
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: QgrFMKly8uyKsIiFfFoQFCh+M7OGnWai7jKNrGIVCL0=
Subject key identifier: 13:07:B5:D0:B8:39:88:D7:05:89:CD:E7:D3:EC:11:13:6E:1B:66:B7
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 18EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1860
Signing time: Tue 28 Jul 2026 16:37:15 +0000
Manifest this update: Tue 28 Jul 2026 16:37:15 +0000
Manifest next update: Tue 04 Aug 2026 16:37:15 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: VuxIMpRT7y9TnTvzEqc4AE1V7jDSsXbdUZl2FVUGwBw=)
2: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
3: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
4: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
5: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
6: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
7: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
8: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
9: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
10: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:37:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6382 (0x18ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Jul 28 16:37:15 2026 GMT
Not After : Aug 4 16:37:15 2026 GMT
Subject: CN=6a68dabb-9572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:f5:ed:40:23:94:6c:d3:6c:4c:df:33:c9:
6d:69:37:b0:fd:10:53:65:97:bb:cd:8b:3f:8c:fb:
96:4d:e4:67:09:0f:27:f9:65:fe:c2:6c:0c:bb:15:
22:f4:5a:ef:fc:89:1a:fb:e3:ab:bd:4d:6c:24:d0:
55:e7:91:7a:71:ed:e9:76:bf:82:c2:c4:f4:a7:b5:
2d:8d:7c:ed:52:84:0c:58:40:59:e1:93:19:95:4a:
af:2e:b8:26:03:f5:33:a1:15:6f:55:e7:0d:6d:0e:
6a:80:5f:8a:13:69:2c:b9:ba:6b:98:5d:bb:5c:c3:
27:c2:f4:e7:3d:93:72:39:7d:d6:4c:39:8b:ef:65:
ea:cc:58:84:3e:23:79:11:37:86:40:e1:29:ae:2e:
96:aa:c0:1e:33:6f:66:07:21:a5:8c:fd:37:61:2f:
ae:ea:a2:1a:43:84:f3:98:ff:33:60:8e:5c:10:53:
9a:1f:e1:18:37:35:0c:e9:25:2e:00:bc:2f:f6:85:
2b:76:98:14:6b:6f:22:ff:ef:5b:14:a9:8e:81:c6:
ba:8b:e7:4c:39:95:89:83:a0:e2:ca:91:4a:9a:c1:
a0:15:b3:b7:6d:ba:bc:ab:88:be:4f:dd:7b:4b:72:
58:92:4a:a8:74:ec:0f:94:a2:8c:de:82:59:a2:b9:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:07:B5:D0:B8:39:88:D7:05:89:CD:E7:D3:EC:11:13:6E:1B:66:B7
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:ae:1a:ea:b2:68:c8:7f:8e:2e:90:8b:7e:16:83:52:f0:
1a:62:83:8c:17:bc:29:a1:ca:b5:52:be:63:29:6c:ae:00:4f:
3a:7e:bc:e0:eb:91:e0:f4:41:82:a7:05:36:4b:17:92:97:50:
9e:21:c9:c5:90:9a:dd:55:f6:d3:44:67:68:0c:bb:91:f6:bd:
13:7d:1a:29:b8:74:f7:96:d6:12:6e:3a:72:54:d6:a7:eb:20:
98:9b:b3:c9:85:9f:41:43:87:a9:52:ec:48:9d:b8:27:1e:16:
38:e6:be:a1:c5:7a:de:4e:dd:0e:97:82:47:45:0b:e4:37:04:
e8:d4:31:1a:55:7c:74:69:35:37:ae:41:67:f1:1b:d8:9e:de:
7e:81:88:ad:c0:a1:82:07:55:19:a2:d2:b3:94:0d:92:d9:28:
e2:ce:55:fc:c4:d8:18:28:48:16:d3:dd:ce:60:93:00:65:e9:
46:82:16:ef:e1:90:57:a4:2f:3b:4a:f8:69:76:87:bc:1b:c2:
c6:30:d3:b6:9e:3d:30:41:e8:dd:47:f8:24:5e:15:bd:ba:41:
62:95:3d:52:5e:6d:21:fc:ce:8c:2f:f0:9a:26:48:de:51:70:
2f:f0:87:c0:ce:fc:70:0e:46:6f:7c:53:bf:e8:b7:63:b4:44:
24:65:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:44:40 2026 by rpki-client