
$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: OLZarAcLIZp1cygg3TRO2UZFtPbL7jEZjC73sGruo4c=
Subject key identifier: E2:4F:32:70:6A:F0:93:F1:AE:D9:1A:FB:18:AA:2D:D3:A2:88:01:E4
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 7D4ABD4D3A77C40CBE0532B11240EB32DFDAE421
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 0816
Signing time: Sat 05 Sep 2026 06:14:08 +0000
Manifest this update: Sat 05 Sep 2026 06:09:08 +0000
Manifest next update: Sun 06 Sep 2026 06:58:08 +0000
Files and hashes: 1: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
2: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
3: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
5: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
6: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: uFwXSL09L1gjs87si+dqc4R9Aco6uU96odUUboTsJk4=)
7: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
8: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 06:58:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4a:bd:4d:3a:77:c4:0c:be:05:32:b1:12:40:eb:32:df:da:e4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Sep 5 06:09:08 2026 GMT
Not After : Sep 6 06:58:08 2026 GMT
Subject: CN=E24F32706AF093F1AED91AFB18AA2DD3A28801E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ee:79:32:aa:f2:de:3f:30:02:0c:af:9c:03:
73:28:f8:c4:ce:9b:59:51:27:b0:41:c0:7f:15:59:
8a:4d:2a:3a:20:74:7b:d6:87:6a:78:f4:6f:a2:1d:
9c:ae:64:e6:d5:07:c9:f5:52:32:2b:32:02:fd:d3:
1d:b5:b0:d9:ff:29:0a:93:0a:34:63:6e:ac:35:8c:
a9:7e:cb:bc:52:f0:ab:69:27:7a:ce:e1:84:9a:fb:
77:76:6b:98:71:c6:10:ad:02:01:b8:e1:19:14:d5:
37:de:88:1d:46:af:26:b2:cc:8b:79:05:cd:b7:2e:
c4:b5:ac:56:cf:7a:df:00:35:1b:0d:89:36:f9:8b:
ed:6b:1e:b7:03:00:65:27:34:61:1b:a4:38:82:19:
4a:ad:1e:3e:81:7f:eb:d6:76:78:3a:a3:5a:a2:29:
2a:1e:05:08:07:77:3f:df:91:8b:85:33:5f:73:92:
30:fa:bf:ce:74:a5:65:a7:81:da:24:6f:b0:49:c4:
43:f4:b6:4f:2c:91:08:9c:d5:d7:86:db:d4:1d:d8:
9e:5b:ea:cc:5f:71:f0:b0:2f:2d:ff:b4:61:77:e0:
ef:9a:13:0f:3e:f1:4d:38:b1:6f:6f:f0:fd:87:c0:
4f:63:34:61:09:a5:40:fa:be:3f:8b:be:2c:25:17:
9a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4F:32:70:6A:F0:93:F1:AE:D9:1A:FB:18:AA:2D:D3:A2:88:01:E4
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:f3:1d:62:b1:9c:03:dd:33:a5:d9:80:a7:a4:6a:b7:61:2f:
9c:b1:79:81:04:52:e9:02:99:c9:8e:65:38:ba:0c:a1:4f:45:
b8:b7:b8:f7:79:9f:1e:63:8e:6d:72:ac:ce:2b:fd:1c:a3:19:
8d:9c:5d:46:9f:55:1b:1b:01:ff:a5:8c:90:8f:c6:db:07:8a:
3e:29:a5:7f:4b:de:d6:d2:9d:e6:85:37:7a:f6:7d:d6:a6:79:
c0:ee:65:96:fe:b2:87:31:1a:96:0e:e6:ed:47:83:e6:60:41:
29:1d:f8:de:7e:b2:0c:71:76:85:79:df:15:65:af:ea:73:a1:
a5:27:31:5b:86:d0:72:fd:42:14:c0:1a:f1:38:40:f7:a0:ad:
16:99:14:ad:82:11:62:2f:41:a2:b1:79:d1:c4:c4:49:73:f0:
54:e2:f9:d1:a8:25:ce:c1:79:de:4a:b6:6d:c7:5e:f9:5a:d5:
84:8d:ed:32:10:53:f2:ce:91:e1:53:a3:28:ab:0a:0b:93:2e:
53:df:00:d0:c2:ec:95:1c:cf:79:de:71:29:95:7f:fd:6f:96:
70:ed:50:42:9e:79:f3:f1:ed:7f:b9:a0:59:2f:a6:41:30:89:
45:e6:9b:c8:0f:9e:3d:78:90:09:a9:2f:9b:ac:91:18:77:4f:
26:d6:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 10:06:11 2026 by rpki-client