
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: LCU2U2JPcJG1GL80Uq2smQmbHNfguo7uhgacNaNYGH0=
Subject key identifier: 17:39:B3:79:ED:78:66:EA:B5:77:3E:81:C6:A2:A5:50:C8:94:92:15
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 4602125012CE9E08F0D4742CFC37767CD0D12B21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 07D5
Signing time: Sat 18 Jul 2026 05:57:03 +0000
Manifest this update: Sat 18 Jul 2026 05:52:03 +0000
Manifest next update: Sun 19 Jul 2026 09:10:03 +0000
Files and hashes: 1: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
2: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
3: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
4: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
5: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: 1+hHsDtvG0AtT1vBiBdwZMIY/EU/MWE3rIlfOvXiD54=)
6: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
7: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
8: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Jul 2026 09:10:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:02:12:50:12:ce:9e:08:f0:d4:74:2c:fc:37:76:7c:d0:d1:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Jul 18 05:52:03 2026 GMT
Not After : Jul 19 09:10:03 2026 GMT
Subject: CN=1739B379ED7866EAB5773E81C6A2A550C8949215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:66:84:13:e2:50:9a:ef:6b:d9:ad:f9:b1:df:
8a:60:47:53:41:4d:8e:fb:90:ed:19:f6:0e:27:5f:
b2:5b:90:1c:b3:dd:d8:9b:56:13:ba:92:ee:38:20:
72:5d:fa:14:9f:54:ad:09:85:e2:cd:07:c8:a2:b7:
9a:54:d7:79:3d:f8:05:b3:35:84:ae:6e:87:3c:81:
8b:7a:12:96:97:06:aa:4a:65:3b:ef:80:12:43:b3:
ed:02:a9:c9:c0:ce:7c:e7:0d:3e:ac:48:4a:83:18:
9d:bb:7c:40:e8:12:94:f9:71:1e:60:a1:6f:93:95:
3d:f1:29:48:a9:ab:1f:6f:3c:75:9b:88:84:6a:48:
97:47:bd:05:04:93:f5:32:c7:ab:93:11:db:15:d9:
3d:7a:05:17:be:e1:35:23:5d:86:88:98:99:a7:75:
3f:3e:98:3c:e9:f5:bf:b5:b8:31:d7:80:c3:88:46:
24:c2:e2:4b:57:85:1b:06:03:e3:18:fd:fc:05:d9:
bf:4c:e5:14:d6:39:6a:36:11:84:c8:14:b8:72:c6:
65:76:62:c4:b7:dc:da:cf:da:05:4d:41:bc:5e:15:
ad:8f:cc:f8:80:bb:53:ee:d9:d3:00:fd:47:68:a0:
04:2d:44:78:92:9f:a7:76:92:0b:1d:0f:6e:73:85:
88:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:B3:79:ED:78:66:EA:B5:77:3E:81:C6:A2:A5:50:C8:94:92:15
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a1:80:c4:47:30:05:e3:69:c4:0b:fb:86:37:8a:28:5a:6c:
ce:22:65:e5:20:77:80:03:32:94:89:4f:89:1e:fc:13:0d:94:
cf:68:a1:1c:e2:e3:a7:16:ef:6b:15:9d:54:dd:34:84:bc:e7:
a6:95:bf:90:9f:7e:9c:b8:e9:1b:ae:5d:e4:8a:71:91:f8:87:
9b:c7:7f:9c:df:9c:a7:8b:85:24:a5:ef:d1:97:91:36:13:34:
51:0a:17:f0:34:48:41:7a:d6:a1:ab:b1:65:12:5b:76:88:b3:
c8:3f:f6:3a:08:ec:8b:0d:21:7b:83:1d:f1:c0:c7:8e:64:9c:
3a:94:32:9b:31:01:1a:78:4e:13:8f:a5:76:5c:bd:37:da:b1:
ba:35:58:36:97:0c:ca:b5:10:6b:a5:35:39:4c:1a:cb:b1:a7:
80:9e:4d:80:05:f6:55:70:aa:6c:f6:50:45:71:14:98:b4:58:
39:24:5c:12:56:fa:4d:4a:83:70:78:19:fb:5c:31:b4:bd:22:
f7:f5:4c:42:40:83:f6:22:b3:9b:ec:e6:4f:b2:a2:18:1a:49:
2b:c3:9f:72:a3:9e:be:4c:1e:f3:79:45:30:0e:e5:99:ff:27:
da:73:10:6e:71:79:a8:86:08:72:6c:f8:65:38:3e:90:af:57:
2b:58:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 11:07:35 2026 by rpki-client