
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: 778w19yKcav2QfqjajVl6Dnjr7zRtS3C+AD3YUZpKnM=
Subject key identifier: 65:5D:6A:19:1B:95:6B:E1:46:72:FD:61:1D:72:9B:4F:4F:BE:40:F2
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 0322643F373AC09F652587D5D8B040B4691862BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 07A3
Signing time: Fri 12 Jun 2026 15:59:18 +0000
Manifest this update: Fri 12 Jun 2026 15:54:18 +0000
Manifest next update: Sat 13 Jun 2026 17:32:18 +0000
Files and hashes: 1: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: flJTPZ46b4mt9qzWDdfIDdppJpcYKfDqIn9TjegEbok=)
2: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
3: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
4: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
5: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: zCkBuUORazuvH+5I5/DH6UsB8QISObAO/CvMJOJHq80=)
6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
7: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
8: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 17:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:22:64:3f:37:3a:c0:9f:65:25:87:d5:d8:b0:40:b4:69:18:62:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Jun 12 15:54:18 2026 GMT
Not After : Jun 13 17:32:18 2026 GMT
Subject: CN=655D6A191B956BE14672FD611D729B4F4FBE40F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:18:c5:4b:a5:a6:31:2b:ed:08:88:98:db:
e8:1f:76:a4:76:13:62:73:57:fa:b5:55:d5:35:b0:
00:79:a6:d6:ac:f1:d8:bb:0e:50:bf:d8:b8:95:38:
46:22:20:51:20:9d:ab:a5:3e:01:3d:bf:27:05:af:
91:68:15:24:6f:e7:c0:f8:bd:66:b2:ea:70:30:a9:
7c:bd:59:a1:38:55:c4:b9:3b:8e:15:90:d9:41:eb:
07:e1:15:bc:c1:e1:9f:a9:67:a4:07:ec:91:02:38:
a2:82:70:79:4a:7b:b7:39:c3:74:70:04:fe:d0:21:
f3:c9:64:6a:7f:0c:df:8a:cb:9c:78:78:87:cd:9e:
d7:6b:40:5e:ff:49:14:76:cd:d9:87:43:cb:47:8c:
c4:dc:43:f2:8a:2a:a0:3c:f1:59:09:ff:0d:f7:54:
fd:98:09:de:44:74:2d:eb:16:54:e7:da:18:94:37:
4c:e1:17:60:da:57:ec:3c:71:69:61:3e:29:f3:72:
82:ce:c9:0a:52:57:21:14:4e:cc:1f:a5:74:01:00:
cc:36:7d:67:64:49:9c:b3:33:73:b7:96:53:63:e6:
19:82:1b:7e:91:d8:d5:1c:b6:b0:7a:dd:66:93:7c:
77:e8:b5:03:ff:78:dd:74:01:3c:df:73:ef:64:e2:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:6A:19:1B:95:6B:E1:46:72:FD:61:1D:72:9B:4F:4F:BE:40:F2
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:80:27:bd:86:7d:69:76:66:78:1d:41:58:b7:63:1a:92:
73:3f:44:e6:98:e4:d2:76:63:f7:10:b4:5e:1c:4f:b4:ce:91:
a8:87:9b:be:de:7e:cb:df:fd:f5:53:62:93:21:72:cc:f6:62:
5b:19:e9:18:fa:c5:00:82:f5:9f:ab:a1:f0:10:4e:63:44:ba:
38:c6:01:2e:e3:5e:4a:4a:99:97:87:cb:7a:2f:30:4c:09:09:
c2:7a:7a:ee:81:0b:81:ff:cd:a6:b9:51:a9:f8:35:10:bc:a2:
ac:58:0a:4c:21:6c:50:44:5d:18:8a:de:b0:c6:5c:be:c9:7d:
af:27:b3:c6:9f:45:9a:9d:04:e1:3e:68:5e:92:1f:82:6f:d0:
b7:78:25:87:00:89:f8:76:c5:fe:65:74:0f:6a:e7:f8:3e:dd:
37:87:0e:20:98:94:d2:2e:31:98:5d:51:72:c4:85:9a:24:20:
1b:9b:f8:43:f9:b2:ee:da:11:17:1d:b8:71:42:c0:b4:97:e4:
a3:d6:ef:a0:94:e4:84:5e:cc:e3:25:42:51:40:c1:8a:65:bd:
ea:11:d9:ac:64:cc:ba:85:e7:69:38:da:b2:f2:77:29:47:33:
a3:72:ad:f7:ab:cc:3e:88:cc:95:5d:43:7e:23:b0:d3:35:79:
92:48:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:37 2026 by rpki-client