
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json)
Hash identifier: HnVEbn7OgswWpwwfkWjQYHTn6n+X5dsTklPcm9D2KZs=
Subject key identifier: 28:55:2D:CA:C7:87:2A:5F:5A:97:7C:E5:A1:C8:2F:5F:91:43:BA:92
Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Certificate serial: 0D5A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
Manifest number: 0D4C
Signing time: Sun 04 Oct 2026 18:10:09 +0000
Manifest this update: Sun 04 Oct 2026 18:10:08 +0000
Manifest next update: Sun 11 Oct 2026 18:10:08 +0000
Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: 0DmwhgGtWfRcHbJOFExqlwPukg8NMvM0xxnDazpscus=)
2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: XcRGzifAbD8nNLaizhBvxl/3s2M38329oybDy1dhDiA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 18:10:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3418 (0xd5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Validity
Not Before: Oct 4 18:10:08 2026 GMT
Not After : Oct 11 18:10:08 2026 GMT
Subject: CN=6ac29681-ee8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:a7:6a:bb:9d:64:14:96:8f:aa:4d:5a:e6:
45:56:3f:58:4c:ad:f6:d5:d3:db:39:30:28:6c:ad:
a9:3f:86:7c:56:e0:3f:f1:84:e3:66:ad:32:ce:6d:
42:7b:25:5f:8d:f3:f7:c5:fc:4e:fc:82:8c:29:57:
0c:8a:5b:32:54:1a:a9:63:b4:c5:f1:db:c1:f4:9d:
cb:96:99:22:cb:de:c0:54:b6:b3:25:0d:50:95:30:
19:d6:f6:36:a7:14:25:70:a6:e1:95:86:cf:fb:67:
1f:b7:0e:e4:e0:7e:6b:f5:25:d3:07:54:57:46:c3:
9f:49:0d:c0:33:02:27:92:65:0b:23:7d:d3:fa:11:
24:5c:21:99:6b:3c:51:c4:6b:f6:36:d5:2b:64:19:
be:50:44:71:77:68:bc:63:46:06:82:b4:bc:e9:e2:
18:5a:99:f3:37:15:15:7f:03:46:90:d8:74:c8:ed:
7e:72:19:16:59:0a:d9:50:90:c0:99:93:46:90:8f:
ef:5d:22:56:6f:4d:98:a5:7f:ac:b2:26:81:f2:08:
12:c1:92:f6:4d:1a:d1:4d:a8:1f:7d:fc:11:a2:ae:
b6:a0:07:4e:fb:22:9f:d1:17:bc:5d:56:ed:3c:44:
b2:b8:bd:05:53:7e:6e:b0:b0:90:8d:4e:8b:82:4b:
fe:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:2D:CA:C7:87:2A:5F:5A:97:7C:E5:A1:C8:2F:5F:91:43:BA:92
X509v3 Authority Key Identifier:
keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:47:e5:fb:f0:19:ba:71:20:e4:8f:2d:26:bf:0b:06:2f:
06:da:e9:ad:13:9e:b8:dd:a9:93:da:61:aa:21:7a:88:b3:a8:
e1:6d:92:8c:69:ea:78:95:c5:22:c8:e5:4f:97:af:bb:ef:d4:
8d:ec:b6:a7:fb:49:1f:8c:90:0a:58:2e:a5:65:bf:8a:9d:d6:
06:14:59:be:09:d0:57:f8:2d:9e:58:62:9d:a1:ca:95:a9:f7:
6f:74:df:36:73:1a:49:71:5d:e6:13:a7:e9:31:20:5e:09:41:
35:bf:1b:5a:47:39:22:9a:52:a6:28:0d:2f:56:1c:bf:2b:c2:
7c:9d:cb:40:2f:8d:7c:fc:cc:84:3f:e5:58:c3:cd:ff:10:83:
ea:37:d1:77:db:e5:97:18:85:a0:e6:05:38:5d:05:e1:de:69:
95:90:c3:02:91:df:06:d4:8c:6a:73:ac:4b:64:ec:99:63:1a:
56:6b:7b:22:0a:95:f1:7b:d6:fd:31:9c:7c:a6:f1:11:e3:2c:
58:5c:7a:5c:42:b4:f5:99:5a:11:10:66:1a:35:61:f4:42:0c:
76:a1:bd:c9:c1:5e:6e:5e:da:35:db:6f:88:d4:0b:12:99:b0:
d8:19:49:51:26:fc:18:37:9a:90:20:b1:e2:31:29:7f:d3:d2:
c8:44:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:36:44 2026 by rpki-client