
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
File: dCWq4W3bRko-K0ecekDJkCODa6A.mft (raw, json)
Hash identifier: uAvNrDxUSGlvWprCURX+yNMeEgp3f8xgRaO8d4h2kEs=
Subject key identifier: 7E:ED:89:3E:89:0D:6C:F3:8B:23:87:D4:5E:63:EE:1D:CA:06:54:69
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 03DA
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
Manifest number: 03B4
Signing time: Wed 21 Oct 2026 00:51:30 +0000
Manifest this update: Wed 21 Oct 2026 00:51:29 +0000
Manifest next update: Wed 28 Oct 2026 00:51:29 +0000
Files and hashes: 1: dCWq4W3bRko-K0ecekDJkCODa6A.crl (hash: sCQWarUQm2puVKS+5ysI8pPlr2OjSUPxBD1/qweQQ5Q=)
2: 7F78A06E6BBD11F18D81D59C7947A888.roa (hash: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=)
3: A3C1A64E020811EF900CC60CC4F9AE02.roa (hash: HpPZhZVSwGrzf4zGYjjyQ7ueOCim2ZvtK0gkwPhEOmI=)
4: 1EA5984A0BE111ED9E3AA135C4F9AE02.roa (hash: PAqkmFF7NdZLc+WBtc68ZNEhsmCDHgoBRZN4pVqjKP8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:51:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Oct 21 00:51:29 2026 GMT
Not After : Oct 28 00:51:29 2026 GMT
Subject: CN=6ad80c91-efba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:79:bb:2e:e4:33:da:b7:28:ae:99:9e:89:76:
72:96:47:53:13:4f:0c:e5:d5:8e:5e:d5:06:dd:6c:
02:71:c3:59:1e:d9:a7:51:95:d6:6c:76:94:1d:e0:
ae:e1:04:be:c4:06:11:80:ac:3e:c8:4b:78:ab:50:
7a:6d:3a:21:be:e4:b4:e9:3d:6d:1a:0f:9f:b7:3d:
6b:de:53:69:ae:eb:99:2d:99:37:0c:d6:26:7e:43:
7a:dc:5d:d3:92:4c:45:30:7b:b0:99:49:b4:47:69:
a6:b8:0c:c1:33:fe:21:18:80:83:29:42:f3:dd:e3:
32:e1:7a:50:72:da:ad:a2:89:44:0b:a7:1d:fa:24:
b0:35:97:8c:33:94:33:d0:67:47:30:72:d5:a4:da:
d2:93:b1:9d:23:7c:97:d0:47:ab:9b:10:8a:23:a0:
bd:c1:20:2f:3e:e3:4f:77:f8:df:67:0d:c7:ae:09:
53:9b:e3:aa:e0:27:ab:5a:1b:3a:52:66:97:40:6e:
42:a2:77:bd:ee:d5:5b:91:a9:36:f0:d0:19:60:41:
ac:4b:ad:7a:7b:6b:d4:6d:2a:df:06:9b:be:61:a7:
e4:4a:db:28:20:c4:94:d7:5d:27:54:50:98:6c:f3:
9b:3e:74:c7:6b:64:d2:ca:19:8e:71:cf:e3:b2:6b:
0f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:ED:89:3E:89:0D:6C:F3:8B:23:87:D4:5E:63:EE:1D:CA:06:54:69
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:f0:b2:8a:de:d6:af:bb:34:f2:9b:12:74:23:e0:e1:13:b8:
a7:29:20:54:c0:55:ac:a8:79:b3:be:f8:62:ac:a1:69:c7:53:
de:7e:dc:a6:6a:9a:89:c9:21:27:6d:98:a6:d7:b9:f8:70:ac:
ec:cc:3f:2a:34:a0:48:21:f4:bf:ac:0e:65:fe:8b:55:b3:4c:
b1:dc:20:9d:d1:7b:a6:9e:9d:6d:3e:ca:62:84:4d:db:2f:9d:
02:e2:62:f3:25:25:e0:4a:36:99:4c:8a:99:92:27:34:04:4d:
19:89:08:37:74:e9:3b:3c:a8:13:e6:b5:57:6f:9e:b1:96:1d:
96:3c:a0:68:50:83:4c:6d:ba:91:1c:46:6b:7c:36:b3:88:4c:
3f:8d:24:18:e5:7e:4d:ff:c1:2a:24:4d:d7:c3:be:ec:e7:60:
a9:f2:ab:ad:d9:a4:01:06:a5:b2:73:b9:c9:ea:e9:f7:18:d4:
84:0a:a7:f0:0c:91:e4:12:27:55:af:a8:66:0c:d4:21:ac:74:
f1:1c:46:f9:40:47:a1:9a:af:98:61:83:46:80:ba:14:d6:d4:
d3:61:d9:44:6b:2e:fd:2b:ce:93:63:08:a2:25:4d:8d:e5:3d:
18:28:26:fc:48:3a:21:84:0d:67:5d:71:8b:87:f0:51:d1:1c:
62:19:70:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:51:35 2026 by rpki-client