
$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
File: kMIvc5OFDo7Pa18eMg0HstGs2P0.mft (raw, json)
Hash identifier: ZU29CU04sM7e34UR1hGu2hHSWtsMpWOPkwkZD7Uu1SM=
Subject key identifier: 2F:F4:FF:AE:3A:3F:E0:A7:B9:02:06:5C:77:CF:E8:46:20:BD:41:DE
Authority key identifier: 90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
Certificate issuer: /CN=A918495F/serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Certificate serial: 1874
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
Manifest number: 1803
Signing time: Sat 28 Feb 2026 16:37:11 +0000
Manifest this update: Sat 28 Feb 2026 16:37:10 +0000
Manifest next update: Sat 07 Mar 2026 16:37:10 +0000
Files and hashes: 1: kMIvc5OFDo7Pa18eMg0HstGs2P0.crl (hash: +HHS4isNEhPoBeoaJbRWe6T8qIGfSkovvba7oBUeUHw=)
2: DD145D6E023A11EBBDF8B35FC4F9AE02.roa (hash: Ki+ZYv+WbFodfUBA0Z9kcHIRNA0D2B2/Fqh0gMIddSg=)
3: 4C0C96C6022E11EBA920EA37C4F9AE02.roa (hash: K/ybxERnMroT+/HivxwCKoEx2WZjUMXQikxQf2o4Wtg=)
4: 7E2725DAAC7611EAB766A74CC4F9AE02.roa (hash: pRnYMFn3MsmdKZMCcupGBS8xip66wFsc4Vhu+CVQM8s=)
5: 07EE827ADFEE11E7B0E71D1CC4F9AE02.roa (hash: 6dC3vmSVGgmkSh9nUR6cyWb5UZYgtCMEtbXtHWZQ+Ms=)
6: 694CCE66E53911EF9DD1B90DC4F9AE02.roa (hash: Q50guEdFQrac2WGNIOWOMwAPEusnnVtr+0WbjS+0Iw8=)
7: B04675FC959711EA9F290A33C4F9AE02.roa (hash: hvb2MvDqDZHyf0+HzbtgqnM+oZrlIejX067xarW4vdo=)
8: A2C8B57074B711EB8491BC63C4F9AE02.roa (hash: 1XIBkz1xrsmaIEUuPCKysFF+5jDC/AbJdnY6h8iCmzA=)
9: E8118BFA022C11EBAC47A831C4F9AE02.roa (hash: l9PAtv4FmfKEbsr39kSblkIdk4l36jBShaU/yhiu3EA=)
10: 696975861A3611EEA597E872C4F9AE02.roa (hash: oIGClTM3lHim9PRA3fKoX8EMPndg1+r8p0Zu4BUJRhA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6260 (0x1874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918495F, serialNumber=90C22F7393850E8ECF6B5F1E320D07B2D1ACD8FD
Validity
Not Before: Feb 28 16:37:10 2026 GMT
Not After : Mar 7 16:37:10 2026 GMT
Subject: CN=69a319b7-fc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1f:64:ae:9a:67:b7:81:6f:4a:ed:ca:4b:86:
1f:44:87:a9:49:5a:64:02:cd:fd:3c:58:6d:52:0c:
6f:d7:1c:cd:73:db:14:95:b9:f1:ee:71:76:f2:d5:
1a:fb:f3:1b:85:1d:9c:01:a1:e0:4c:e4:5e:89:73:
14:47:c1:65:60:cb:0f:70:53:0d:22:5b:6e:ee:ac:
5d:30:84:0c:09:a1:92:67:18:4d:4b:e0:68:e7:51:
3a:02:2d:86:18:36:f5:a9:b4:c0:7e:21:cf:e3:75:
a2:7f:91:b3:4a:89:e5:64:35:f8:c7:73:69:c6:e3:
86:6b:8d:a3:a6:6f:c8:40:50:78:63:23:d4:c2:c9:
e6:3f:eb:a5:2e:a5:72:4b:74:c2:af:29:08:41:e1:
fc:01:f4:2c:de:12:98:20:77:ab:32:8e:36:4a:da:
b1:46:4e:0a:6f:56:90:ff:a1:a4:3d:c4:a6:93:6b:
8f:6d:f1:de:5c:50:cb:f0:56:3e:3c:2d:c2:1b:4f:
0b:45:ad:af:ec:3e:c9:73:60:b3:c9:7f:ab:84:01:
4e:7e:d9:a1:01:1b:60:8d:08:c8:c1:65:57:7e:ae:
5b:4d:6c:fd:70:31:20:d8:c7:03:3a:33:4d:fe:8d:
59:94:50:ea:8a:77:89:a2:de:8c:4e:eb:82:ec:a5:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F4:FF:AE:3A:3F:E0:A7:B9:02:06:5C:77:CF:E8:46:20:BD:41:DE
X509v3 Authority Key Identifier:
keyid:90:C2:2F:73:93:85:0E:8E:CF:6B:5F:1E:32:0D:07:B2:D1:AC:D8:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMIvc5OFDo7Pa18eMg0HstGs2P0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/848C857CDFEC11E7A27A2213C4F9AE02/kMIvc5OFDo7Pa18eMg0HstGs2P0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:e7:db:ea:f2:42:50:e6:28:be:29:cd:40:7b:8f:f8:6a:aa:
91:bb:16:4f:c5:71:b6:27:ff:57:36:07:ad:ad:8e:c0:f8:e8:
49:b6:7d:d8:5c:20:09:db:89:e9:f9:5f:9f:bc:da:d7:4c:b6:
ec:02:9a:7a:12:57:39:11:77:2e:be:a0:b7:98:67:75:4b:3b:
ef:81:e6:01:40:e4:c4:07:e9:d1:d6:fc:07:70:47:90:28:da:
dc:59:47:7c:20:5e:53:1b:bc:0c:f5:4b:e1:b3:84:19:6c:52:
b5:d0:5f:21:2d:85:65:c7:4f:2f:3f:dc:68:4b:e8:84:e7:1c:
7e:33:14:96:94:dd:f1:69:09:57:db:cb:84:e3:49:76:1c:6e:
93:e7:97:66:de:00:25:60:0a:fd:09:7a:98:38:71:9f:dd:eb:
10:ab:9d:37:60:36:a9:ba:87:be:a8:ca:2b:f7:2b:c0:ce:62:
0e:e7:3d:c0:8f:b7:93:5a:94:8f:3a:77:ec:cc:3d:a2:f9:a9:
7f:bd:db:8a:3c:8b:47:31:74:94:5c:cc:36:97:a0:ac:75:72:
8e:0b:e5:14:c5:66:f3:45:98:4d:07:e8:bd:cd:6e:76:2d:1c:
74:84:dc:96:f0:e9:31:97:5d:c8:c0:4e:27:6a:15:ae:9b:ed:
fe:11:b6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:07 2026 by rpki-client