
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: nA77rB430CmNJUqNyWEnNM12OjIV+bpfMN1Cu8Ji+jU=
Subject key identifier: 4D:30:7F:0E:28:DC:92:D4:CB:87:D4:58:0B:A5:49:77:5E:49:39:26
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 189C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1820
Signing time: Thu 16 Apr 2026 16:29:37 +0000
Manifest this update: Thu 16 Apr 2026 16:29:37 +0000
Manifest next update: Thu 23 Apr 2026 16:29:37 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: jbGOUT5CfgXcuJavS+rQhOFp2SpnMIoplwr2N4h524g=)
2: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: HZBfZMAFJxlkSmjIQOZstgSCx4ashGb51vkWovEUYbs=)
3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: OEgEDUAjf9BTlI+eiF5A69LmOCeN7jWjg18CXPzKJG4=)
4: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: LlVbkIBf55WD9ol7tZ+8YsYWKIE8b97eX9bCwSF3NSs=)
5: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: 4QNrndXiZuD30u6eautmZHQMpuP/Z26DQJUBDiWiMvc=)
6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: /8pZ9hmnX1KrX5+xHUTJd205PrwYJNS6PnS3wtcG9wI=)
7: 696975861A3611EEA597E872C4F9AE02.roa (hash: g5hRhUjRB9v/my+gZgSF2vbEiEILSavEGnsxaVKF6Gc=)
8: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: yYFIGBneEQXcRJvNNN1W9kEQ69UHSaUHBezF58BxRJY=)
9: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: lvExdvN+lyTanXvVTvJV8T9/V8jM577ymUYa0b51pmw=)
10: B04675FC959711EA9F290A33C4F9AE02.roa (hash: wWZc4DPL/CIi2uHPFRZ5kI0NT8FM5d7k/tcwO50MfhM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6300 (0x189c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Apr 16 16:29:37 2026 GMT
Not After : Apr 23 16:29:37 2026 GMT
Subject: CN=69e10e71-b482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:31:9e:56:e5:2f:2f:c4:73:1e:83:0a:1b:
64:e4:82:17:3c:ad:c5:21:df:00:6e:f3:fd:9f:a9:
95:95:0d:89:23:ff:b6:9c:2b:9a:47:c2:ca:1d:6f:
2e:54:a7:96:6b:1b:81:dc:e6:be:05:df:16:a6:da:
fd:e1:94:9a:0d:0b:57:f3:c1:97:d5:fd:a9:7b:5d:
16:1f:e1:3b:b6:32:44:cb:70:c8:d6:2e:ef:3c:0c:
9a:f2:8a:b1:e5:0d:f7:f7:66:76:bc:af:ea:7e:60:
f8:2f:b4:89:f0:c6:4e:f1:cd:5a:a0:ff:f7:54:9c:
17:98:5e:5b:f1:16:7e:c9:bd:c3:28:2f:d8:01:35:
3d:4c:b1:66:46:2d:fc:8f:da:20:2d:d4:fd:14:78:
9e:7a:d4:42:60:61:b9:83:f3:60:1e:d7:06:7a:7c:
9f:80:f0:68:42:2e:a6:e0:ad:69:1a:a0:2d:01:29:
6e:7f:84:9e:f6:c1:98:cb:b2:13:41:6e:96:ef:c3:
c5:17:8f:60:4b:13:58:e8:7c:cf:49:42:93:bc:05:
4a:b4:24:02:10:d8:c6:11:ab:cf:8c:09:a5:c7:15:
be:a5:cd:3e:3e:aa:6c:99:58:c1:a9:6d:63:8a:27:
60:12:5a:95:1e:c9:7c:42:4b:01:d6:ab:01:50:3b:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:30:7F:0E:28:DC:92:D4:CB:87:D4:58:0B:A5:49:77:5E:49:39:26
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:1d:ca:2c:30:54:80:96:1c:c2:8b:4c:49:78:e9:ed:12:
a4:e0:6a:ae:1f:9c:e3:2e:e0:fa:79:cf:c1:a0:e5:7a:be:32:
6c:0b:c4:7b:eb:7d:21:8b:7e:8e:3f:11:4f:b7:ba:f5:b7:c6:
ea:df:32:78:63:18:93:60:37:c7:7f:17:49:d5:8d:19:12:a7:
be:00:91:0f:81:b4:0b:eb:5e:e3:cb:81:83:f9:28:0e:6d:ad:
73:a2:47:f6:df:6e:4d:ab:1f:54:2b:69:d2:d4:3d:df:6b:0d:
f5:ea:92:04:10:9f:38:e5:2c:d1:a6:3e:64:a2:dd:3f:47:e6:
15:43:89:bb:2f:06:37:3f:7c:e8:0a:c6:b3:d6:19:07:9a:a8:
fa:16:3d:fb:5f:51:58:dd:b0:48:12:34:f1:2f:15:62:99:89:
06:7e:ba:4b:40:ed:ab:67:02:5d:44:62:8d:39:3b:03:b7:2f:
9f:91:1e:38:ba:55:d7:05:d2:b6:4b:67:cd:67:54:3d:60:91:
76:d1:6c:bc:8c:7a:c3:1b:5d:b4:b6:98:32:ae:c1:82:a0:4a:
91:1e:98:2d:5f:fd:c3:c8:c9:76:aa:b7:8f:94:3b:ef:37:97:
21:5c:54:2e:c1:af:08:3c:84:f0:0b:8e:5c:9e:19:52:cd:9b:
35:b9:11:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:11 2026 by rpki-client