
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json)
Hash identifier: PrjrBdEpaQmEcZiWM514TBE3E1f0mHdnDKw7i+VODEo=
Subject key identifier: 5B:31:78:2F:11:CC:A0:C1:91:07:EC:FE:18:D9:67:BB:B0:DA:6E:73
Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Certificate serial: 0FB5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
Manifest number: 0E47
Signing time: Sat 18 Apr 2026 18:42:54 +0000
Manifest this update: Sat 18 Apr 2026 18:42:54 +0000
Manifest next update: Sat 25 Apr 2026 18:42:54 +0000
Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: oLI8G5rTOPaeHIZITjGm8s7nxX0/moLnKyg/QkAe0ZM=)
2: DA216556B3D411F090043E0CC4F9AE02.roa (hash: 7VFeLafytH8rFG9aEiZ4uXUkDXr8RmyOAaFWDg9ugpY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4021 (0xfb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Validity
Not Before: Apr 18 18:42:54 2026 GMT
Not After : Apr 25 18:42:54 2026 GMT
Subject: CN=69e3d0ae-e514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d0:36:e7:92:e9:76:e9:76:0e:f3:7d:7b:ce:
c4:25:18:44:30:ef:b5:35:13:c5:b1:68:e8:b4:38:
fa:da:78:de:cf:9a:16:7a:6c:8d:01:e3:f2:fb:2c:
ad:5d:9b:ef:af:13:49:66:b2:65:d4:d1:66:5e:d6:
18:0c:ba:cd:8d:ea:26:4b:19:4f:a4:89:5e:c6:2d:
35:7e:aa:5b:9e:be:86:cb:c2:e6:8f:89:67:35:64:
d4:08:8f:2b:c5:d2:dd:f4:2d:4f:c4:55:7e:e7:38:
7e:b8:c2:5a:33:7e:94:76:53:a9:76:81:62:3f:4e:
98:0e:7e:7e:35:8b:7b:a5:86:d2:24:0c:e0:44:79:
fe:34:25:63:a8:55:df:75:4c:27:69:24:24:84:de:
4b:7c:dc:89:61:04:9c:f0:d2:66:66:5e:5d:ce:62:
d8:29:53:c6:e1:f0:9c:78:8e:0e:47:42:66:d9:96:
04:88:79:7e:f8:4b:16:26:09:ec:be:d4:15:de:5b:
76:9d:29:6f:df:31:17:04:9c:80:12:df:ba:dd:65:
8f:f4:69:4e:88:da:6a:3c:32:33:c0:18:7d:a0:11:
7a:37:be:9c:79:f1:a2:e7:03:32:7c:ca:80:81:1c:
0c:a7:14:35:62:4b:27:bb:dc:59:b5:48:bb:24:29:
1a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:31:78:2F:11:CC:A0:C1:91:07:EC:FE:18:D9:67:BB:B0:DA:6E:73
X509v3 Authority Key Identifier:
keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:fd:86:54:4c:54:37:57:4f:a1:b2:ee:4d:ed:36:96:c0:ef:
d0:bc:1e:05:91:7f:7a:69:91:a6:c0:15:fd:78:eb:de:fe:be:
61:b9:f4:a7:81:9f:15:bb:d8:94:ae:1a:cd:7b:44:7d:7e:27:
08:84:93:ed:81:e6:d4:ca:9f:e2:ad:80:ea:f0:be:73:cc:b4:
0d:87:bf:23:eb:e3:6f:66:87:69:2f:7e:76:7d:f6:2c:7d:4c:
2e:a4:f9:8e:3a:36:dd:89:59:ab:6c:31:e4:38:50:51:2f:bf:
64:a6:d4:f5:ca:c6:eb:81:3c:4c:7a:d3:49:ce:eb:6b:50:f2:
3e:5f:1e:42:0d:43:d9:36:3b:80:3a:f9:0d:6b:be:c7:4f:c3:
d4:de:b3:14:b4:13:42:56:33:af:f5:40:12:3f:87:1c:5a:b1:
69:87:9b:e0:47:60:1a:aa:6e:d1:f9:da:56:26:b1:7a:35:64:
88:c7:6d:f8:05:e0:11:9f:1b:22:7a:8c:37:12:69:f2:e7:e0:
2c:26:0f:50:ec:38:07:9a:2b:d6:ac:b0:b9:a0:07:61:45:85:
9a:37:65:1c:9b:17:f3:69:df:cd:2a:9b:33:fa:89:75:49:df:
d8:8e:eb:e1:3e:95:5d:6d:74:34:df:bf:4d:93:74:88:d7:c5:
ae:f8:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 21:07:32 2026 by rpki-client