
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json)
Hash identifier: du/T+lT1sHIeqgLxLxPGyu4ALQkUNKUQnoG5W/Ho1XQ=
Subject key identifier: 1F:D5:77:12:DB:70:52:D8:21:C2:EC:29:81:A7:E2:79:41:54:CA:5E
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 05F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
Manifest number: 05C0
Signing time: Fri 12 Jun 2026 23:13:44 +0000
Manifest this update: Fri 12 Jun 2026 23:13:44 +0000
Manifest next update: Fri 19 Jun 2026 23:13:44 +0000
Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: BqKvy/eX8JUJAFlhUwpf90e7VfXH6W2ZV9usDaGG2O4=)
2: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=)
3: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=)
4: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=)
5: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=)
6: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=)
7: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 23:13:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1525 (0x5f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Validity
Not Before: Jun 12 23:13:44 2026 GMT
Not After : Jun 19 23:13:44 2026 GMT
Subject: CN=6a2c92a8-22c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:43:15:93:30:de:fa:fd:bc:b0:af:55:12:
81:4e:09:87:9d:24:ff:f0:ea:4d:62:13:b6:ed:a9:
8e:79:8d:9a:96:4d:42:7b:fe:c1:b8:fb:df:b4:46:
b8:11:2d:62:25:7d:32:fb:10:4f:c1:33:c9:a8:23:
b7:ac:2e:40:19:dd:3a:2e:32:f7:a5:59:0d:1c:7a:
f1:f4:ef:70:cc:d3:1f:ea:b3:25:61:17:8e:45:76:
26:f1:3a:0f:61:ca:38:82:be:4d:15:bd:57:0c:75:
21:53:2b:a8:b9:a9:b9:40:61:9b:e7:cf:bc:1d:1e:
b1:e4:09:f7:6e:a3:00:52:c6:25:1c:f6:e9:ac:17:
93:bb:4d:5c:92:ba:55:4a:2a:75:18:9f:b5:8c:f6:
d6:7c:ce:33:4e:64:d7:41:b5:88:22:ed:aa:1b:b1:
02:e9:f9:f8:92:2e:32:ad:ff:97:29:32:c5:50:af:
21:f0:dd:ea:9e:91:b3:ac:9a:7a:dd:2d:eb:d4:44:
51:4b:b0:1d:56:77:26:73:73:6e:a4:f4:ce:d2:88:
33:d3:72:06:36:5c:a3:fa:0e:0d:fa:c2:31:b9:ef:
02:db:5c:df:89:d6:b6:88:56:18:e0:28:e1:a6:90:
60:b8:01:49:5f:7b:83:19:d0:f2:40:f5:06:2e:97:
0c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:77:12:DB:70:52:D8:21:C2:EC:29:81:A7:E2:79:41:54:CA:5E
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:05:f1:9d:07:ef:aa:25:db:c7:b1:7a:35:05:23:e7:11:
ae:8a:df:cd:2e:a3:88:f6:54:41:77:34:71:35:6f:c7:25:6d:
08:fd:90:82:32:a3:cb:8b:8c:c7:f8:23:66:64:19:43:0a:89:
da:44:e3:53:2f:89:66:a4:39:5b:f7:c6:37:91:90:d0:32:31:
b3:e4:15:8b:6e:29:9c:40:8a:94:77:ae:8b:37:fc:06:58:1a:
fd:ec:81:06:cb:bb:ca:9e:08:56:1d:44:92:64:d9:08:10:f4:
07:a2:7a:5f:20:72:90:5c:91:3d:3a:be:5a:53:70:33:02:97:
31:a5:03:5f:6a:58:80:a1:3b:34:6e:6b:fd:96:d8:42:92:57:
df:dd:36:a0:d9:53:df:12:87:76:e9:e0:93:e1:eb:e9:25:e6:
c1:53:e7:e8:c2:d3:b1:ff:2d:fc:af:92:b6:ee:bc:dd:37:83:
09:14:35:ec:c4:59:f9:c7:a2:f9:2a:7f:51:21:f6:77:9c:02:
a5:ba:fd:b4:6a:3d:88:27:fc:ee:7b:e5:b3:d5:3a:f7:f1:3c:
8a:ba:1f:e6:24:61:5b:4b:85:63:ec:19:cd:fe:37:c6:d8:87:
c5:9b:be:50:ec:cb:7b:90:32:36:74:08:ce:dc:1f:8f:ea:33:
64:a2:9a:9f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB
N0U1QTU1MzcwHhcNMjYwNjEyMjMxMzQ0WhcNMjYwNjE5MjMxMzQ0WjAYMRYwFAYD
VQQDEw02YTJjOTJhOC0yMmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLdDFZMw3vr9vLCvVRKBTgmHnST/8OpNYhO27amOeY2alk1Ce/7BuPvftEa4
ES1iJX0y+xBPwTPJqCO3rC5AGd06LjL3pVkNHHrx9O9wzNMf6rMlYReORXYm8ToP
Yco4gr5NFb1XDHUhUyuouam5QGGb58+8HR6x5An3bqMAUsYlHPbprBeTu01ckrpV
Sip1GJ+1jPbWfM4zTmTXQbWIIu2qG7EC6fn4ki4yrf+XKTLFUK8h8N3qnpGzrJp6
3S3r1ERRS7AdVncmc3NupPTO0ogz03IGNlyj+g4N+sIxue8C21zfida2iFYY4Cjh
ppBguAFJX3uDGdDyQPUGLpcMzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/VdxLb
cFLYIcLsKYGn4nlBVMpeMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF
QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut
ekZzRVlyVEVkZFduNWFWVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV/sF8Z0H76ol28exejUFI+cRrorfzS6jiPZUQXc0cTVvxyVtCP2QgjKjy4uM
x/gjZmQZQwqJ2kTjUy+JZqQ5W/fGN5GQ0DIxs+QVi24pnECKlHeuizf8Blga/eyB
Bsu7yp4IVh1EkmTZCBD0B6J6XyBykFyRPTq+WlNwMwKXMaUDX2pYgKE7NG5r/ZbY
QpJX3902oNlT3xKHdungk+Hr6SXmwVPn6MLTsf8t/K+Stu683TeDCRQ17MRZ+cei
+Sp/USH2d5wCpbr9tGo9iCf87nvls9U69/E8irof5iRhW0uFY+wZzf43xtiHxZu+
UOzLe5AyNnQIztwfj+ozZKKanw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:56:06 2026 by rpki-client