
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: 6Uqddy3LBgoywtpXw6VFQqbTCIY0AY1UMWkng7wCmAc=
Subject key identifier: 11:17:85:5D:70:9A:7B:43:68:40:61:A1:A1:D8:71:72:88:73:A8:11
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 5A9A08951FE7832648EBF5392AC5B9C39356576E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 0782
Signing time: Thu 21 May 2026 11:59:27 +0000
Manifest this update: Thu 21 May 2026 11:54:27 +0000
Manifest next update: Fri 22 May 2026 12:01:27 +0000
Files and hashes: 1: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
2: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
3: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
5: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
6: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
7: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
8: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: E6wq72SO0xsvGxNUi4aHcMRcUTzJtgnaNL8aWRRNtiA=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9a:08:95:1f:e7:83:26:48:eb:f5:39:2a:c5:b9:c3:93:56:57:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: May 21 11:54:27 2026 GMT
Not After : May 22 12:01:27 2026 GMT
Subject: CN=1117855D709A7B43684061A1A1D871728873A811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:86:e6:f9:c7:1a:cd:0a:4b:da:64:2b:05:
d8:b8:22:12:4c:05:a6:bf:2a:e4:b0:91:e8:a7:76:
96:62:9f:ec:6e:81:24:5d:63:2e:ae:8c:26:de:b4:
48:fc:da:00:0d:c6:40:f0:2e:a6:20:b7:e1:85:51:
91:88:2f:b3:62:28:3c:03:29:73:4e:1a:68:05:a6:
da:ea:5d:39:d2:6e:ac:b9:35:e3:af:73:43:39:b2:
6a:c9:c2:ac:98:13:27:b3:4a:79:cb:c4:b3:59:36:
78:fe:2b:4f:64:75:3a:4d:b0:6b:60:78:d4:70:9a:
0a:29:cf:ea:a7:71:65:15:d4:f1:24:0a:ef:f9:22:
a5:e7:36:19:1c:35:de:f3:94:7c:ae:4e:d1:9a:0c:
9f:64:74:75:1f:c3:3e:a6:98:d2:d7:ad:3d:ec:2b:
93:3a:33:c4:17:e0:79:7e:80:70:d4:1b:78:57:81:
1e:bd:21:0b:4a:43:29:19:94:22:b9:19:fc:02:04:
c0:b7:4f:e3:8a:0f:e9:c9:12:4a:c2:e8:91:f7:43:
1b:28:39:10:3a:ea:03:b5:e2:a3:05:7e:0f:85:30:
33:73:f4:57:89:cb:99:73:6e:68:14:0d:15:11:a8:
de:35:69:a0:c1:f0:3e:94:01:7a:53:b8:5e:06:15:
cc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:17:85:5D:70:9A:7B:43:68:40:61:A1:A1:D8:71:72:88:73:A8:11
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:be:b4:e0:4f:79:e1:b9:6e:28:a0:0c:a8:5a:bd:b8:cc:6c:
ce:ad:10:d8:83:43:a5:7d:59:f7:f0:e2:bc:b8:cd:6e:dc:49:
ae:22:73:12:c7:41:90:4b:15:1d:37:7d:1c:1e:4e:28:b4:ed:
af:04:bd:c7:5f:16:04:da:09:f7:5c:c8:23:76:b0:9b:e8:3a:
1d:ce:00:32:e7:59:2a:a5:6e:dc:b6:57:3f:bb:76:35:0a:ba:
5b:f4:2a:80:c6:c0:90:7c:d2:f0:bb:b5:50:38:af:0b:79:5e:
d1:36:3c:73:d0:0d:51:97:f2:02:35:31:1e:c6:e1:8c:c6:88:
56:91:ae:e7:c2:af:07:bf:98:a9:ae:14:74:62:3f:9a:2d:1b:
de:aa:d9:c7:f9:92:af:ab:71:e9:b7:50:40:05:2b:6d:0b:1a:
19:ac:37:65:0f:1e:19:9b:4a:7f:1c:7d:b0:3e:33:8c:28:b9:
5d:c9:56:5e:39:5e:d1:e4:5d:a3:e0:e6:e8:e5:d3:76:10:69:
23:fd:7a:bd:0d:c6:07:dc:28:f2:dc:e8:d5:d8:17:b1:d5:a8:
93:74:8b:1c:cf:50:81:20:fc:a8:9d:1f:f5:54:60:ec:17:16:
90:47:89:55:14:f0:c6:75:46:05:4c:89:66:aa:4f:b2:64:0c:
42:88:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 17:46:01 2026 by rpki-client