
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier: /pooOe4qleWHVVvKMMmULIdJC0DVVNyko+rOBKJV9B4=
Subject key identifier: 70:4F:B8:8B:D5:E9:C1:72:64:67:3A:B1:2F:4C:B5:2D:5B:C2:C8:0A
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 05C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number: 04D0
Signing time: Sat 15 Aug 2026 00:30:30 +0000
Manifest this update: Sat 15 Aug 2026 00:30:30 +0000
Manifest next update: Sat 22 Aug 2026 00:30:30 +0000
Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: c+NIouofscfv/FYqwm25vWJJe9sVQxWsNhfzmCcMSRM=)
2: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=)
3: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=)
4: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=)
5: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=)
6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=)
7: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=)
8: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=)
9: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=)
10: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=)
11: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=)
12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=)
13: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=)
14: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 00:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1479 (0x5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Aug 15 00:30:30 2026 GMT
Not After : Aug 22 00:30:30 2026 GMT
Subject: CN=6a7fb326-2cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:9d:d1:af:96:38:85:97:91:79:ce:d3:a9:
d2:46:4a:3f:5a:e3:7d:c5:4d:ea:c4:63:19:b0:2c:
e1:93:66:09:39:9b:4f:9d:76:b9:97:bc:e0:22:c9:
28:72:33:91:83:07:4e:9c:3e:a9:1e:65:b3:92:5c:
31:6f:97:7d:03:b4:d5:10:59:a4:7b:43:ec:43:3c:
bc:ca:38:1c:44:fa:5d:fc:67:32:d9:9a:88:84:37:
af:6b:85:2d:1b:e9:94:ae:f1:21:ff:31:cd:a6:d0:
a8:7a:0c:63:36:63:95:a2:9f:0a:f7:32:65:a0:68:
2b:74:32:75:ae:33:5f:2b:ca:78:31:54:96:8b:0e:
ac:8c:9b:c4:98:b7:90:20:93:22:a2:20:3f:f8:f5:
34:a3:26:e2:9d:5d:cf:c1:9d:24:4d:24:dd:4f:91:
28:b6:98:0c:a3:32:74:4e:2f:17:43:c1:c0:ad:e7:
f3:0c:ad:3f:c3:8d:fd:be:69:b4:75:6a:92:bc:fc:
19:b0:73:1f:6a:d1:7a:c4:67:84:03:e2:05:3c:d8:
3d:9a:c6:4d:16:43:33:de:38:87:52:7d:00:96:e6:
bd:76:94:77:44:e5:a9:0a:ed:22:cb:2e:31:86:6a:
dd:ee:bf:2f:bf:f9:a4:ca:a6:69:a6:90:9a:58:3c:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:B8:8B:D5:E9:C1:72:64:67:3A:B1:2F:4C:B5:2D:5B:C2:C8:0A
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:61:f7:22:01:92:98:2c:ad:17:a1:b5:ba:32:f9:14:80:1a:
59:f7:5e:38:7e:52:83:a0:ad:dc:71:60:97:67:d9:82:97:8a:
77:31:b7:4b:1f:37:b6:5f:53:7f:8f:ee:c2:ed:56:8d:8d:d4:
02:75:ae:74:a0:bf:06:14:32:ac:87:6e:47:34:69:6d:de:f2:
86:c1:4c:8d:e1:47:6f:f1:92:a7:7a:65:0d:36:aa:6a:04:45:
dd:f8:17:ad:36:d8:5b:d9:b7:e0:f5:5b:dc:ec:92:e4:f1:43:
97:93:da:6f:27:37:bf:8a:74:2e:89:d3:62:f5:f6:7b:d5:97:
50:63:21:ec:ba:cd:c2:64:e7:45:0c:1c:e7:b9:25:dc:57:15:
86:b1:27:13:fd:04:d4:be:a2:4a:70:ca:ae:b5:c3:8a:9a:fa:
66:4e:ed:5a:61:24:e7:27:57:1e:33:fd:10:4e:81:fd:44:f8:
ee:a4:b2:1b:ef:17:9e:94:c0:ea:81:f9:92:23:eb:1d:ee:f2:
4e:2b:46:16:4f:2a:a2:d4:7e:32:04:2c:8c:d1:a5:8d:c1:a9:
e9:68:59:1c:c1:19:98:4b:90:81:ec:da:12:ad:78:00:18:c7:
b5:be:9c:7a:75:15:29:d9:4d:81:83:d8:cb:84:61:f5:a1:57:
60:f6:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 16:50:07 2026 by rpki-client