
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json)
Hash identifier: gDGXhAH9vdq8Oeou8/L51PPcAFvhjo7L4z1ltHpVYaU=
Subject key identifier: 46:4F:58:2B:62:72:EF:D6:66:EA:EA:B4:4E:B8:82:1D:79:80:91:D2
Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Certificate serial: 1016
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
Manifest number: 0E9B
Signing time: Fri 04 Sep 2026 18:38:43 +0000
Manifest this update: Fri 04 Sep 2026 18:38:42 +0000
Manifest next update: Fri 11 Sep 2026 18:38:42 +0000
Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: XrwcSIdwSdQS922nPja3K6fA84C3kNso1uhOOEtWnNc=)
2: DA216556B3D411F090043E0CC4F9AE02.roa (hash: 6VjnHhyr5rYpB8PfJlspJmpDTithDgNlXqVXeDLcfLU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 18:38:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4118 (0x1016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Validity
Not Before: Sep 4 18:38:42 2026 GMT
Not After : Sep 11 18:38:42 2026 GMT
Subject: CN=6a9b1032-c52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:13:ac:69:e7:2c:5e:2d:a8:0f:6f:6c:43:
be:06:66:02:de:15:ee:5b:a4:5d:32:db:8a:10:8e:
2e:ef:64:47:79:f5:c8:1a:2a:c5:8f:22:72:8f:c2:
87:35:61:f9:b2:dd:29:67:74:74:c0:74:d0:0b:54:
bd:03:c2:a4:15:7c:31:4c:5f:f6:e5:16:3b:27:ab:
b1:e3:50:80:c7:9b:c9:5c:81:d3:4a:50:5a:d5:98:
0e:4a:c4:d7:19:06:7a:00:e3:80:d5:77:fa:11:5f:
5a:93:a0:5c:61:25:71:cb:ac:a8:32:60:64:a5:b9:
81:06:9e:18:3f:b3:70:9d:70:45:5f:cc:d9:0d:4f:
39:0f:e9:8e:d8:f3:c7:7a:f9:6b:8d:be:5b:f0:d1:
a2:7f:af:52:95:b4:6c:22:4e:cc:38:f4:eb:13:40:
7f:a8:7f:19:d1:a6:49:72:01:bf:b7:3b:96:f0:37:
11:23:44:20:66:25:49:d6:9b:35:c3:ed:84:0c:41:
27:4a:f1:09:80:d7:15:5a:21:5f:89:59:c4:99:d0:
b9:88:90:a9:01:a4:45:4b:52:8e:65:ef:b4:7d:a0:
ef:6d:2e:88:21:a1:b6:00:0c:f2:0c:83:00:84:69:
29:ad:c7:8a:79:a8:ab:30:88:61:dd:e8:19:94:6f:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:58:2B:62:72:EF:D6:66:EA:EA:B4:4E:B8:82:1D:79:80:91:D2
X509v3 Authority Key Identifier:
keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
01:a5:84:cd:56:50:09:9b:b0:e6:19:04:99:61:2d:31:f7:1d:
ec:2a:fd:fe:f2:04:d8:97:53:59:89:46:1c:58:2c:4d:d3:48:
32:61:d0:78:d6:46:fe:73:b6:dc:12:c3:43:69:9f:e9:f4:5b:
99:88:97:dc:31:5a:30:46:b4:83:3f:29:01:8c:cc:c6:d4:00:
d1:04:43:0f:06:8a:53:96:6e:a4:cc:f3:ff:22:9b:b2:83:2d:
18:80:85:1e:f3:08:c0:3e:d4:55:a1:30:4b:9a:df:e4:c5:cd:
9d:75:bc:39:ee:d8:d0:d5:82:27:17:1b:35:de:76:99:bc:36:
4b:65:42:b9:18:82:91:fa:e2:eb:db:ce:21:7f:ee:f0:1c:17:
4f:d3:bb:43:dc:b9:26:47:e4:89:8d:82:cd:cb:00:1f:d6:fa:
22:5f:f9:87:da:10:8c:d9:98:38:df:7a:d3:59:7d:be:9b:4c:
55:95:f1:d2:6d:de:c7:41:bc:d4:25:92:10:67:29:7d:34:2e:
1b:5f:03:cf:54:8c:01:fd:75:89:5b:0c:6d:35:f6:dd:27:5e:
1b:0c:32:3e:2e:bf:18:80:8c:c5:22:e7:bf:e4:90:8a:95:b0:
be:c2:3f:3c:a5:13:59:69:9c:37:be:b4:9c:a1:c8:1f:7c:74:
ff:41:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:31:08 2026 by rpki-client