
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: 015sQdrVjouwGSm7K2ocHXJnrMmaRKB1FWx668GOF8Q=
Subject key identifier: 0A:E9:76:1E:2C:78:55:63:3E:71:21:19:C9:C2:28:E0:FD:8D:2D:D3
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 03A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 036D
Signing time: Sat 13 Jun 2026 00:54:00 +0000
Manifest this update: Sat 13 Jun 2026 00:54:00 +0000
Manifest next update: Sat 20 Jun 2026 00:54:00 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: kfcOkie/CyOqsfCavyZbyP3gf3oGRi78DAgB0FPmiNk=)
2: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
3: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 00:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 934 (0x3a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Jun 13 00:54:00 2026 GMT
Not After : Jun 20 00:54:00 2026 GMT
Subject: CN=6a2caa28-faa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:17:10:11:a1:5c:2a:5d:10:93:11:53:c2:
cb:9c:96:1f:2c:6d:ed:4d:5d:8d:0a:43:6b:89:7e:
a9:62:9f:70:61:0b:c8:79:d8:0c:90:65:a6:2e:c5:
9f:88:dc:b7:4d:f0:ba:60:44:c1:1d:76:99:78:b2:
18:84:5c:3e:0c:20:bb:80:65:57:39:0f:f2:a7:b8:
39:9c:7e:91:1f:f0:db:fd:4d:31:b8:44:f1:90:ef:
24:64:b8:a5:42:96:36:cd:38:cd:5a:c1:82:41:25:
e4:38:5c:b6:39:bb:4e:28:47:04:84:be:b7:44:0d:
42:54:74:d0:3f:c3:2d:77:79:2c:e6:53:53:4b:0e:
2d:d4:bc:01:9c:3b:7e:e4:b3:63:fe:71:dd:b6:01:
bb:ad:46:a7:5a:ac:e2:4d:1f:ec:85:5b:5c:be:23:
21:29:66:38:9a:a8:75:31:f5:41:b3:a8:55:3d:d6:
73:55:82:f3:9b:5e:b5:8e:10:b6:31:22:65:c7:b7:
87:3e:f7:00:4b:6f:fd:f7:3a:db:72:ac:3f:89:f7:
77:17:a1:fb:8f:2f:2f:f9:75:81:c8:a6:d2:36:51:
e0:25:3b:eb:6f:e1:0c:d6:45:4c:56:c5:b3:d6:da:
9d:f5:82:15:f7:34:68:7a:7f:6d:30:1d:6d:41:05:
b0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E9:76:1E:2C:78:55:63:3E:71:21:19:C9:C2:28:E0:FD:8D:2D:D3
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:71:36:0b:d7:31:57:da:8a:41:6d:41:1d:32:0c:8e:dc:7f:
c9:26:49:3b:28:77:44:ff:05:80:a4:9d:47:e1:df:d7:fb:ba:
61:e8:99:6b:87:5c:3f:ea:af:61:7f:f3:58:3b:e0:98:7f:fb:
c7:7c:55:45:fd:b3:15:53:36:17:6e:14:96:1d:85:d5:bb:9c:
6b:f9:e5:01:51:72:5c:aa:3a:f3:65:3d:43:76:7f:91:2b:a7:
ad:05:4a:58:5f:1f:32:46:39:ee:eb:ef:3a:d7:71:d1:77:1c:
ac:db:0a:53:2a:35:70:45:c2:4c:00:d8:66:75:6e:c0:f2:81:
21:19:88:99:85:14:69:f6:44:9c:7a:6c:7b:27:11:e0:96:47:
bd:93:16:80:0a:dd:e8:25:62:a1:eb:e8:90:9a:bb:4b:05:69:
60:4c:40:4b:bf:2f:4b:bd:e4:0f:9f:c5:b7:0a:2e:91:6e:5d:
3c:b7:ba:50:92:76:78:24:76:93:f0:29:c7:92:09:16:c0:b2:
86:ad:20:c9:f6:06:ce:b1:71:62:95:19:d9:04:55:fa:4f:dc:
e5:40:95:f8:0f:ce:e3:0a:f4:61:d6:af:af:ed:7e:80:76:06:
e2:f8:d7:84:5a:ae:bd:b8:84:e5:5f:75:f8:2a:d1:2e:7d:d1:
3c:47:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:56 2026 by rpki-client