
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
File: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft (raw, json)
Hash identifier: 7ku5NkSE0H94K9Kc1CKDnwiw2oaDqdRTQi2D+6t4Pvs=
Subject key identifier: 29:33:4C:FC:71:B5:D3:BA:3F:FD:3D:AB:91:F6:B9:F7:E8:3C:B2:E7
Authority key identifier: 0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84
Certificate issuer: /CN=A917A4C7/serialNumber=0D5594855310D916064B7991370CC964C3D2F384
Certificate serial: 03BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
Manifest number: 03B7
Signing time: Sun 05 Apr 2026 00:26:35 +0000
Manifest this update: Sun 05 Apr 2026 00:26:35 +0000
Manifest next update: Sun 12 Apr 2026 00:26:35 +0000
Files and hashes: 1: DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl (hash: ldU8hZIlWKlfx6+Re0yD+0CumuKGqEZ3tAJJgR/IgP8=)
2: C0AF4C2ED01A11ECAEEE987EC4F9AE02.roa (hash: /a9vJxDdnPMf0i2jU8RPOLfmLWr4u/vqoKuKwHNpKWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl
rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 00:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A4C7, serialNumber=0D5594855310D916064B7991370CC964C3D2F384
Validity
Not Before: Apr 5 00:26:35 2026 GMT
Not After : Apr 12 00:26:35 2026 GMT
Subject: CN=69d1ac3b-5fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:5c:9d:a5:fc:57:c3:65:34:5e:ce:22:f4:
8e:ee:b7:50:b3:ff:70:b6:87:ae:e3:c8:c7:87:4b:
3d:b1:e0:7f:08:e6:db:a4:fb:68:9f:e6:35:40:3e:
8f:3d:46:54:08:55:33:58:4d:67:ba:03:22:73:0f:
31:af:13:2b:44:6f:0c:6b:61:fb:1a:81:46:96:c6:
2a:8d:67:18:22:f9:c1:96:cb:ba:d2:84:cc:15:34:
d4:85:19:27:6e:af:ca:d8:5f:9c:cd:66:9f:95:a9:
07:a0:66:b2:b2:eb:04:06:5f:06:3b:cd:64:d2:15:
49:a6:13:8e:a4:57:7c:69:ee:7d:be:b1:fe:79:3a:
3a:3e:70:e9:2d:ff:9f:07:93:bb:94:3d:68:5a:1e:
09:13:95:3c:82:3c:5a:01:2d:bc:44:39:d1:02:fb:
07:c1:40:6d:88:fc:5e:6f:4f:34:0f:59:83:f6:74:
54:81:b8:ce:44:94:cf:40:1a:0e:e1:d6:8a:48:25:
6d:7b:55:0e:be:78:e9:09:16:07:18:b1:f7:d6:f6:
08:68:44:4d:d6:8b:53:d2:36:21:f8:b4:24:27:67:
cf:3d:4c:00:24:02:d2:19:37:bd:87:d3:a2:e8:d4:
67:bd:3e:96:b2:71:21:be:eb:01:86:21:4a:7a:eb:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:33:4C:FC:71:B5:D3:BA:3F:FD:3D:AB:91:F6:B9:F7:E8:3C:B2:E7
X509v3 Authority Key Identifier:
keyid:0D:55:94:85:53:10:D9:16:06:4B:79:91:37:0C:C9:64:C3:D2:F3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A4C7/CF6EC044D01711EC8E361357C4F9AE02/DVWUhVMQ2RYGS3mRNwzJZMPS84Q.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9f:3f:7f:81:83:92:b7:76:c1:ed:c7:57:a0:be:b8:36:5f:
71:60:6c:f6:29:4f:2d:6f:87:f2:5b:e9:1c:27:aa:04:5b:46:
ae:7d:f9:bd:46:eb:23:a0:6c:56:5a:d8:76:18:c4:6b:16:82:
77:f2:a7:55:c1:05:b3:b1:d2:ab:d5:98:56:0b:eb:b3:a9:49:
54:f9:8a:1f:e7:43:c0:01:5c:fe:2c:b1:6c:2f:07:84:2d:41:
6c:76:cf:c7:5c:f1:9e:4a:55:56:49:d5:48:3b:91:5c:91:77:
f3:b6:af:ba:57:51:d7:df:64:d7:d2:6d:bd:d0:bf:ae:cb:ab:
31:7a:ad:ce:cc:6c:ac:4b:27:e6:e2:49:3c:3d:5b:9e:bf:a0:
6f:a2:7f:2c:aa:f4:81:38:da:69:a7:8e:7b:c8:9c:b7:83:95:
5f:16:18:e7:cd:ac:35:47:67:00:ca:1d:a9:d0:7b:e1:18:4d:
6a:8f:5a:8a:11:7d:a6:4a:3d:bd:8b:e3:25:94:80:ac:3c:31:
85:1c:0d:f3:a3:ef:b7:4a:dd:a3:7b:67:94:4a:d5:12:64:7e:
03:b3:d2:26:14:c4:80:ac:bf:33:07:7d:ae:6f:32:3a:93:e0:
9f:8d:8f:eb:ff:42:35:97:31:5f:3e:9e:fa:cb:1d:30:7d:e8:
0b:9e:b7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:27 2026 by rpki-client