:
5c:42:c0:93:bd:24:5f:3e:9a:13:7b:d2:78:89:96:
21:7f:bc:70:9a:93:99:a6:e2:40:1b:cf:d7:1f:c4:
e2:27:f6:df:55:95:f6:5e:9f:09:47:fe:82:32:73:
3d:27:3e:48:7d:c3:66:c6:4d:b8:21:b6:51:4b:76:
fd:b4:37:e7:e0:ea:61:6e:53:f1:d8:e2:0d:29:52:
d0:94:ec:20:28:2a:3e:7d:e2:1a:8a:a9:70:6e:de:
52:f3:c1:76:04:95:4f:06:84:ff:27:2e:11:19:f1:
5b:30:f9:1b:96:95:2d:29:51:14:94:d6:8d:d0:d3:
fd:a6:68:5c:36:40:36:8c:a8:9f:46:1c:75:de:16:
18:4a:a7:fe:f3:b8:e8:13:e5:b6:bd:14:6b:3a:7a:
55:4e:c8:c5:bb:da:9f:6d:a7:95:0b:77:e3:4a:14:
cd:27:61:05:d0:8c:9c:00:3c:b9:6d:39:fb:84:ff:
3b:74:94:6e:45:2d:b8:56:5e:10:e9:f2:2b:12:f7:
4e:3c:86:1a:92:18:92:1d:f5:25:15:b2:25:4e:30:
1f:a0:5c:01:92:12:ba:2d:6e:41:c0:f5:0e:5a:fc:
0d:76:d6:7f:ea:02:43:a1:8f:4a:d1:b2:15:bb:29:
a6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:C4:44:91:E6:1E:EB:48:B7:E5:F8:0B:BF:7A:92:49:3F:6B:E9
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:32:b8:9e:92:1e:24:15:81:d2:8a:a2:36:d9:ed:a6:54:34:
51:c8:50:78:e0:55:ef:e3:55:58:ca:c1:fe:9a:cb:0e:f8:ec:
6b:0e:93:8a:4f:0a:eb:31:88:34:e8:1e:18:3e:c3:46:44:b2:
82:50:22:7a:d5:09:62:b8:fc:0f:ff:0a:33:d2:c0:99:02:ed:
db:ce:80:16:dd:bc:df:51:03:a8:1f:31:e1:8e:db:6a:a0:23:
e3:f6:68:ca:60:78:db:09:1d:8f:e0:bc:a9:5a:06:3f:79:35:
f2:a3:06:8e:cf:85:2e:c0:06:78:65:d1:64:d3:e8:73:01:ba:
31:0f:03:1d:aa:74:e0:42:a8:2d:3a:8b:7f:0b:1a:9c:26:fe:
90:4c:2e:98:ce:4b:db:8f:79:df:85:bf:76:45:be:2c:bd:c2:
d7:7a:94:61:d2:ab:08:32:df:2c:ec:5b:c1:d4:c7:fe:cd:e4:
de:dc:3e:73:45:9d:f2:a8:eb:72:fc:3d:85:2a:c7:a4:fd:44:
9b:af:a5:2d:1f:34:5b:73:7a:ec:d0:01:fb:e9:48:57:2a:5c:
5c:d7:dc:af:0a:34:34:49:ac:ce:60:18:53:c2:07:1f:a9:22:
a7:e2:a0:ec:f0:b9:10:19:a2:f9:a6:19:3c:ee:55:a8:bf:87:
7e:d7:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 02:57:57 2026 by rpki-client