
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: nReGHxDKD9GwqADcinQkqjScjmCvSKaD0WIVSO2zfkA=
Subject key identifier: 5C:05:8E:2C:E0:E1:83:D4:B0:43:ED:BE:ED:89:03:50:47:19:8E:83
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 03C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 038F
Signing time: Wed 19 Aug 2026 01:06:38 +0000
Manifest this update: Wed 19 Aug 2026 01:06:38 +0000
Manifest next update: Wed 26 Aug 2026 01:06:38 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: /qOpdRiSUqydl+xtGRVCnse32qFxA+GYrCZi/2zXCK8=)
2: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 01:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 968 (0x3c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Aug 19 01:06:38 2026 GMT
Not After : Aug 26 01:06:38 2026 GMT
Subject: CN=6a85019e-42ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:18:b0:8a:69:0a:59:b6:a5:4b:33:06:45:
9a:44:83:01:84:8f:50:28:b9:72:b9:23:52:12:48:
ef:6b:26:99:b8:6e:4b:14:f9:a6:7f:27:51:b6:05:
4c:68:cb:0b:8c:e0:a7:2a:24:92:8b:05:9c:ec:bb:
30:2d:76:19:52:a0:f9:b2:a5:b2:d8:34:17:c2:ef:
f3:e9:d9:46:1f:72:e7:43:b0:d8:57:8a:d5:a5:90:
85:f9:9c:eb:44:e6:28:ee:e8:01:c5:c0:aa:7c:5a:
ab:2b:39:27:72:4b:0e:1f:2c:77:12:6a:2d:5b:8f:
5b:c1:d0:8f:ca:df:b5:f3:9e:73:37:ea:66:1c:a3:
7b:21:90:3b:99:fe:d3:26:68:a5:31:9b:f3:1e:e6:
88:f7:00:0c:ba:44:87:9c:06:72:5c:24:00:3a:d2:
8b:32:12:5d:0c:b6:d9:28:78:0b:dc:8c:b3:7f:ae:
bc:58:69:42:37:79:18:7d:04:cc:3a:90:d2:4c:ea:
44:94:ac:ab:99:01:07:81:11:e6:59:d0:84:86:b3:
57:05:75:d7:c8:2f:19:08:4d:c6:d6:ad:18:64:30:
ab:e4:d2:5a:e5:34:7f:7f:2b:01:1b:3a:25:6d:49:
69:a6:d4:9e:b3:d4:4e:6c:51:a6:38:ee:8c:55:fa:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:8E:2C:E0:E1:83:D4:B0:43:ED:BE:ED:89:03:50:47:19:8E:83
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:a5:fe:83:c3:1c:c7:6e:07:88:9f:48:ef:87:1b:56:34:
4b:a0:d1:27:8c:55:32:fd:30:12:f1:42:2b:5e:31:77:ba:14:
06:38:a3:b7:ec:f9:d7:45:60:ba:de:df:49:da:e7:22:56:84:
ab:e0:53:d7:8b:3d:68:dd:f0:e4:08:b5:12:6c:f5:79:36:0f:
f1:83:db:38:cd:37:0c:2f:2f:d1:2b:94:7d:72:a4:0f:e5:26:
b6:3c:23:2b:5c:07:61:0f:8d:1f:a4:90:5c:17:47:cb:65:bf:
23:f6:7e:94:29:5c:42:f7:9a:c8:d1:3f:f4:4d:f9:92:39:c5:
3f:b7:3e:00:2a:19:aa:98:81:30:61:19:f2:fe:4a:a6:b6:2f:
32:64:76:e1:79:db:0f:1f:27:29:94:00:9e:ad:0a:0e:78:66:
ba:44:50:83:32:a5:95:6b:03:31:5b:8b:f6:01:57:7d:df:0a:
26:8b:26:a1:5c:53:ad:8a:ec:a6:c1:86:ab:76:55:ef:5b:2c:
d0:71:11:d3:62:13:fc:81:7a:18:e0:03:05:16:a1:57:65:17:
b8:3a:70:d0:75:32:db:f2:fa:1b:f4:61:43:09:3e:16:7c:e1:
a9:a0:ca:63:a8:73:8e:15:e2:18:ab:d9:57:fa:ea:8f:0c:ea:
1a:49:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:51 2026 by rpki-client