
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json)
Hash identifier: PkSp35aqnL5jMKqJmcwGO+k5ORNN5jYn1fZOl9Um3GM=
Subject key identifier: 8B:3D:B5:0C:07:1C:D2:8B:95:56:5F:EC:06:FD:F4:F9:51:BE:5F:5C
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial: 182F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
Manifest number: 1805
Signing time: Fri 12 Jun 2026 16:30:14 +0000
Manifest this update: Fri 12 Jun 2026 16:30:14 +0000
Manifest next update: Fri 19 Jun 2026 16:30:14 +0000
Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: X0wlYhptuSNn0l52JldqMM0xGDaAH9Hs+WbORr9haYw=)
2: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: 5RREE6T02f31QWKKvKnKTP9nUut80+i9xP6eu2x6Dn4=)
3: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: We6jmeEEyT0HEMr/GY7jQ9dR91pmG5jYjCWmk5TFv3Q=)
4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: G7CUtd3m+KDiwG1MCgyxY5Ml5ZuJVANVfOkXBqSh68I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 16:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6191 (0x182f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Validity
Not Before: Jun 12 16:30:14 2026 GMT
Not After : Jun 19 16:30:14 2026 GMT
Subject: CN=6a2c3416-61b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:1f:c6:29:82:27:62:79:01:a0:8d:4f:97:
9f:83:30:67:31:ee:87:c7:8c:ae:42:df:bd:51:2c:
fe:63:e5:23:4e:ce:33:8b:6b:6b:ef:10:fe:3b:84:
e7:85:f5:42:a6:01:c2:89:f8:98:0c:e7:5f:5e:ef:
ec:07:e3:b2:0d:22:10:55:d8:b4:32:71:9e:54:41:
62:15:68:e9:a0:ce:af:be:c9:05:67:48:93:16:d2:
49:e9:9d:f2:74:47:7e:0a:fd:c9:de:af:34:85:c5:
ba:27:57:8c:0c:be:60:2b:05:10:07:9a:28:a5:80:
50:c7:37:ae:b7:32:ce:7f:24:72:c3:d1:32:d3:10:
c7:ea:f5:7f:02:ba:ad:07:9b:66:44:8f:26:5f:0a:
a4:7e:33:4f:db:b5:1c:7f:1d:63:f1:04:12:ad:6e:
64:1f:d7:8a:f3:5e:c0:6f:d3:cb:c9:51:eb:59:16:
8d:c5:fd:99:5d:dd:87:69:39:21:fa:2f:1c:fa:91:
52:f6:5c:48:4a:87:c7:a8:a5:79:1c:80:02:6b:56:
7a:65:be:16:2c:e3:a8:00:8f:26:74:f4:13:a7:63:
f0:02:d7:81:68:aa:78:36:43:33:c9:03:82:38:1a:
9e:48:85:02:27:8c:97:e9:19:4a:c8:73:90:48:0d:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3D:B5:0C:07:1C:D2:8B:95:56:5F:EC:06:FD:F4:F9:51:BE:5F:5C
X509v3 Authority Key Identifier:
keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:d7:4b:39:c2:82:b4:a4:df:2f:03:ea:70:0f:9c:32:1e:6a:
64:c8:58:72:cc:d3:70:da:68:d9:73:79:24:29:d7:34:30:4b:
1c:d6:ab:83:1f:10:91:9d:61:e3:2c:4f:b3:ae:d3:bb:ab:bf:
72:5b:c0:a1:f9:19:77:21:a0:a6:9f:7d:ca:01:89:52:cf:72:
4e:8f:5d:ed:ab:e4:12:28:ad:e3:7b:68:d6:ee:99:27:8a:19:
30:60:d8:98:ba:29:dd:1c:19:e6:4f:a9:92:e9:e1:e0:7f:1b:
77:aa:bb:f5:19:10:7a:38:8d:65:4e:3b:64:d5:b7:36:d1:bb:
9b:48:89:33:02:53:bf:90:b1:00:49:8b:7a:46:da:e5:94:b9:
ea:fa:2c:6d:f4:d5:49:83:1b:cb:b7:d7:51:4b:f8:fc:db:64:
b4:c2:d8:12:45:ac:5c:2d:11:ea:3c:9c:ee:77:06:b6:f5:eb:
e1:45:cb:b8:c5:75:eb:42:f5:78:c7:1f:f2:91:9f:ac:17:14:
1b:a8:dc:eb:eb:9e:be:5c:fc:dc:1f:a3:58:59:8f:7d:b3:7d:
5f:14:fb:e2:06:fe:77:cf:7e:6d:57:21:bc:64:33:6d:95:92:
8a:0a:d7:e9:be:63:06:12:8c:b6:df:7b:69:3f:c3:47:89:a0:
c3:b8:62:d6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw
NTBDQ0U0QTUwHhcNMjYwNjEyMTYzMDE0WhcNMjYwNjE5MTYzMDE0WjAYMRYwFAYD
VQQDEw02YTJjMzQxNi02MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAi9cfximCJ2J5AaCNT5efgzBnMe6Hx4yuQt+9USz+Y+UjTs4zi2tr7xD+O4Tn
hfVCpgHCifiYDOdfXu/sB+OyDSIQVdi0MnGeVEFiFWjpoM6vvskFZ0iTFtJJ6Z3y
dEd+Cv3J3q80hcW6J1eMDL5gKwUQB5oopYBQxzeutzLOfyRyw9Ey0xDH6vV/Arqt
B5tmRI8mXwqkfjNP27Ucfx1j8QQSrW5kH9eK817Ab9PLyVHrWRaNxf2ZXd2HaTkh
+i8c+pFS9lxISofHqKV5HIACa1Z6Zb4WLOOoAI8mdPQTp2PwAteBaKp4NkMzyQOC
OBqeSIUCJ4yX6RlKyHOQSA3q0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIs9tQwH
HNKLlVZf7Ab99PlRvl9cMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG
RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3
WEk1SmFHNi12UHdGRE01S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV9dLOcKCtKTfLwPqcA+cMh5qZMhYcszTcNpo2XN5JCnXNDBLHNargx8QkZ1h
4yxPs67Tu6u/clvAofkZdyGgpp99ygGJUs9yTo9d7avkEiit43to1u6ZJ4oZMGDY
mLop3RwZ5k+pkunh4H8bd6q79RkQejiNZU47ZNW3NtG7m0iJMwJTv5CxAEmLekba
5ZS56vosbfTVSYMby7fXUUv4/NtktMLYEkWsXC0R6jyc7ncGtvXr4UXLuMV160L1
eMcf8pGfrBcUG6jc6+uevlz83B+jWFmPfbN9XxT74gb+d89+bVchvGQzbZWSigrX
6b5jBhKMtt97aT/DR4mgw7hi1g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:52 2026 by rpki-client