
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier: b483WPY+LH1MWR4s06tj3OfhhUwYK9Q4Y873UsZAHkc=
Subject key identifier: 7A:45:8C:02:21:95:EA:33:A5:91:69:6C:E5:1D:F3:B3:BC:E4:42:41
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial: E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number: DF
Signing time: Fri 17 Apr 2026 06:18:53 +0000
Manifest this update: Fri 17 Apr 2026 06:18:52 +0000
Manifest next update: Fri 24 Apr 2026 06:18:52 +0000
Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: dmbjsx9uKBUC8k+RL88fSZrgkk3NvDES88qaGqwFkd8=)
2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Validity
Not Before: Apr 17 06:18:52 2026 GMT
Not After : Apr 24 06:18:52 2026 GMT
Subject: CN=69e1d0cd-3bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:f3:c0:0b:0a:70:3f:d4:89:45:5c:41:b2:
79:08:77:66:5c:38:be:43:c3:ed:47:63:67:fd:01:
1d:42:2d:e5:77:ef:66:bb:2a:9c:af:bb:9e:96:7b:
f8:84:8a:1c:1b:6b:4d:e3:76:9b:1c:31:e2:0a:ec:
18:2d:99:ea:2d:26:31:9d:2f:20:87:63:8f:16:75:
40:47:19:06:26:a8:79:2b:6c:8f:26:7b:43:88:0c:
66:38:f5:4b:ee:2e:9d:69:6c:9d:30:9d:7f:6d:45:
4f:4d:5a:36:ae:58:cc:dd:29:eb:54:2b:95:8e:28:
23:10:6e:ad:a4:f8:55:05:51:13:4d:19:ba:73:34:
9e:1f:4b:91:29:2b:c8:80:1f:ab:94:39:fa:80:98:
d3:00:22:1d:95:11:95:a1:bc:22:32:24:f7:47:96:
4a:b2:1c:3e:32:8a:14:f6:97:c5:2b:2e:27:db:78:
2c:4b:43:ca:89:9e:11:ee:ea:89:c3:6e:1f:7d:54:
da:8c:75:43:d7:28:d7:d2:85:94:53:0d:e5:14:04:
57:09:de:5f:a5:15:10:3d:38:91:d9:71:8f:a7:11:
49:a0:5c:65:c2:65:6a:f4:ca:3b:ac:05:c7:6d:7b:
03:8a:e7:5b:ea:ac:b0:c0:ed:39:9e:d1:b3:92:07:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:45:8C:02:21:95:EA:33:A5:91:69:6C:E5:1D:F3:B3:BC:E4:42:41
X509v3 Authority Key Identifier:
keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:f9:88:9c:54:bd:ba:40:77:78:a1:32:76:2f:42:7d:0b:46:
41:96:bc:11:92:f8:e7:a4:cb:98:13:bf:a1:82:00:fd:35:ff:
e8:f3:7a:9b:34:1b:56:87:fd:b8:f8:e5:84:7a:6a:11:11:da:
88:fb:2a:45:eb:af:8f:47:21:60:50:2b:92:2b:56:fb:9e:08:
f5:33:a5:7d:e9:b3:ff:e5:5e:96:3f:a6:43:d6:76:e8:1c:6d:
0d:d3:da:a9:0f:59:48:2c:5a:69:a2:83:d7:01:0f:d4:1d:c7:
71:4b:49:e6:58:7b:fb:42:29:b8:48:f0:a0:85:8c:b3:26:fc:
05:3f:01:86:ee:ce:9e:a4:a7:f1:a7:a5:8d:e0:d8:6f:e1:6d:
e5:ca:ae:7b:55:df:67:0c:de:41:f1:da:7e:b7:36:92:27:67:
1f:a3:74:98:79:df:c0:d1:1b:57:5d:5b:d1:20:84:29:2e:b6:
29:1f:99:48:de:c4:a3:df:c1:c9:a9:af:5a:90:8b:c9:b8:f2:
ae:39:62:bd:20:29:75:06:54:9c:09:9c:c9:d4:c1:f9:9a:b0:
b2:33:77:19:f0:49:66:46:95:78:e6:2b:81:9d:fc:6b:40:3f:
de:f0:0f:e7:ec:ba:d9:85:9f:50:55:d7:54:b9:90:71:6a:9d:
08:03:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:51 2026 by rpki-client