
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json)
Hash identifier: FaFZg6SfMMLwJ2DFmGvt6rM+SDwG1nW667kPWnYBnMM=
Subject key identifier: B7:EF:9C:7C:2D:EE:41:3A:B9:1E:C9:77:24:8B:F5:74:BB:5E:7D:2B
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial: 0204
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
Manifest number: 01FC
Signing time: Fri 12 Jun 2026 23:13:39 +0000
Manifest this update: Fri 12 Jun 2026 23:13:38 +0000
Manifest next update: Fri 19 Jun 2026 23:13:38 +0000
Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: sfR3ilck7LUztOrPwdqta5XpAPyIEoeKbWf7V4OsRSU=)
2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: h1GjFRWsL8zm9w/JK18XEZpcDgp9Hd5wn7O3sw9gPUM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:13:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 516 (0x204)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Validity
Not Before: Jun 12 23:13:38 2026 GMT
Not After : Jun 19 23:13:38 2026 GMT
Subject: CN=6a2c92a3-b878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:1a:8d:05:4d:fa:e5:59:93:07:8f:c4:22:
86:67:14:d0:a1:75:33:ac:82:04:34:1f:03:20:b3:
75:32:b2:5e:a2:f6:30:8c:d5:3b:c3:0b:6a:46:d6:
a6:ce:e3:41:6d:d2:c9:8e:d0:42:cc:bb:95:10:fa:
2e:fc:23:d9:40:54:f6:09:ad:33:9b:2b:5b:a7:aa:
e6:60:a3:fd:91:7e:23:3e:97:c6:c7:7e:66:86:67:
31:cb:0d:9f:78:7a:ab:41:82:6e:ba:be:20:92:c6:
53:58:23:88:dd:07:73:9d:b4:4e:a4:01:da:bb:b6:
a0:d0:d0:fd:f0:df:b2:d2:09:7f:11:39:1e:09:5e:
24:42:6b:9c:fa:01:86:65:93:17:54:f7:e3:db:6a:
f8:16:cd:77:11:0c:bb:8d:dd:41:0d:a4:60:c4:37:
95:b2:ed:cb:14:14:c8:f2:da:40:d2:a3:49:b4:a3:
1b:81:85:f9:1c:0f:3a:32:49:7f:8d:0d:05:a9:0f:
fa:67:7b:d1:b9:62:26:35:75:32:83:c4:98:c5:a7:
e1:6f:24:5a:e5:fe:94:2a:ec:63:60:9f:52:8b:36:
05:bf:e4:76:94:09:93:bd:98:5f:8f:0e:f7:6f:52:
95:1d:7f:35:b9:40:df:cf:37:4a:75:06:7a:28:43:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:9C:7C:2D:EE:41:3A:B9:1E:C9:77:24:8B:F5:74:BB:5E:7D:2B
X509v3 Authority Key Identifier:
keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:50:38:73:ee:4a:e8:1a:bb:81:a4:06:67:58:62:40:9d:2f:
c8:c7:00:2b:9a:6a:4f:cb:6b:f5:08:59:97:ca:86:78:2c:f8:
98:b3:9b:ed:84:b9:e5:ce:c2:74:28:24:d4:d0:a1:e6:25:a2:
59:e0:fe:9d:ad:cd:52:64:60:36:1a:a9:03:80:bf:2b:82:fa:
e2:c7:44:eb:c3:a0:c0:f6:98:a6:19:2a:b6:e8:2f:f8:5f:71:
e1:2f:f4:8d:c6:e2:70:60:ef:88:a8:4f:d9:c7:2e:8b:ff:54:
c8:11:18:c6:60:d1:76:43:fd:fc:01:26:e3:72:87:63:d2:a6:
a8:33:0f:f8:6b:06:45:7a:5a:38:ca:94:56:27:5f:30:64:88:
17:34:6b:8e:53:90:6d:0f:97:b6:a3:67:81:ef:d1:21:31:46:
2d:32:38:89:a1:f2:95:7a:17:62:2c:cf:e9:0c:a0:51:42:58:
d3:09:0d:20:02:fc:e7:24:79:61:d7:55:bf:8a:df:7f:3c:26:
0c:8c:59:5c:73:32:b1:c1:d4:ad:83:cd:b0:9a:f7:b4:0a:56:
7c:6e:aa:c3:02:fc:ca:ae:e4:76:d8:f9:a2:a6:13:fe:87:81:
99:6e:50:4b:3f:8c:f0:b8:c7:2b:65:e9:f8:8b:03:7d:00:d0:
3f:85:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:16:53 2026 by rpki-client