
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
File: -DbdMLYEJjYg0GHRBYTI8wEWAIc.mft (raw, json)
Hash identifier: gyCGKAd//0li9S16j/cm1M2viedMuvWQotROrzUbn+0=
Subject key identifier: 17:C7:8D:9A:A0:F5:79:DA:F7:0E:36:B8:32:52:88:ED:83:06:08:C1
Authority key identifier: F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
Certificate issuer: /CN=A918EB49/serialNumber=F836DD30B604263620D061D10584C8F301160087
Certificate serial: 0389
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
Manifest number: 0350
Signing time: Fri 17 Apr 2026 00:52:45 +0000
Manifest this update: Fri 17 Apr 2026 00:52:44 +0000
Manifest next update: Fri 24 Apr 2026 00:52:44 +0000
Files and hashes: 1: -DbdMLYEJjYg0GHRBYTI8wEWAIc.crl (hash: MNtiLqH+0zzrBYfViJAfiYmXtfHW6TtIE1IyjJ7i7FU=)
2: C79B240C249811EFABD23253C4F9AE02.roa (hash: BsjDl7+sYPrszHo5VW0F7g1UPG2+LbPhMDI5ZaWICRk=)
3: AA314EC8249811EF971CED52C4F9AE02.roa (hash: ahj5aJjebAtMEDGy0A6wCZmN0hH4iUo4uLH+PifJcEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 905 (0x389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EB49, serialNumber=F836DD30B604263620D061D10584C8F301160087
Validity
Not Before: Apr 17 00:52:44 2026 GMT
Not After : Apr 24 00:52:44 2026 GMT
Subject: CN=69e1845d-cb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:65:6e:0c:8a:74:cf:2d:b3:c2:74:03:46:e6:
ab:08:ce:29:52:3c:88:fe:39:38:b9:c3:2b:5d:52:
33:42:14:cf:95:fb:a8:52:f2:fb:42:16:76:f2:e0:
7e:f3:10:de:0e:ab:e3:40:f1:5f:1d:10:5f:92:bd:
a3:89:94:b7:83:a2:68:cf:2f:f7:41:92:81:dd:d6:
35:b8:66:3c:c5:a9:b1:46:c8:b1:91:16:44:5e:3d:
1c:04:c5:78:7c:7e:44:b8:4c:1b:b2:f4:7d:84:cf:
6f:6a:ad:b7:51:43:a8:f6:e7:c4:c0:d2:58:48:fc:
a2:af:36:32:fb:cf:67:df:f3:86:79:3f:f9:3e:25:
00:92:5c:c6:ab:1b:c0:cd:cc:b4:52:08:2f:ec:10:
95:f4:bc:75:1e:29:1b:0b:19:dd:60:5c:95:81:5a:
84:e5:b1:59:11:cd:02:95:e9:d9:7f:23:ea:53:ae:
63:b2:85:b4:09:14:b7:a6:6f:28:64:1e:11:91:c7:
36:11:6e:08:1c:3a:ec:b3:62:1c:f4:4c:ca:11:a0:
ed:73:31:84:b6:5b:64:cc:5d:05:45:b2:02:f1:74:
cf:5a:6a:7f:3d:ea:5d:66:05:79:66:bb:09:96:31:
e6:3e:1f:5e:c1:90:9a:19:ae:76:89:21:03:18:a7:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C7:8D:9A:A0:F5:79:DA:F7:0E:36:B8:32:52:88:ED:83:06:08:C1
X509v3 Authority Key Identifier:
keyid:F8:36:DD:30:B6:04:26:36:20:D0:61:D1:05:84:C8:F3:01:16:00:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-DbdMLYEJjYg0GHRBYTI8wEWAIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EB49/5532B960FF5C11EC8DAEA553C4F9AE02/-DbdMLYEJjYg0GHRBYTI8wEWAIc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:93:c7:ca:41:e0:44:52:6b:12:77:8f:b3:b5:6e:88:ee:83:
19:ba:7b:8a:f3:07:8d:99:7c:7d:85:cc:5a:7c:0e:b4:9f:ee:
4b:e4:ef:b9:10:ec:6a:67:21:b5:67:48:05:78:49:fe:40:27:
ba:cb:e0:76:6a:24:61:ce:9b:d7:b1:0a:b2:85:d5:92:31:1c:
11:e8:d5:66:5d:e2:7a:02:07:9b:4d:ff:3a:64:2e:6f:4d:27:
81:fb:20:9d:54:76:ff:f5:6e:16:cf:7b:38:f8:ae:1b:28:7d:
a8:76:04:09:77:5a:df:70:4d:9c:b8:35:71:9a:0b:5b:2c:a3:
94:31:d2:72:e4:3f:90:dd:bb:ff:bc:7b:bf:fa:a6:6e:52:79:
d1:9d:3f:46:50:09:1f:53:0b:98:25:43:76:36:14:81:26:bb:
4d:fd:31:3e:8c:dc:6d:08:3c:a4:54:22:35:cd:bd:37:d7:3f:
20:43:bd:f0:72:7e:1f:02:2f:8e:a8:9b:53:9d:9b:0d:24:18:
90:0e:d5:b3:36:6b:c4:19:45:5c:d1:6e:17:33:4d:5a:a4:70:
31:5f:39:3a:b7:bd:c1:cb:9b:cd:02:0c:3b:03:ff:22:69:4a:
5a:7d:40:e5:3e:f7:b4:41:f5:ed:fa:41:2d:7e:ca:06:2a:2e:
75:00:f5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:47 2026 by rpki-client