
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json)
Hash identifier: Kv3voTHZm4mnNE+Y/c1xgIZrgsMbTlPxa5Wz7TMeTUI=
Subject key identifier: 23:67:EA:1F:D2:68:B2:50:24:C5:F0:0B:7F:0D:25:AE:B7:08:A1:E2
Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Certificate serial: 0CE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
Manifest number: 0CDC
Signing time: Mon 02 Mar 2026 18:11:12 +0000
Manifest this update: Mon 02 Mar 2026 18:11:11 +0000
Manifest next update: Mon 09 Mar 2026 18:11:11 +0000
Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: 8z/LchNZQXTnZ6Es5Vuom5y4gxCxiX6QzlsCVnpy93w=)
2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2fSA/Xuks+HjnmqBwbLjNPpAQRgRqBJVlHexUjGLyjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 18:11:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Validity
Not Before: Mar 2 18:11:11 2026 GMT
Not After : Mar 9 18:11:11 2026 GMT
Subject: CN=69a5d2bf-7352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:39:64:4f:92:84:c9:ca:03:c7:24:ab:8d:
75:04:c1:0e:b9:01:24:d8:4e:e4:23:ac:cd:35:9f:
0d:8b:01:89:96:5e:40:43:91:94:bf:33:f0:ff:26:
d3:e3:ff:7c:22:24:6b:a5:4c:a0:a7:7d:94:2e:53:
13:96:3d:38:05:19:f8:c9:24:35:e4:34:af:f2:32:
d4:14:21:32:8a:6c:db:7f:1d:a9:7a:cd:b0:22:64:
1e:32:e3:68:c3:ed:2f:b4:01:03:03:3f:b9:63:1d:
f1:4d:5d:49:84:fb:f3:ca:de:27:fb:26:1f:70:f7:
2e:9a:e0:67:25:5c:70:16:38:db:1b:8f:7b:31:b2:
05:26:9c:c7:2b:93:d5:e5:fc:26:2d:04:1d:1c:3e:
d9:26:e4:93:59:0f:f5:e9:88:de:67:ae:c7:33:71:
be:91:a7:9b:be:79:55:8f:c5:83:df:e5:0c:18:70:
a9:24:76:c2:71:89:62:f5:67:bc:5b:78:83:53:4f:
74:c3:4b:31:e2:da:99:ba:a5:ed:3d:cc:66:2b:55:
b5:f6:27:35:01:96:79:01:b4:8e:bf:a3:ed:11:59:
fc:71:d5:0f:48:6f:03:b0:65:28:85:1f:dd:a5:0b:
ff:53:b8:b3:c0:c3:34:97:d9:cf:6a:c5:f6:6b:0d:
b2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:67:EA:1F:D2:68:B2:50:24:C5:F0:0B:7F:0D:25:AE:B7:08:A1:E2
X509v3 Authority Key Identifier:
keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:3c:50:0c:c8:09:7a:fa:f1:87:43:89:81:d6:27:de:c4:ab:
60:0c:88:90:b4:5a:83:8f:6a:00:4d:c1:0e:a3:73:e4:7d:ea:
ec:08:1a:08:2c:b2:d0:79:89:75:29:bb:34:cf:4d:44:60:e6:
82:f1:69:76:46:e7:dc:34:fb:c7:cb:0d:57:4d:e8:25:9c:be:
af:ee:e2:2a:32:d2:f5:45:9d:5b:a9:fb:35:fc:3d:43:ab:c4:
0b:5c:3c:ec:f3:92:2f:7b:88:b2:68:a0:7f:63:dc:a7:c9:94:
9c:71:1d:ae:07:37:e6:1d:d4:b3:0c:13:c6:3c:85:f9:d6:44:
8e:a3:a5:4d:2c:df:94:01:40:5d:ec:e6:d5:c0:31:99:b1:c8:
7d:42:6a:96:91:63:2a:5a:8b:95:87:5f:f8:1a:ba:ae:e4:7f:
4f:cc:89:af:40:7a:5b:af:14:6d:78:c5:56:76:17:57:b0:2b:
d1:5e:64:78:b0:96:92:19:7f:70:6c:df:a8:bb:b6:91:3c:af:
31:ad:d2:fc:31:d1:e5:4c:ec:6b:1b:f3:1d:52:d3:13:72:b3:
50:7d:56:30:3e:2b:cc:a8:c6:1e:8e:ed:2d:73:2a:a8:36:59:
46:10:5e:98:c9:94:ba:25:ab:e8:d0:3b:e2:1f:ac:b0:5f:d9:
7a:c5:fb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:41:53 2026 by rpki-client