
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: 4OZRfYcURUBLT03r4ZSQTuXuFo3v2fhDGFJIT2ZWC8Y=
Subject key identifier: A7:1C:BA:04:08:79:2E:86:46:6D:56:35:B7:9E:8D:DA:1E:04:6C:79
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 19B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 1907
Signing time: Sun 20 Sep 2026 16:28:58 +0000
Manifest this update: Sun 20 Sep 2026 16:28:57 +0000
Manifest next update: Sun 27 Sep 2026 16:28:57 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: GBJ14+uKaiL9M3XL00Nrj0TVwdtzb0ERSmlTmdoikTY=)
2: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: tGZ1EQohcaFkRzhNu1V2kEqpiSxxUDeKDaiWT5xRABQ=)
3: DFD5ED287F6211F1AA84F3C05FA30FBC.roa (hash: Go3QadrBBnaBsIy2cR0jzTE/X0A/sPlYJggr6zqhTSM=)
4: 18B5D89C8A2111F1B0CF31796911F970.roa (hash: xhMK9WmX0mGqdcfMJlXN7eotC5yIAttvgGOOOwPRzqc=)
5: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: +WxHowAkXhhm4CWJn2Q37AObUBKHnH8KIVC1880YsN8=)
6: EF885538C28B11EBBF310469C4F9AE02.roa (hash: DV1tl1AIWtGKEO7bG4GEI9a9HN5E72mdCdTltMO/MB0=)
7: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=)
8: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:28:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6579 (0x19b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Sep 20 16:28:57 2026 GMT
Not After : Sep 27 16:28:57 2026 GMT
Subject: CN=6ab009c9-3f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:cd:1a:d0:80:d0:74:ae:95:08:e8:ae:01:
68:87:19:40:e2:06:df:ac:44:e0:36:4c:3a:51:33:
79:d9:f7:9d:0c:14:f3:dd:0f:f0:f1:c5:c5:26:fd:
4a:80:2a:ba:b0:52:85:aa:29:3a:88:48:37:04:40:
ac:f9:60:d0:4b:54:be:38:a1:4a:a3:7e:44:fd:62:
1b:6f:d6:3d:e4:43:e5:3a:78:3d:ba:2a:f6:f0:65:
4b:cc:c6:0a:31:a5:98:d6:5a:e2:6a:f1:7b:bf:c9:
08:65:7e:0a:a9:8d:b2:e4:94:5c:4a:7c:56:37:86:
4a:a1:8f:76:e5:ab:b8:07:c7:5a:3e:c3:4e:1c:b5:
86:a5:ec:96:42:42:ed:a4:89:04:00:d4:93:53:25:
b6:c2:66:67:0d:94:5f:f3:f4:2b:a7:51:31:70:7d:
b4:d3:ae:55:61:3f:20:1d:88:5b:67:33:54:f8:81:
a8:25:c3:b3:f8:77:56:ba:7f:65:f3:d7:3f:49:5b:
84:46:99:20:02:34:86:01:9f:9d:e8:3d:c8:5d:a6:
51:7d:9b:93:44:0d:bc:16:85:9c:ca:3e:d1:77:1e:
aa:39:34:48:69:da:72:40:6a:f9:81:d6:bf:c1:41:
07:f2:0c:e3:1f:5c:0f:a8:a7:d7:89:d3:06:73:d2:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:BA:04:08:79:2E:86:46:6D:56:35:B7:9E:8D:DA:1E:04:6C:79
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:67:ac:44:2d:a7:b5:b7:0b:e7:36:00:70:a2:aa:12:d7:7d:
6d:cb:a1:f2:6a:b9:aa:c1:0b:f4:9d:c0:3c:47:79:33:62:65:
25:bf:fb:47:28:71:f5:e2:3c:86:aa:69:a7:8a:ed:49:df:f5:
8e:7a:b4:30:1a:8e:00:6c:bf:f9:ef:51:fb:ef:ad:b0:f8:7a:
dc:2d:b6:fb:e0:c4:db:e6:76:4a:8d:9e:2a:9e:72:2d:96:52:
3c:e4:58:0a:40:15:9b:c9:61:13:86:fa:0b:d6:fc:de:1e:73:
8d:dc:e0:37:4c:de:a0:d4:0f:e6:2b:22:75:c1:81:c4:8b:c7:
57:41:42:59:1d:91:c2:a7:33:56:be:64:44:19:35:bb:ce:6b:
3d:d7:14:60:8d:16:e3:38:8d:2f:d0:a5:d7:6f:47:a5:ab:94:
b6:b9:29:87:1a:bf:77:ae:08:db:60:bd:e2:61:4b:82:38:56:
2a:5d:c6:0a:7b:f9:61:3a:b0:fc:52:52:66:fe:99:1b:14:3d:
3c:97:70:cb:0d:a9:da:81:0a:1f:c2:3e:46:2d:ec:cc:3b:37:
83:e6:a4:f4:15:52:52:07:57:e7:eb:f2:a5:34:0e:06:22:86:
18:8c:da:b7:d1:ac:ab:84:6b:2f:b5:b1:9a:8a:87:6e:50:aa:
21:4f:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:46:43 2026 by rpki-client