
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: 93xamyFxl/8PRVeIYQ5eTepR8aDruf2xaOVrkXY0D+0=
Subject key identifier: A9:98:D6:E4:10:06:01:81:7F:50:04:19:54:B7:75:1E:56:9E:F3:B3
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 45C50514FA30DEFBFF2D3E8AF2F8016245D99D91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 0751
Signing time: Thu 16 Apr 2026 15:43:47 +0000
Manifest this update: Thu 16 Apr 2026 15:38:47 +0000
Manifest next update: Fri 17 Apr 2026 15:51:47 +0000
Files and hashes: 1: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
2: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
3: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
4: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
5: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
6: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
7: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: QxycQKZcnQiLyuiQEf1Q1iMNVGPtFegsyYYpeF1j00U=)
8: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 15:51:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:c5:05:14:fa:30:de:fb:ff:2d:3e:8a:f2:f8:01:62:45:d9:9d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Apr 16 15:38:47 2026 GMT
Not After : Apr 17 15:51:47 2026 GMT
Subject: CN=A998D6E4100601817F50041954B7751E569EF3B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:2c:0e:75:dc:67:d5:9c:ef:a6:59:71:ee:
72:3c:80:a1:8b:9f:8e:63:9a:15:30:e7:43:59:eb:
36:c8:84:f7:8b:ec:e6:45:04:10:01:6f:ab:79:da:
b9:80:5f:75:d8:b3:ec:54:0c:47:ba:e1:f8:67:c2:
87:3a:8f:8a:e3:24:33:4d:5c:cd:9b:34:60:85:f5:
a4:7c:10:b6:5b:6b:b2:a5:46:68:43:54:24:7f:88:
2c:95:16:5c:98:fe:d5:9c:8f:b9:f1:98:0c:e4:b5:
92:48:c4:a3:2f:52:ee:60:7e:ad:4d:32:cb:cb:c3:
9a:c7:52:92:67:2b:91:74:77:1e:f7:da:b4:45:7a:
f4:b5:bd:f5:e8:65:f6:71:34:f4:01:03:61:2c:64:
af:cb:57:fe:c0:e1:0c:10:a9:d3:8d:ba:0c:72:80:
22:7f:56:99:20:4d:33:e1:59:7b:7a:ac:24:cb:ad:
5f:36:b7:ca:e2:23:04:4c:f4:85:a3:1a:b5:23:ed:
04:78:d6:50:1b:67:4b:7c:60:09:eb:7b:fd:75:58:
e3:49:1e:32:9f:7c:dd:57:34:2b:87:ab:80:73:01:
c2:f1:01:21:c2:bb:3f:c2:67:04:19:f0:33:8d:53:
51:2c:4a:9a:2f:39:63:90:ee:50:44:6e:91:1c:02:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:D6:E4:10:06:01:81:7F:50:04:19:54:B7:75:1E:56:9E:F3:B3
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:db:6e:13:7b:8a:0b:8b:e7:73:d4:8a:2d:03:05:c7:33:
48:e2:53:17:25:a3:c0:97:9e:18:12:e9:87:2b:ba:28:cf:7b:
3c:a8:df:12:6d:ee:85:d2:e3:5d:2e:fe:3f:0c:bb:07:6c:56:
4e:fc:ab:ea:a4:39:06:73:65:3d:35:63:6c:ea:58:38:27:c8:
77:b9:5c:5a:2a:eb:d2:23:fb:81:58:e4:91:6f:5f:af:5a:21:
12:91:5e:8b:7c:db:e1:98:49:56:73:12:75:2f:00:f0:a2:fb:
c8:1c:8d:4c:3c:af:5d:b8:50:2a:6a:54:1e:d5:55:9d:c3:c3:
6c:48:a0:d3:d1:72:58:14:d5:5f:00:f4:fc:13:1d:ea:b0:2a:
6a:2b:8e:b1:a1:93:da:bc:97:52:e8:43:e5:4f:92:67:b8:fe:
52:e9:6e:16:0e:6b:6a:5a:5d:cf:10:b8:76:82:42:99:8a:f1:
75:9d:a1:23:3f:a0:19:e8:ca:e4:b6:48:22:99:6e:b6:2a:36:
bc:cb:80:42:73:0e:95:70:2e:90:6d:a9:62:e2:18:e5:65:9b:
e7:c3:e5:7c:49:9a:c0:59:18:6d:b6:43:f8:c1:6d:86:df:5f:
e8:e1:56:7d:29:ea:0f:3a:09:a1:a2:c9:98:1c:64:e7:09:32:
fc:35:d9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:45:56 2026 by rpki-client