
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: w7qeDem3noMwK0u0FTDgZido67eJKzidJtqhxpHQtXU=
Subject key identifier: 3F:CF:4C:7D:E4:16:36:46:80:2E:1A:C6:80:03:FF:4B:7A:85:7D:03
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 03DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 03A2
Signing time: Mon 21 Sep 2026 00:29:51 +0000
Manifest this update: Mon 21 Sep 2026 00:29:50 +0000
Manifest next update: Mon 28 Sep 2026 00:29:50 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: 52toI2/kx+4bdcyIzNLkAjjsG5Oj9xDqWjhlmB7CCCE=)
2: C79B240C249811EFABD23253C4F9AE02.roa (hash: rWZyVImJENhLkpwUekVBIJ0NoPNQmBMZY21o7SUKBHk=)
3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: qxY7Om1+8YyP9Sw49tMw52OWtF+8mF5JMxZgDw9G5oU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 00:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 989 (0x3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Sep 21 00:29:50 2026 GMT
Not After : Sep 28 00:29:50 2026 GMT
Subject: CN=6ab07a7f-7928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:7b:8b:a5:20:85:b5:9f:fc:b9:a9:39:82:
3b:ef:e4:13:fc:50:72:bb:b7:61:a4:04:e4:2f:0a:
1b:57:b7:f3:06:6a:67:66:a3:0e:4e:42:85:ef:d3:
bd:68:80:21:4f:36:4a:96:52:b4:39:e3:20:1a:3c:
f5:06:e1:54:bb:91:55:4c:ee:c7:fa:b6:c6:58:3a:
51:e1:20:22:3c:8a:00:a6:26:54:56:ef:68:be:90:
73:75:65:14:1d:8c:1b:23:09:05:04:09:e8:3c:04:
06:dc:90:00:8a:f3:81:cf:d5:ef:d1:9b:88:c9:cf:
9c:59:62:7b:fa:3f:8a:ba:3d:5c:c9:6d:d1:64:e9:
d2:00:a7:c5:84:f9:55:72:b5:5e:cb:e8:30:64:62:
95:d5:d7:bb:4d:33:ba:31:2c:9e:60:31:f0:15:cd:
59:2b:95:d8:03:a9:d8:a6:6d:8a:62:94:d3:f4:e6:
1d:26:26:d2:6e:aa:f2:5d:9d:22:83:20:bd:a4:5e:
dc:4c:92:52:b4:6d:47:f4:92:8a:0d:0e:9c:0d:ee:
1b:f8:c2:7b:ab:a3:e3:6d:d5:b2:4b:ab:d3:7e:dd:
c5:f9:0c:a9:db:6b:0a:2a:c3:c5:4a:61:df:03:39:
c5:ed:76:30:ab:a4:1c:e8:3b:15:72:6c:27:d0:24:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:4C:7D:E4:16:36:46:80:2E:1A:C6:80:03:FF:4B:7A:85:7D:03
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:38:37:a5:0f:91:7e:6d:61:17:82:78:11:9e:1a:9e:a7:5b:
bb:c5:4d:ba:23:11:88:f0:6c:de:99:ce:4f:52:ad:ca:f8:fb:
b8:f3:b3:4c:80:c1:c1:ae:2e:80:3c:d6:b1:2b:32:41:01:63:
97:70:b9:66:1b:63:41:08:40:36:30:b6:c0:c6:39:4c:c0:6e:
77:38:e2:0d:56:87:f0:63:9a:cb:15:1a:c2:29:8e:fa:8d:8f:
b9:b3:ba:f6:81:f5:4f:2e:ca:45:df:19:3c:5c:88:6b:7f:9b:
11:ad:10:c6:71:1a:e3:ae:11:14:95:45:95:57:13:5d:ed:8d:
f9:de:fd:03:64:c6:a6:aa:8a:79:20:42:da:e6:5c:58:19:c8:
9b:58:1f:cf:eb:2e:d7:69:ef:39:aa:c3:d9:9e:35:78:f5:39:
91:ae:d3:3b:3a:4c:fa:6b:44:ac:83:be:c3:f8:97:da:6a:ab:
1b:31:9a:b1:11:e2:05:21:ec:0d:31:cd:20:ed:a1:a4:65:df:
b8:b5:c0:c5:25:dd:9e:5b:ea:1d:2f:bc:da:58:c6:b4:ea:e5:
e7:d9:74:33:31:48:b9:ef:98:2f:89:4c:d4:33:cf:70:21:e1:
7c:40:44:e2:85:83:0b:0b:94:8c:7c:e0:36:a4:f5:b9:cf:d6:
43:31:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:18 2026 by rpki-client