
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File: apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier: zpf9GIWl6/Ogid25YyB8ZmPOEmpal92IsjVFkYXgtwU=
Subject key identifier: A1:9E:28:E5:32:D3:A4:2D:30:35:98:FE:00:9D:ED:7C:A6:4A:5E:AD
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer: /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial: 0656
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number: 0649
Signing time: Sun 20 Sep 2026 22:33:46 +0000
Manifest this update: Sun 20 Sep 2026 22:33:46 +0000
Manifest next update: Sun 27 Sep 2026 22:33:46 +0000
Files and hashes: 1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: JsR0QAD025i8fxzAaZQx99GclL+YP9HD20S91hVVzTk=)
2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: 6riAUYRFQmVQEmMVFCASYyrcMsgpvKd5bNx79DBjWtk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 22:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1622 (0x656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Validity
Not Before: Sep 20 22:33:46 2026 GMT
Not After : Sep 27 22:33:46 2026 GMT
Subject: CN=6ab05f4a-93c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:90:65:2d:35:bb:b2:1c:d6:fc:75:67:ed:
12:0e:e1:02:50:37:0b:79:b2:fb:9c:9c:3b:ac:e4:
c4:5a:4e:0c:fd:a7:d4:78:ef:b0:a3:41:61:de:3b:
25:a8:e0:78:2d:2f:c5:1d:61:34:e2:2d:24:89:ad:
51:55:9e:6a:f1:b5:25:f6:79:b0:f2:9a:96:8e:d8:
f7:49:6f:26:06:15:b8:e5:da:2d:a4:fe:09:44:bb:
9c:7e:5b:c9:b0:01:fb:a6:8f:b6:91:64:f9:d6:5a:
1f:5b:31:a4:6b:5f:14:b0:4a:17:c9:cb:5f:5d:fc:
43:56:97:53:06:10:9d:d3:89:03:90:7e:21:f4:7c:
cd:2a:5e:04:20:c0:c3:fd:1c:1b:1f:66:63:51:d0:
c4:f1:a2:65:14:9a:13:f6:cd:f2:ff:f1:c2:79:d8:
59:b7:a8:c8:98:19:8e:af:94:e4:a7:b8:8f:a1:da:
a4:f9:57:d2:e8:9e:08:95:5a:63:96:d3:46:78:4f:
00:03:6b:1a:9a:bd:e1:f1:a1:ec:22:f0:26:85:22:
4a:e5:87:b8:1a:78:b7:6b:ce:67:8a:63:36:6d:45:
f6:75:92:af:b3:a4:8c:09:94:8e:f2:06:45:5f:99:
f8:a0:1d:07:1f:29:25:21:36:63:75:59:f7:de:54:
55:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:28:E5:32:D3:A4:2D:30:35:98:FE:00:9D:ED:7C:A6:4A:5E:AD
X509v3 Authority Key Identifier:
keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:e8:53:0c:95:8d:22:a5:0a:51:69:30:0a:01:9a:cc:71:
a5:54:39:84:c9:f7:d1:55:53:bc:cb:cc:bb:74:53:e9:70:16:
44:8d:fd:85:b1:70:fb:3f:92:78:04:28:b4:4d:ac:39:ee:d0:
b3:cf:19:54:df:82:c1:72:bb:60:9f:d8:d7:79:41:65:c8:6e:
db:52:aa:63:93:4f:31:ce:c1:75:cf:44:91:78:bf:37:77:8e:
28:24:51:41:b3:7d:27:73:2c:4b:fb:cf:59:8f:af:f1:8e:85:
9f:85:85:f3:e8:7c:1c:36:f1:cc:aa:1c:12:c4:ef:af:f0:da:
90:86:1f:4a:12:0f:4d:48:17:b4:3a:03:e1:1e:8e:63:9f:69:
0f:07:07:0f:eb:54:35:28:43:4c:ec:de:c1:3f:d2:55:8d:ea:
21:2a:07:85:ec:28:c1:aa:04:9b:ff:20:e5:8f:00:af:d5:23:
f0:12:33:f2:35:b3:15:0b:d6:36:a1:c6:ec:80:4b:ea:e6:d9:
32:0b:87:21:be:e5:0b:a2:b2:f5:2e:a9:ae:79:b6:9f:94:48:
5a:ab:dc:97:64:9c:8b:4a:c6:eb:3e:c8:2d:3a:ab:c1:11:5d:
28:03:03:b0:cd:d4:29:28:05:cd:68:d3:64:04:4c:6c:0c:73:
dd:3a:b2:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERBMEMxMTAvBgNVBAUTKDZBOTU0ODFDRThGNDBERDg4OTVEMUZCN0FFRTkwRTU5
NTlCQTgzQzEwHhcNMjYwOTIwMjIzMzQ2WhcNMjYwOTI3MjIzMzQ2WjAYMRYwFAYD
VQQDEw02YWIwNWY0YS05M2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApTaQZS01u7Ic1vx1Z+0SDuECUDcLebL7nJw7rOTEWk4M/afUeO+wo0Fh3jsl
qOB4LS/FHWE04i0kia1RVZ5q8bUl9nmw8pqWjtj3SW8mBhW45dotpP4JRLucflvJ
sAH7po+2kWT51lofWzGka18UsEoXyctfXfxDVpdTBhCd04kDkH4h9HzNKl4EIMDD
/RwbH2ZjUdDE8aJlFJoT9s3y//HCedhZt6jImBmOr5Tkp7iPodqk+VfS6J4IlVpj
ltNGeE8AA2samr3h8aHsIvAmhSJK5Ye4Gni3a85nimM2bUX2dZKvs6SMCZSO8gZF
X5n4oB0HHyklITZjdVn33lRVswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGeKOUy
06QtMDWY/gCd7XymSl6tMB8GA1UdIwQYMBaAFGqVSBzo9A3YiV0ft67pDllZuoPB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REEwQy9CNkRFMTMxMkYw
NDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERkaUpYUi0zcnVrT1dWbTZn
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FwVklIT2owRGRpSlhSLTNydWtPV1ZtNmc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REEwQy9CNkRFMTMxMkYwNDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERk
aUpYUi0zcnVrT1dWbTZnOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKT7oUwyVjSKlClFpMAoBmsxxpVQ5hMn30VVTvMvMu3RT6XAWRI39hbFw+z+S
eAQotE2sOe7Qs88ZVN+CwXK7YJ/Y13lBZchu21KqY5NPMc7Bdc9EkXi/N3eOKCRR
QbN9J3MsS/vPWY+v8Y6Fn4WF8+h8HDbxzKocEsTvr/DakIYfShIPTUgXtDoD4R6O
Y59pDwcHD+tUNShDTOzewT/SVY3qISoHhewowaoEm/8g5Y8Ar9Uj8BIz8jWzFQvW
NqHG7IBL6ubZMguHIb7lC6Ky9S6prnm2n5RIWqvcl2Sci0rG6z7ILTqrwRFdKAMD
sM3UKSgFzWjTZARMbAxz3Tqyww==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:47:45 2026 by rpki-client