
$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
File: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft (raw, json)
Hash identifier: YsaTZ/2UOogkgxuEDZh7bM90td2tzPfQAflgZWWKkXo=
Subject key identifier: AD:41:2D:39:C7:0B:AE:5F:3B:DB:0F:BB:C5:FF:A5:1C:2C:F8:FE:76
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Certificate issuer: /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial: 4E2466A2F46716FADB397578B24426F24E93ED06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
Manifest number: 0714
Signing time: Sun 01 Mar 2026 19:50:25 +0000
Manifest this update: Sun 01 Mar 2026 19:45:25 +0000
Manifest next update: Mon 02 Mar 2026 22:38:25 +0000
Files and hashes: 1: 3230332e342e3136392e302f32342d3234203d3e203337393930.roa (hash: aiTwY7exOIWYXIKbSyXz+xb7jVL186qs815q9Rt7CIg=)
2: B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl (hash: ZKwPxyh/jo0gF3d8xYrtAfj2eb4q/2JKZstpzOSCIdg=)
3: 3230332e342e3137312e302f32342d3234203d3e2039343439.roa (hash: hnoMIclcB05NmUd2xDmWX3bZIBs6hnWFPDfYc7/JghY=)
4: 3230332e342e3136382e302f32322d3234203d3e203337393930.roa (hash: A2MpVUmS2HoA19ZogILSNm7O5BUrXzUuhmjKFdQmYk0=)
5: 323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (hash: EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=)
6: 323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (hash: 50d2RggU8y4nILOGJZpWYefA0XMqCp6rq7Je4AWL+Ws=)
7: 3230332e342e3136382e302f32342d3234203d3e2039343439.roa (hash: 0SHIwVIwVyWAhBgnbacpjgq46FIsXuIaoz9VKCP/7mY=)
8: 3230332e342e3137302e302f32332d3234203d3e2039343439.roa (hash: M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=)
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 22:38:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:24:66:a2:f4:67:16:fa:db:39:75:78:b2:44:26:f2:4e:93:ed:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Validity
Not Before: Mar 1 19:45:25 2026 GMT
Not After : Mar 2 22:38:25 2026 GMT
Subject: CN=AD412D39C70BAE5F3BDB0FBBC5FFA51C2CF8FE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:da:6c:92:61:53:57:44:49:79:45:54:93:
b8:ed:d4:d7:bf:06:18:87:3d:58:b9:ac:70:98:96:
62:9f:6d:93:15:2c:53:b0:de:2d:ab:f5:1f:ac:d1:
dc:6b:48:2c:f7:13:4b:1a:39:1d:de:84:90:36:6d:
5d:a2:37:c5:90:21:df:fe:9d:df:e2:12:ba:c7:19:
f8:f8:7a:b0:1a:1f:3d:4c:72:59:65:c0:ac:8d:f8:
a6:9c:08:64:7e:09:74:07:84:4f:08:a9:dd:4f:4e:
6e:3d:2a:31:66:57:1f:4d:9b:bf:d5:d3:bd:cf:b7:
7e:fb:1e:77:cf:26:7f:74:b5:92:3c:d9:69:f3:9e:
ca:64:47:7b:ea:8e:ac:92:4c:2f:c9:5a:d8:8d:b1:
8f:0c:7c:b8:cb:33:eb:e1:5f:16:80:f6:2b:40:6d:
7a:39:8a:58:00:97:dc:87:89:0a:a2:90:fd:40:12:
9f:f6:66:3e:e8:25:a3:29:7a:dc:3f:b4:59:ac:58:
fa:cd:aa:3a:b0:68:61:d7:a0:da:67:78:86:73:ee:
53:2c:73:d1:c5:50:e3:56:47:73:08:95:b1:4f:5e:
ac:97:21:0f:0f:82:7c:7d:fe:1a:29:7b:82:c1:4a:
85:37:9b:7c:fd:01:07:4d:af:7e:a3:c7:db:f0:80:
ce:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:41:2D:39:C7:0B:AE:5F:3B:DB:0F:BB:C5:FF:A5:1C:2C:F8:FE:76
X509v3 Authority Key Identifier:
keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:70:2e:6d:18:fc:19:a1:1f:96:40:8c:59:2b:ec:ae:50:16:
da:83:21:b2:a1:a3:12:68:1f:d3:f3:d7:ef:d8:4a:f6:e4:e5:
ed:41:2e:df:4f:0b:18:6d:2c:12:39:7c:7d:9a:59:16:c4:d6:
83:a8:fa:70:98:fb:b0:e7:6e:38:1e:a7:64:de:da:aa:56:16:
50:33:12:0c:58:67:6e:59:df:ec:78:02:b2:3a:2d:28:a0:0b:
62:d6:fa:81:09:df:81:27:11:bb:f8:05:0b:5b:8d:b5:39:03:
d7:fb:5c:5e:32:78:28:8a:3b:d4:12:4d:5a:df:8e:94:23:b4:
d7:cb:63:1a:ab:b8:23:2a:96:f3:51:90:8e:30:d2:06:fa:0e:
05:e9:29:ad:b2:94:1b:c4:3c:3d:a3:88:95:c2:26:36:15:42:
71:37:64:98:21:5b:01:81:86:7e:6a:18:29:48:dc:f4:a9:56:
66:31:f5:c2:69:b0:b2:40:6e:e7:a5:f8:94:57:eb:47:36:29:
0e:3a:8a:20:fb:4b:a0:4b:7f:3b:f5:cc:d6:fc:cf:7b:a7:e7:
ee:85:bb:2a:67:b9:05:7d:32:1f:f3:84:34:7d:cb:1c:7a:5f:
78:f9:29:47:b6:d9:87:7d:90:1f:2f:e1:89:21:0f:1e:05:cb:
00:f6:b1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:39:29 2026 by rpki-client