
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: vX/qeTWj+hF80LcQ3dDO2gl/TRPhscAq7WdoDkmUZtA=
Subject key identifier: F5:53:29:2B:BC:E9:AA:24:E0:97:1B:2E:E9:15:FC:DD:07:8A:57:91
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 048F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 0479
Signing time: Mon 29 Jun 2026 00:25:16 +0000
Manifest this update: Mon 29 Jun 2026 00:25:16 +0000
Manifest next update: Mon 06 Jul 2026 00:25:16 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: ItedPf0tuSYzsYf1UrzD4NYXurRuCg3CtEwvHOJkn9U=)
2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=)
3: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=)
4: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 06 Jul 2026 00:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: Jun 29 00:25:16 2026 GMT
Not After : Jul 6 00:25:16 2026 GMT
Subject: CN=6a41bb6c-f7e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9c:c4:51:d5:11:67:2c:b1:ce:41:2f:df:db:
cf:b4:dc:04:c4:43:10:49:6b:73:4a:30:5c:09:83:
07:f0:f7:0b:cd:c2:a0:a9:e7:69:82:d0:cf:26:0b:
44:e6:9d:d9:9a:b4:cd:20:c5:78:2b:f8:0e:3a:9e:
9a:a3:32:d3:72:6c:30:8b:d8:30:11:ca:01:68:19:
25:13:56:d0:f0:71:b2:f5:a5:0a:f7:68:dd:56:0d:
1e:5b:d4:c1:05:c2:02:4e:21:f6:32:14:5d:64:04:
1e:48:64:44:e2:8f:98:bd:45:cb:63:c4:55:2c:07:
21:98:58:9d:9d:61:be:ff:e0:67:72:e2:77:03:70:
db:1c:c6:7a:b4:aa:92:19:68:af:04:d0:17:ed:09:
e6:6c:9f:82:09:1e:7a:92:f6:e9:f4:bf:68:ed:5e:
9e:45:1d:82:e8:7d:07:07:ab:9e:c6:ee:7d:6a:f3:
97:a8:48:08:07:3a:61:c9:bb:cf:f1:19:b5:69:a4:
c3:f2:72:16:65:11:54:45:d4:98:26:a0:81:1a:33:
a2:87:b7:36:6a:38:6e:3f:ea:0c:4b:c6:23:80:bb:
77:5f:94:4f:dd:0e:f9:ae:d6:eb:ea:5a:d0:16:45:
29:5c:35:8d:60:47:ac:57:db:74:62:3f:dd:a5:82:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:29:2B:BC:E9:AA:24:E0:97:1B:2E:E9:15:FC:DD:07:8A:57:91
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:fc:df:d3:d2:c1:01:82:2c:bc:46:51:b1:28:14:fb:83:26:
dd:5e:9c:07:22:30:c7:ee:54:a1:4f:d8:be:c0:42:d7:74:fd:
bc:0c:8d:f5:c6:d8:c1:e5:2a:41:e6:d4:82:e0:d6:ed:9f:cc:
f4:10:36:12:f9:30:a9:4a:5c:85:3c:46:53:57:b0:ef:ce:53:
08:51:62:16:d3:b8:bf:bc:d0:fb:e2:a9:cf:30:5c:cd:32:52:
f8:ba:d4:3a:52:f1:82:13:eb:8f:47:f7:65:f9:d6:51:e5:91:
a6:19:16:7a:dd:13:25:4c:c8:13:0c:cb:5b:63:cc:9c:8e:89:
47:f6:29:e2:53:de:3a:c4:19:e6:c4:da:c2:70:0d:6a:50:de:
9f:7e:34:49:ff:96:57:68:e4:f9:97:9a:a5:1f:3c:04:59:59:
18:e7:00:46:a6:fa:ca:1f:90:d3:b0:68:d8:26:e4:c7:ea:64:
7c:2b:9b:bb:f0:6c:91:0a:b1:f5:09:b5:81:9c:d6:c2:64:84:
03:0f:af:c9:cf:01:58:c0:c3:9f:eb:ab:31:e7:6a:c6:f6:f9:
89:b1:4b:2b:1b:bb:3c:3c:ef:13:01:94:f3:88:13:88:ee:6a:
c4:19:1b:7b:d6:86:93:9d:16:f6:41:3c:3f:da:52:a6:fa:99:
22:93:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:43:12 2026 by rpki-client