
$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier: BYccamcjpBcVePNH+jNnma0ouM2xciJcJf+4IhGubv8=
Subject key identifier: BB:55:02:49:F1:75:05:4C:1E:57:8B:E3:97:AB:0A:90:A2:4D:51:AD
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial: 35A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number: 356A
Signing time: Sat 04 Apr 2026 14:17:39 +0000
Manifest this update: Sat 04 Apr 2026 14:17:39 +0000
Manifest next update: Sat 11 Apr 2026 14:17:39 +0000
Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: x0yzU/KOoc28CpkTfWj48ptYm1oA4/0wxuBX7A+K1I4=)
2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13728 (0x35a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Validity
Not Before: Apr 4 14:17:39 2026 GMT
Not After : Apr 11 14:17:39 2026 GMT
Subject: CN=69d11d83-dd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:1c:17:df:97:ac:88:0f:48:bb:cb:ca:4f:
18:da:03:0b:ec:1c:b7:92:c5:1e:b1:0c:e0:14:80:
57:ba:e3:d5:ff:c1:d6:3e:7c:aa:7f:49:f9:76:87:
ec:de:a2:d7:4d:df:20:cf:52:ad:1e:f2:2d:e2:f9:
8b:b0:e6:a5:92:b3:6c:03:14:75:2d:ad:88:7e:04:
55:69:22:e1:80:d7:86:0b:5e:f8:17:b4:fc:b0:da:
f8:47:20:a4:f0:11:9e:4b:d6:68:f5:b7:6f:f5:8f:
95:61:00:20:fb:b0:46:7b:ac:9e:66:04:1b:85:85:
72:fa:3a:96:c0:4d:3b:df:1b:4e:8c:e6:f8:bc:dc:
0a:ac:a8:0d:aa:da:c8:d4:45:fd:22:8f:bb:de:5f:
92:da:69:24:77:e7:dd:31:16:94:43:c7:d0:0e:21:
60:93:01:1f:93:b2:64:fc:29:db:31:1f:e6:18:37:
7b:88:74:cb:e1:92:cf:49:dd:2d:5a:e5:8b:90:0a:
a9:31:1a:46:70:52:c6:31:6c:cb:57:0e:dd:98:2c:
9f:dd:a4:6e:28:78:e3:7d:ce:64:0f:eb:4c:93:a7:
9e:ef:6e:3c:ea:86:82:87:77:20:18:63:78:f7:d1:
08:2a:7c:38:ac:9a:10:4b:35:e8:c3:65:40:e2:92:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:02:49:F1:75:05:4C:1E:57:8B:E3:97:AB:0A:90:A2:4D:51:AD
X509v3 Authority Key Identifier:
keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:82:0e:c0:17:b3:3e:48:dd:f2:ea:77:8f:a9:bf:e2:b0:98:
61:f7:69:4d:dc:8a:fe:5d:0a:54:2a:4f:f0:44:04:55:1c:d4:
0a:08:4b:6a:e0:7a:04:db:78:dc:33:fb:90:27:c1:c1:c7:b4:
b1:bf:b2:1f:5e:01:b7:c8:2a:2d:34:41:d9:b0:ca:04:84:9b:
3a:6a:99:fe:a8:b8:bd:36:ba:de:66:59:d0:cf:11:b6:e0:2f:
56:4e:ee:f5:72:05:a2:5d:85:0b:ff:77:26:e3:9a:fb:d9:09:
5f:5e:7d:c2:f5:1e:49:1e:eb:cf:55:4c:56:33:33:2b:5f:b4:
a2:6d:f1:3d:95:6e:5c:9b:a7:2e:a6:cb:52:b9:a7:1f:b4:92:
39:56:bd:57:1e:1b:f7:95:b8:58:48:6d:81:c2:d8:53:8a:ae:
62:fe:c5:91:84:84:09:c5:60:ac:79:04:09:73:19:e8:9c:cd:
5a:bc:11:68:36:70:44:15:c4:75:83:aa:80:e8:19:cc:6c:a9:
5d:c7:0d:c4:54:96:81:47:b3:e3:fb:eb:45:2a:a2:69:b6:e9:
e2:05:62:26:fd:5e:d6:c3:d7:ac:a6:7b:82:a6:f6:7c:16:d0:
93:69:d5:e7:84:da:38:61:7b:02:1b:a3:73:eb:fa:2e:29:87:
66:5d:c7:4e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2
RjU1NDFFNDAwHhcNMjYwNDA0MTQxNzM5WhcNMjYwNDExMTQxNzM5WjAYMRYwFAYD
VQQDEw02OWQxMWQ4My1kZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0nEcF9+XrIgPSLvLyk8Y2gML7By3ksUesQzgFIBXuuPV/8HWPnyqf0n5dofs
3qLXTd8gz1KtHvIt4vmLsOalkrNsAxR1La2IfgRVaSLhgNeGC174F7T8sNr4RyCk
8BGeS9Zo9bdv9Y+VYQAg+7BGe6yeZgQbhYVy+jqWwE073xtOjOb4vNwKrKgNqtrI
1EX9Io+73l+S2mkkd+fdMRaUQ8fQDiFgkwEfk7Jk/CnbMR/mGDd7iHTL4ZLPSd0t
WuWLkAqpMRpGcFLGMWzLVw7dmCyf3aRuKHjjfc5kD+tMk6ee72486oaCh3cgGGN4
99EIKnw4rJoQSzXow2VA4pKrRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtVAknx
dQVMHleL45erCpCiTVGtMB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE
NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0
OTJfdk1YYnR1Znh2VlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAO4IOwBezPkjd8up3j6m/4rCYYfdpTdyK/l0KVCpP8EQEVRzUCghLauB6BNt4
3DP7kCfBwce0sb+yH14Bt8gqLTRB2bDKBISbOmqZ/qi4vTa63mZZ0M8RtuAvVk7u
9XIFol2FC/93JuOa+9kJX159wvUeSR7rz1VMVjMzK1+0om3xPZVuXJunLqbLUrmn
H7SSOVa9Vx4b95W4WEhtgcLYU4quYv7FkYSECcVgrHkECXMZ6JzNWrwRaDZwRBXE
dYOqgOgZzGypXccNxFSWgUez4/vrRSqiabbp4gViJv1e1sPXrKZ7gqb2fBbQk2nV
54TaOGF7Ahujc+v6LimHZl3HTg==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:14 2026 by rpki-client