
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier: /tgtCetwkOJ14UQC+kG6F+g+VEJCwa5Fpe/X3GkDeWU=
Subject key identifier: 08:3B:23:B0:77:CF:D6:82:65:C2:41:52:6E:44:C9:CC:D0:E2:F4:EC
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial: 0920
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number: 0916
Signing time: Wed 20 May 2026 20:18:00 +0000
Manifest this update: Wed 20 May 2026 20:18:00 +0000
Manifest next update: Wed 27 May 2026 20:18:00 +0000
Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: mFwbp1QHQr75fuiceE3lyl/Kab30T1zLhkpnygG6fiw=)
2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Validity
Not Before: May 20 20:18:00 2026 GMT
Not After : May 27 20:18:00 2026 GMT
Subject: CN=6a0e16f8-56f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:cd:69:8c:fb:e8:21:dd:2f:bc:86:63:a5:
e1:c0:d0:38:2f:dc:73:01:0c:59:fd:db:d3:5d:a6:
6e:9e:d6:c3:54:16:ab:1a:4e:2e:90:1b:91:cc:d3:
55:7c:6a:86:cd:34:ed:00:52:47:ae:64:17:ed:33:
28:70:af:da:6c:e1:e9:07:21:4c:f7:f2:ea:98:d2:
18:2d:40:c3:f0:16:30:32:27:57:1c:33:53:90:9f:
7b:c5:d5:6d:22:65:c7:71:71:fc:4b:12:b0:9f:da:
de:0f:ed:16:8a:d6:e3:87:d2:47:19:72:11:7e:b7:
07:19:f6:ed:c5:81:6c:41:6a:92:9c:51:ec:e6:c7:
eb:52:af:5a:9a:9e:dd:c7:9d:f6:9a:59:9b:cf:d0:
7c:ed:ae:7c:18:ef:0b:97:ba:2a:46:6c:75:f0:cb:
f2:56:a2:96:b9:72:52:9b:63:fb:dc:4c:cd:5b:5e:
13:f8:36:7a:b4:89:13:da:de:77:d3:06:46:77:48:
6d:c5:25:56:91:9e:6e:36:e9:f1:70:d6:80:a9:23:
01:ee:cf:28:1b:0d:e4:e0:03:f3:97:c8:68:40:20:
e6:27:11:3d:70:37:62:42:36:68:70:32:51:af:f8:
fe:d5:28:66:b6:1b:6c:fc:c0:16:10:ce:25:f0:d2:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3B:23:B0:77:CF:D6:82:65:C2:41:52:6E:44:C9:CC:D0:E2:F4:EC
X509v3 Authority Key Identifier:
keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:56:fe:73:65:c3:e2:3d:40:a8:ef:50:65:ad:f4:18:16:
64:57:83:c1:05:13:57:93:84:bb:fc:1f:4d:55:1a:88:97:03:
9c:73:9f:11:fc:81:04:27:3a:39:d1:78:d4:a7:14:0e:a5:3f:
e8:a6:91:ad:f3:84:bc:78:2c:72:50:e2:45:28:04:cd:d7:11:
ea:63:2f:2b:0b:dd:c6:11:41:2e:88:f0:9e:3a:84:09:1d:66:
c2:96:74:69:14:9c:e2:e8:57:d6:30:40:d6:3a:93:9c:a1:d0:
4f:44:31:20:0d:05:6c:d9:ca:0b:1e:02:50:97:b2:a5:5d:77:
a5:10:ce:92:8d:7b:dc:62:95:7e:bd:b7:88:cf:b4:89:3f:d7:
e1:8f:5c:a9:56:af:ea:31:88:95:b9:5f:8a:56:d9:81:b7:dc:
99:54:8f:2d:05:23:83:40:6f:08:9c:54:fd:05:a8:53:9f:30:
4c:fb:c3:d8:ad:92:46:2b:13:2e:6f:d9:0c:1a:21:83:42:73:
a5:1c:07:e5:91:42:e1:ab:19:fd:d2:a9:69:c5:64:64:64:26:
2e:92:3a:a4:e4:ee:5c:a1:52:b7:bb:20:1e:9c:2f:2f:6e:5c:
4a:36:fe:51:2a:d7:30:4b:ee:8a:ab:c5:62:c9:d0:a2:92:59:
a4:fe:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:57 2026 by rpki-client