
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
File: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json)
Hash identifier: Q30tCEQ8KZO7+GQQ3nlqB+w29t2m4z8wGpbrtG37DXA=
Subject key identifier: 3F:C8:6F:DD:79:95:CE:81:E4:73:AA:0E:55:26:EA:62:C2:39:69:C0
Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
Certificate issuer: /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Certificate serial: C5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
Manifest number: 033A
Signing time: Thu 21 May 2026 02:00:14 +0000
Manifest this update: Thu 21 May 2026 02:00:13 +0000
Manifest next update: Thu 28 May 2026 02:00:13 +0000
Files and hashes: 1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: Z18EGrUcnYcFA0n1LwHXWbOtQ39MMEGEGxeJuo17phU=)
2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: SMyrmxtQV4hV/cATS/CS4tud6wAe7MdwhtLWVFj4Hls=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 197 (0xc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Validity
Not Before: May 21 02:00:13 2026 GMT
Not After : May 28 02:00:13 2026 GMT
Subject: CN=6a0e672d-81f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:3b:df:75:25:c3:ef:d6:af:20:49:61:b7:
0e:a0:b4:63:90:f7:86:ad:dd:84:72:1b:0f:5c:44:
d0:94:f5:cc:c4:7a:31:9c:9a:29:f4:39:95:b2:32:
82:4a:98:52:61:9f:02:51:f1:63:5f:95:5f:a5:bb:
e6:f5:6d:b9:e7:76:ff:ba:6c:53:ee:b3:4f:63:7e:
e5:fb:c2:28:d7:16:b5:57:c4:86:28:17:ed:68:c4:
bc:98:ae:e8:0d:57:63:95:21:b9:43:df:ca:e7:fa:
f9:35:2b:63:19:8a:89:28:25:17:c4:62:83:bf:e1:
dd:f6:b4:20:cb:60:ed:17:7a:c2:8a:1a:bc:1c:67:
0e:24:3e:48:81:13:f0:94:60:c5:1b:07:62:24:40:
61:c1:3b:54:08:2b:a1:6c:dd:aa:ca:b3:17:87:a3:
c2:3b:63:8e:25:1a:4c:cf:e9:1b:f4:43:04:56:51:
42:1f:e0:ec:3c:0d:19:2a:b6:ba:c8:c6:06:b7:75:
2e:b8:fc:26:e6:18:8b:bf:c9:96:ca:63:4a:2e:1d:
93:ea:c3:97:b4:72:2f:46:42:8c:2c:9e:ff:ee:dd:
bb:e3:ad:f0:03:18:d6:ff:df:3b:2f:70:2c:0f:d1:
bc:0c:7b:c0:3e:4a:5f:c7:78:3d:75:cc:80:e4:08:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C8:6F:DD:79:95:CE:81:E4:73:AA:0E:55:26:EA:62:C2:39:69:C0
X509v3 Authority Key Identifier:
keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:be:42:38:09:c8:7b:ba:ca:17:a7:ac:60:a1:e6:1b:bb:b5:
85:14:84:b1:28:87:11:e2:11:01:ca:08:e2:09:8a:94:ca:bf:
af:33:39:78:f4:e0:9e:8b:d7:1f:15:c6:f5:c2:e3:f9:36:12:
ef:9f:88:e0:ba:60:f3:93:0f:fd:e1:77:db:04:1b:cf:70:c4:
40:2b:a8:11:95:19:c6:42:41:c1:43:f2:78:6a:5b:71:8b:62:
6e:62:67:40:fe:09:fe:29:99:a9:64:a0:4f:11:9f:9e:c4:8b:
76:fb:8e:9b:1f:3e:be:28:b9:df:31:8d:df:63:c6:35:f9:40:
43:99:ce:8c:63:72:4f:f1:71:31:ab:26:6f:a4:24:d9:63:b3:
6f:7b:bd:b6:e5:d1:23:9f:26:74:bd:54:0c:e9:26:62:71:20:
10:da:88:d7:c1:ea:37:1b:db:d0:7e:d4:b8:91:3b:d5:68:95:
75:e4:4b:f3:5d:19:26:d1:58:05:39:22:91:89:a7:2f:ce:15:
6a:0b:93:28:48:63:cc:87:11:43:3a:99:b1:84:53:2d:87:8b:
95:aa:78:3d:48:f5:a6:ef:84:69:45:ba:6c:94:52:11:b3:d1:
eb:8e:05:e7:8b:b5:93:9c:f4:2e:0e:8c:6f:6f:6a:88:55:b7:
01:4b:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:27 2026 by rpki-client