
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
File: _eNrbpSTmOUtleidQL32CyXbabk.mft (raw, json)
Hash identifier: d2EP1k5q7dlUXI0irymR/StGLarIZ8x2++48wfpaJJY=
Subject key identifier: BA:EF:36:3B:0E:BA:A8:A7:CF:1F:0C:FF:85:30:6F:E4:10:81:04:94
Authority key identifier: FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
Certificate issuer: /CN=A916B18B/serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Certificate serial: 19CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
Manifest number: 1921
Signing time: Fri 06 Nov 2026 16:31:20 +0000
Manifest this update: Fri 06 Nov 2026 16:31:19 +0000
Manifest next update: Fri 13 Nov 2026 16:31:19 +0000
Files and hashes: 1: _eNrbpSTmOUtleidQL32CyXbabk.crl (hash: MVolEtox6zXLv+hGjEGjtW20g6wZqcU6YSh7q2SZoZ0=)
2: AF2BF494314B11F0BDC2D637C4F9AE02.roa (hash: c+yxSSqDihz+qFEUHuonkkZoAtB8KHRyPQ7jKvq3vlc=)
3: 0717511C564511F0A1E8983AC4F9AE02.roa (hash: tGZ1EQohcaFkRzhNu1V2kEqpiSxxUDeKDaiWT5xRABQ=)
4: E807C5CC52A411EEB770555CC4F9AE02.roa (hash: +WxHowAkXhhm4CWJn2Q37AObUBKHnH8KIVC1880YsN8=)
5: 4409B8649D1011F0B28FB758C4F9AE02.roa (hash: CIf5GGGC1TVACvwyThVDydbe+OfzvDk5DC5kiBIMJsY=)
6: DFD5ED287F6211F1AA84F3C05FA30FBC.roa (hash: Go3QadrBBnaBsIy2cR0jzTE/X0A/sPlYJggr6zqhTSM=)
7: 18B5D89C8A2111F1B0CF31796911F970.roa (hash: 2Tc4+e72GVCGZPMhLuCBNPlBtqg73wad3vUrwkTINuI=)
8: EF885538C28B11EBBF310469C4F9AE02.roa (hash: DV1tl1AIWtGKEO7bG4GEI9a9HN5E72mdCdTltMO/MB0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Nov 2026 16:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6607 (0x19cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B18B, serialNumber=FDE36B6E949398E52D95E89D40BDF60B25DB69B9
Validity
Not Before: Nov 6 16:31:19 2026 GMT
Not After : Nov 13 16:31:19 2026 GMT
Subject: CN=6aee00d8-b5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:4d:ea:b2:93:81:a1:79:52:4a:c5:9c:ca:
41:e7:7f:ee:e1:53:1c:fd:4f:4b:65:fe:8e:e1:e9:
c0:d3:e2:cf:d1:c2:c9:15:ec:97:04:98:2a:2e:4e:
da:a3:2a:6b:53:54:97:51:96:b0:83:0b:be:5b:9c:
ee:7f:d6:03:42:d4:8c:4c:7f:5e:6c:77:0b:13:6c:
fc:eb:f2:ce:41:04:ff:74:97:8b:79:01:fc:a3:e2:
b3:43:e6:5d:a4:14:1c:cb:f3:85:99:fa:4b:4c:c6:
23:ed:46:27:f0:1c:49:9f:75:64:49:a5:80:14:18:
ba:cb:9f:a5:dc:cf:bd:c9:08:71:a1:10:0e:d7:4b:
58:ec:73:eb:8d:0f:4a:7c:cf:52:76:90:fd:01:63:
7a:c2:77:28:5f:81:5d:5b:e9:79:c2:8e:d5:56:a7:
f5:6e:65:ae:3d:df:07:aa:8e:ed:b1:74:4d:55:1d:
b4:77:b1:0c:48:0d:f4:c7:33:0f:90:9a:28:f5:75:
c7:89:ae:ce:91:25:af:62:55:f5:28:c8:b7:c7:5a:
79:46:85:74:5e:a4:b4:ee:0b:59:43:56:fa:00:a9:
15:4c:48:5e:82:18:03:8c:bc:d2:75:14:b6:92:20:
64:fb:0c:2c:86:34:04:41:3c:5d:d6:dd:8a:7b:04:
47:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:36:3B:0E:BA:A8:A7:CF:1F:0C:FF:85:30:6F:E4:10:81:04:94
X509v3 Authority Key Identifier:
keyid:FD:E3:6B:6E:94:93:98:E5:2D:95:E8:9D:40:BD:F6:0B:25:DB:69:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eNrbpSTmOUtleidQL32CyXbabk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B18B/628DE502DF2311E797225D2EC4F9AE02/_eNrbpSTmOUtleidQL32CyXbabk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:0f:cd:cd:ec:87:85:2d:74:8d:2a:19:d5:16:c6:78:fb:
a7:36:73:c7:d6:d7:a2:b1:72:e1:77:21:9a:93:8e:74:80:f5:
21:f9:2f:60:5b:4f:8a:4e:1a:84:80:0c:80:24:9d:24:86:42:
8e:d2:38:6d:2e:93:c6:b0:3a:22:46:9e:33:14:6f:75:b3:09:
2a:2b:a6:b5:e8:04:35:99:c1:7c:4a:c0:6f:f7:0f:28:3d:61:
1c:58:ab:5e:4b:eb:75:aa:3f:25:55:6a:22:c3:82:79:dd:f6:
3d:c0:fa:ae:3b:b2:bc:fa:f9:d8:fb:fe:70:59:5f:d5:49:ca:
de:5b:0c:51:69:28:82:f9:e1:93:6f:21:49:f3:7a:1e:23:c1:
42:72:22:64:4a:da:3e:d4:61:8c:6f:3a:fb:9d:68:fe:3d:06:
b5:a1:72:5f:16:a6:70:12:83:73:ae:e2:45:4d:df:c6:af:d1:
41:07:0c:c1:da:e4:bf:ff:f1:cc:6b:51:7d:dd:d9:54:46:33:
f1:b5:61:b1:73:a6:d0:47:a7:e6:7b:ed:1d:3f:ec:a9:52:a2:
5f:7c:e1:32:91:f5:ba:fe:74:76:55:38:37:41:98:02:48:5f:
05:d3:9b:f6:29:f9:1b:aa:96:35:db:2e:88:18:0e:fb:06:e1:
90:fb:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:18:02 2026 by rpki-client