
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier: 2BfmOIwP9nI2DCAm4VgAe44grs0JtdHXF6UTV0tMxf8=
Subject key identifier: D4:71:53:93:E6:93:74:45:2F:09:1B:F2:34:99:2B:8E:CE:2E:AB:77
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 0596
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number: 04AE
Signing time: Sun 21 Jun 2026 00:39:35 +0000
Manifest this update: Sun 21 Jun 2026 00:39:34 +0000
Manifest next update: Sun 28 Jun 2026 00:39:34 +0000
Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: SROL1+edmmvP6VxcEyV1GtkwjoGHFvfJz9Gn/ES+aQU=)
2: 39D293CC61A311F184335DAE8747A888.roa (hash: UFEXheRWbldng6QGjy1RCb9qHZzLRVLyuLDbBU1e2yo=)
3: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: VkKyUkZvufLeqNWH4XS4MFj5LEClAP479cUeOm9p8S8=)
4: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: mwjCND/hb5mcBVM5huPhi5+mLyWxYoFCwlwxmeL4yts=)
5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: vsM3lJioCOwfp3LZZpdveH83fo62+Y9urJ8LtwiCnMw=)
6: 48421E1E61A311F1AD9134E08747A888.roa (hash: 3KvNugzJmOfWXWejLGn4X2zH7tN8BJMAw0UhDMUUtUI=)
7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: WLbihB2PWZ1o++RM42EGDbLREOZKJSeaYxV3v/0bXwE=)
8: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: VpLsJjoOM5TQH3OZEcPzV4PLIS2G8Hn1FrYlhKbie54=)
9: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: awi/D8lHc6L4dnToUMe+Br+mJLk9zICL465IydEzQlc=)
10: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: 3zeR3y4ThnqjrUYK2B2lRbeCm3UuFhf7qDtePwaC2RU=)
11: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: tnJ/yjknRBuc7UcBwzOHFJo2tnhzqFgevM34YS5rTmY=)
12: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: /JQTTMGxpG1rEnJAGVjqQn7ENfIeEQm+h8FaXqx7IVA=)
13: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: kNZ9kMcIVbL2jK5YIL401eBQNsQQQ0xAhM8Sv/4h4WQ=)
14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: Xpp2kFVSkuxzwBMowkkOloasdXHXgZJRNUiRPlt0tnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Jun 2026 00:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1430 (0x596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Jun 21 00:39:34 2026 GMT
Not After : Jun 28 00:39:34 2026 GMT
Subject: CN=6a3732c6-c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:e4:38:24:68:78:53:4b:e0:58:5a:6c:29:
af:db:14:87:e7:63:e4:c7:f4:b5:aa:16:5d:2d:40:
b1:9a:b2:3f:ee:42:60:dd:f1:05:01:a5:8c:36:b9:
5b:06:4f:a8:41:e0:69:da:cd:af:fe:cc:78:d5:8a:
69:ba:49:77:2b:91:76:16:8a:2b:f2:80:40:33:73:
22:f0:d1:67:c9:3a:79:46:1e:b1:61:1b:79:39:0d:
28:df:9f:ab:16:ee:2f:3b:3e:41:2d:8d:d5:ca:9d:
70:9e:a3:61:10:55:83:81:08:a1:f5:21:91:4d:de:
38:1e:dc:b3:2d:a6:53:d6:dd:07:29:e2:ed:5e:30:
67:6e:23:e3:8e:fb:e0:3a:6d:6d:6b:d0:1f:4f:5c:
e9:13:2d:96:87:ef:ab:a3:71:3b:a7:78:f6:f4:d9:
6d:46:8c:ca:5d:2d:23:fe:6e:ec:ac:34:ac:f1:f4:
18:72:56:59:e0:58:98:00:38:f4:44:53:af:34:42:
ca:47:05:4d:1b:4d:a9:9f:ab:cb:fc:4e:af:ed:51:
20:43:17:d8:b7:ad:bc:60:33:0b:8e:64:83:f3:2f:
2b:90:6f:a0:8f:b9:cd:0a:bd:5d:5e:52:1c:00:47:
7c:d1:08:04:30:24:36:6e:94:75:22:8c:7e:64:bb:
ff:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:71:53:93:E6:93:74:45:2F:09:1B:F2:34:99:2B:8E:CE:2E:AB:77
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:41:c0:6e:88:49:82:ec:07:a0:2b:5a:d3:c3:7d:88:bb:
a3:93:bb:47:f3:8c:91:e8:85:fa:c7:0a:4f:45:39:e7:8c:91:
31:b0:2b:25:7b:66:52:80:3a:86:68:5e:b1:81:a2:60:68:e4:
04:35:75:08:db:04:0b:27:e9:cd:bb:ed:da:7e:d7:a3:03:67:
fd:8a:a2:d4:52:43:29:57:a0:27:11:a1:6d:f9:40:a7:c7:62:
e6:1e:dc:e3:15:6a:24:ec:6c:9e:9c:ed:62:f7:a4:d6:d2:d3:
dd:e0:c3:6c:f6:41:38:da:c5:5c:39:67:f5:c4:4e:cb:55:12:
52:cd:99:79:56:ef:19:ca:f1:3d:17:11:5a:9b:f7:a5:75:2c:
e1:49:28:07:13:ca:a3:2f:36:c2:58:1f:e5:8b:f5:cb:17:fb:
9d:c8:1f:97:eb:1a:94:c4:6e:ed:e2:7e:a6:42:7e:d3:0a:30:
7e:4e:bb:7c:c2:a6:a6:51:59:39:5a:67:f9:4e:08:9b:f5:39:
bb:a9:a5:ea:7f:2c:60:d6:cc:5e:45:e0:f5:6c:b3:43:82:2e:
86:cc:24:e8:f7:5c:89:67:59:67:21:71:2b:27:7a:b1:06:08:
a8:f4:6c:6c:82:9d:a8:29:98:1e:49:47:58:d3:65:19:56:c2:
95:2a:f7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:04:51 2026 by rpki-client