
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: tUkTedM8OBeopb2K42IJ1N7Z1isGZ4ClDN2ZnWd8+0s=
Subject key identifier: C3:74:AC:06:A4:97:36:DB:BF:C7:98:B5:48:EF:7A:52:E2:C0:F2:3F
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 190A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 187C
Signing time: Sun 20 Sep 2026 16:29:08 +0000
Manifest this update: Sun 20 Sep 2026 16:29:07 +0000
Manifest next update: Sun 27 Sep 2026 16:29:07 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: R9yv++gFZTTFeknuZfvDmdegelO2NMMkjfL5BxI7AGA=)
2: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: B1YiGgCtYnl0DniTkWdLU0vwQGEcmW0KOtnOvpcFKdM=)
3: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: ptig54gSNFYzDemXqVCn8ltIC6MlNHEC4vvbY3YS0rQ=)
4: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: Lh/h5E6/fzLv0STIteiNm0SmQUpsNhrZe/5gHYsFeHo=)
5: 94999A16857111F1A0D8004588A30FBC.roa (hash: 8q5lC+1RjFHXNb4lTHzCKYGRlBr81S/uW1xBYSXiE58=)
6: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: lZcyVDDVJyd5OvuVGY95kXjcbsnkRLyU3AWruCDQaBw=)
7: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: G8kBRXUINhmK1BEGA+CD+TtgVRm76ATww07KdVkSsBQ=)
8: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: BQasbmm7gH9FLXB//y+7TV+3WpDo2lQ196P3jl4F0nc=)
9: B04675FC959711EA9F290A33C4F9AE02.roa (hash: tSx5qcokGrO0XeuDEg4dq4Gv2TvUPRuiEyNUGbbOLAs=)
10: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: gnN9AveueXzB5hqJFkFpBNePJCeYbgZSGKZbZP1OHDI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6410 (0x190a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Sep 20 16:29:07 2026 GMT
Not After : Sep 27 16:29:07 2026 GMT
Subject: CN=6ab009d3-0a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:d0:7a:b8:62:08:9e:a4:fa:a4:6d:11:b7:
2b:1b:04:0d:a6:b3:32:81:99:c5:7b:f0:9e:b1:67:
fa:9e:f6:4d:f0:50:dc:5a:44:a7:e4:20:cc:a5:aa:
51:13:0d:8c:05:88:dc:07:c3:b5:eb:6c:1c:66:91:
93:d7:40:84:d9:74:bf:83:47:9f:d0:2d:20:82:06:
40:cb:56:47:ba:d7:61:8e:f9:f0:85:34:a8:cc:26:
9f:5d:24:78:ca:d5:28:f4:51:1a:4b:17:51:47:23:
65:6c:90:c0:36:5e:bd:06:34:e3:fc:25:49:df:7e:
b7:ba:a3:64:08:b2:7c:31:b4:3b:95:41:7b:23:0c:
34:0b:6b:b4:3b:a9:8b:c7:d5:15:98:1d:22:17:7d:
64:5f:da:97:39:d0:c4:bf:a8:81:a5:01:b0:ba:83:
9e:68:ab:43:0e:3d:21:60:82:69:64:2f:ea:2c:14:
43:ee:c7:ec:7b:e9:0a:cf:8a:48:a4:6a:da:82:b8:
43:cb:bd:53:d4:5a:fb:0e:83:ba:ec:70:c8:a6:64:
0f:ce:3d:21:8b:7c:ac:9a:a6:d6:27:23:1b:bf:cc:
c5:a7:7b:84:f1:1e:7b:94:77:f5:dc:87:3b:36:56:
63:09:a1:f4:ce:07:51:7b:74:bd:51:c4:36:9b:3b:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:74:AC:06:A4:97:36:DB:BF:C7:98:B5:48:EF:7A:52:E2:C0:F2:3F
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e5:d2:33:e3:36:16:10:9f:03:ad:dd:89:53:35:d0:81:16:
45:e6:1a:1f:88:07:f6:6f:81:dd:51:e6:a5:94:98:24:14:8e:
fd:1c:e6:71:40:81:f4:e2:ee:ff:c6:84:7b:c7:7d:78:62:97:
ec:00:34:68:1e:aa:aa:f1:cc:83:99:ed:71:90:3a:6c:6c:2a:
fb:42:77:39:68:8f:18:4b:92:af:a8:d2:5f:80:23:b7:34:ff:
71:91:1b:3a:ac:8d:80:39:8b:96:f4:a4:85:28:37:5d:26:5a:
9c:9d:7c:65:12:a1:c3:00:b3:81:e4:e1:b3:25:8f:d1:b2:3d:
6b:54:3c:b3:53:a2:9f:27:5f:90:ff:46:7b:39:b3:61:65:68:
13:99:08:9e:05:46:cb:96:8f:5e:54:5e:6a:18:07:82:cf:6b:
d0:36:2a:5c:d1:0b:6b:9d:68:6e:77:09:34:4b:62:c3:dc:d1:
9e:08:aa:ef:c5:b8:1d:3b:d3:67:8a:0c:59:3e:3c:5a:12:37:
7f:c6:5a:47:96:39:27:d3:a8:0f:b9:fc:43:7e:78:af:73:5c:
92:e5:3c:20:9d:33:76:92:de:97:d8:f1:63:4d:a2:2b:3a:58:
52:0a:ea:e9:37:16:2a:07:1a:36:56:ea:74:c0:e4:74:0d:8c:
e6:e1:f9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:47:26 2026 by rpki-client