
$ rpki-client -vvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json)
Hash identifier: XYAJcYoKcK/WByUEgsSn7Ne58dCca/PmS5hrFyAO+d0=
Subject key identifier: 9E:3C:26:33:4D:DC:DA:C6:0A:5A:C3:74:9A:18:8D:8F:8B:DC:D0:CA
Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Certificate serial: 0FD0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
Manifest number: 0E60
Signing time: Tue 02 Jun 2026 18:47:46 +0000
Manifest this update: Tue 02 Jun 2026 18:47:46 +0000
Manifest next update: Tue 09 Jun 2026 18:47:46 +0000
Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: Slq9RhHIH5J2whQ2VmvCvBq/v67EtKCDPi/kJSZ0Mxw=)
2: DA216556B3D411F090043E0CC4F9AE02.roa (hash: c9/cILYFM0gFeLGsT71cIqHAynzHTl3OXFy99+bSxc0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4048 (0xfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Validity
Not Before: Jun 2 18:47:46 2026 GMT
Not After : Jun 9 18:47:46 2026 GMT
Subject: CN=6a1f2552-4a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:98:02:da:a7:06:7d:71:26:3c:21:a7:df:2c:
7b:b2:2e:33:60:42:8c:48:6f:ae:e6:0a:fe:dc:e4:
e6:9b:35:67:a7:18:84:03:e3:0c:60:fe:1d:41:44:
b3:7c:7a:76:14:bb:10:45:64:2d:23:d8:4d:52:41:
1b:a6:0d:fc:d8:3b:74:c7:95:47:62:b0:20:76:f6:
5c:50:87:e5:78:e7:8f:03:50:eb:32:7d:cf:d8:c5:
3c:ee:87:ab:a1:e2:9f:2e:f4:9c:28:32:7a:d7:e7:
52:b2:ac:0b:70:96:12:cb:19:ec:3e:b9:18:8a:04:
3e:15:1f:db:a3:35:d4:9b:ac:9c:d1:4e:66:82:ab:
36:da:61:39:28:a7:d1:62:57:08:43:15:e8:59:58:
af:12:38:b6:5a:5c:e7:01:7c:e5:f8:26:e4:a1:34:
1c:80:16:19:82:f6:56:f4:fa:58:7e:c3:19:10:d7:
27:23:2a:d6:b6:45:ca:b5:c4:1d:44:a3:27:4a:d3:
ac:9f:da:cb:44:5c:af:43:73:d2:10:b3:c2:c6:27:
e9:7c:53:e6:f8:2a:36:08:31:cf:d2:68:7a:2a:b7:
86:13:33:6d:38:e4:5f:ae:40:a2:8d:67:c5:34:fd:
4a:be:e0:03:9d:ac:89:c4:08:bb:46:7f:a9:ea:07:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:26:33:4D:DC:DA:C6:0A:5A:C3:74:9A:18:8D:8F:8B:DC:D0:CA
X509v3 Authority Key Identifier:
keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:68:61:1e:d3:1f:5d:18:9b:5a:60:47:82:ce:4d:49:1c:0b:
23:01:bb:0e:f0:ce:b4:e0:52:fa:ea:a7:f1:3d:48:7d:81:fa:
73:35:ad:35:06:d3:e7:29:57:a5:b1:81:48:5e:ae:95:8d:0e:
9d:23:d8:78:45:51:c1:f8:e9:f0:64:14:c7:ff:95:68:5f:5e:
7a:43:ed:17:31:8e:40:6e:ac:7c:0c:91:13:cf:5e:42:94:27:
bf:3d:92:a6:3d:6e:d0:f0:b1:f8:c7:29:6c:0b:1c:79:21:6e:
9e:e0:67:a6:76:99:e1:ff:b6:b1:e3:b1:1f:ce:11:4c:fa:5c:
ec:99:4e:5a:ae:56:92:7e:99:99:54:53:96:d4:75:d9:76:81:
0e:09:ec:af:4c:1c:97:d8:e9:de:95:c8:f5:21:d3:24:4f:fa:
5b:c8:c6:e5:d0:b1:26:eb:bd:27:e8:9a:19:82:56:1b:8b:64:
c8:b5:df:17:59:dd:28:e1:fa:7e:60:d1:43:9a:72:6f:c0:b0:
51:1c:c4:2d:eb:0e:39:c8:19:d2:13:be:cc:a2:0f:dd:f8:d2:
b6:d2:68:6b:ab:57:55:11:e7:cc:73:80:8d:1a:cd:87:60:08:
cc:45:c4:44:3b:c5:de:9b:e9:8c:7e:83:e7:76:60:3d:1b:9c:
38:b1:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:20:05 2026 by rpki-client