
$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
File: tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft (raw, json)
Hash identifier: roxE52I0xVTMaRIpgVyyz9fCYlgwjiy5kR8L0zGXUk8=
Subject key identifier: E0:56:C2:00:5D:A9:2E:31:CF:1F:A0:7C:F4:B7:DD:4B:68:70:80:89
Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
Certificate issuer: /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Certificate serial: B4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
Manifest number: A7
Signing time: Fri 17 Apr 2026 07:05:09 +0000
Manifest this update: Fri 17 Apr 2026 07:05:09 +0000
Manifest next update: Fri 24 Apr 2026 07:05:09 +0000
Files and hashes: 1: tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl (hash: ODA4xSAnvmYfedLbQFW6Tr3GX7HqqFEBbLdARUDJENc=)
2: ACE7F9985DF711F084BC8A50C4F9AE02.roa (hash: uMO+2JAcztORNSv06a9gx7VlI/CanLXKpbYCi8Zh4kI=)
3: E641780E535211F0A795A950C4F9AE02.roa (hash: ed5G9bTTE4ta+9ZR/j/PVZoByMJafJHwh2lR+lbY92s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180 (0xb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Validity
Not Before: Apr 17 07:05:09 2026 GMT
Not After : Apr 24 07:05:09 2026 GMT
Subject: CN=69e1dba5-4d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1f:46:e4:ca:2c:28:db:12:76:d9:f0:04:7a:
4d:d8:e1:ea:64:83:10:fd:4f:9d:c9:bf:fe:1b:35:
c3:80:78:f6:27:33:6a:ee:93:47:08:d5:3b:c2:dc:
a6:58:5e:76:37:67:ae:f9:e4:42:e4:8f:65:1e:a9:
a5:ea:80:f0:1e:52:8a:a6:9b:be:1d:f2:ee:3a:cc:
5e:59:da:48:0c:a8:8c:22:d0:07:7a:c4:b3:2a:57:
aa:7d:08:5f:2c:3e:ed:e0:00:99:2e:e6:87:f2:95:
0a:f8:02:71:5a:c8:b1:e0:da:67:d6:4a:bb:d4:26:
7e:b7:24:b9:fa:23:7d:b6:5f:e6:0b:1f:b1:8c:73:
d3:9d:1e:88:5a:2a:db:3e:cf:7a:82:e9:e5:2d:9b:
6b:db:d8:75:d7:8e:d3:81:f2:b1:4c:9f:cb:58:12:
71:97:49:a9:fb:64:0f:16:a1:e6:06:d4:b5:b6:76:
b0:46:6c:7f:b3:33:84:6e:f5:43:7f:49:8e:b3:22:
e3:05:13:21:38:3a:5e:a4:30:68:3a:b1:93:24:2b:
fc:ed:e8:9a:eb:30:ba:fe:5f:07:72:54:6d:2e:6d:
09:93:05:52:91:5b:81:10:9a:86:93:fd:0b:cd:ce:
a6:6e:3a:94:79:07:ed:90:a5:73:ce:52:e1:d9:62:
10:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:56:C2:00:5D:A9:2E:31:CF:1F:A0:7C:F4:B7:DD:4B:68:70:80:89
X509v3 Authority Key Identifier:
keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:85:c3:e8:30:09:31:82:38:e5:80:08:c9:59:80:43:f6:
c4:b6:d2:c7:35:cc:e4:61:8f:72:9e:5f:14:f3:f7:61:30:d3:
d9:96:28:95:07:b6:06:88:10:32:7e:bc:87:f9:fc:8e:ed:59:
cf:c6:23:29:39:7a:79:24:9f:32:82:05:6e:34:f7:7a:c8:1e:
a3:0b:7f:df:0c:bd:18:bc:ae:e1:a6:ce:9a:21:f3:57:d1:3f:
85:4e:61:80:57:a9:e9:a2:63:35:f6:dc:4d:be:93:e2:82:5f:
40:f2:bd:bb:e2:55:a7:8c:2e:ce:9f:4d:e5:ed:ca:fa:a8:2b:
9a:94:76:a0:47:c8:09:72:71:6c:fa:41:29:f4:b0:00:8e:1c:
9e:18:5b:13:97:4e:53:be:a6:9c:6a:e1:44:ba:d0:98:b9:b3:
d9:a1:49:69:a3:e7:47:f0:e8:db:af:1d:34:46:bb:98:74:aa:
01:97:83:1f:6e:46:1e:db:f9:fc:d2:83:7e:19:b7:f0:28:57:
af:96:f0:00:26:9a:0b:b2:42:0c:75:8d:1b:53:e5:90:93:53:
58:ca:90:f8:d7:5d:8c:df:01:86:af:fa:1a:ab:11:d9:e7:88:
09:c1:6a:bd:31:58:91:46:ef:78:e0:87:28:fa:0f:b5:bf:f7:
4a:99:d1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:00 2026 by rpki-client