
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: cod8fVkQ5d+79wQv5CcxUl8VG4IUvKy3N5irppMXQ3o=
Subject key identifier: 55:74:5F:F4:16:76:E3:2C:85:BC:02:D6:EB:D7:FE:08:54:C2:3D:E3
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 0478
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 0462
Signing time: Fri 15 May 2026 00:16:32 +0000
Manifest this update: Fri 15 May 2026 00:16:31 +0000
Manifest next update: Fri 22 May 2026 00:16:31 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: g7bQJoj2PLKX92rZi+tkbizQZ+RmWukAs0Buk0g+2AA=)
2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=)
3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=)
4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 00:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1144 (0x478)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: May 15 00:16:31 2026 GMT
Not After : May 22 00:16:31 2026 GMT
Subject: CN=6a0665e0-dda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:07:1b:41:e4:25:97:c4:71:be:96:60:b9:
21:09:21:ad:cf:27:77:32:69:39:c7:3a:e2:f4:93:
86:83:14:a5:59:a6:3c:80:61:7c:50:0b:f9:3f:a7:
9b:84:20:01:e0:54:a6:58:aa:90:d9:2d:8e:b9:3c:
67:d5:6c:87:4d:eb:64:3b:38:f0:f5:96:45:cc:3b:
c1:9f:aa:89:94:6c:11:6c:8d:45:3e:8d:69:5b:52:
b5:46:17:21:15:dc:a5:08:a7:d0:f2:00:79:7a:0a:
a8:a7:a6:6b:6c:87:94:6b:b7:c9:5c:02:d5:8c:2c:
76:e3:f5:59:54:11:76:21:98:f9:c6:d1:2f:27:c1:
ad:a6:9f:58:d7:c5:53:7f:d0:76:ca:d3:2e:1a:4d:
6c:1d:c4:2d:58:76:80:b1:fb:45:96:41:e0:06:e6:
6c:ed:76:69:38:72:8c:18:38:49:6f:2e:76:e7:30:
10:46:20:ff:86:e0:fe:d7:b1:e0:f6:6c:de:98:3a:
ae:43:95:31:bb:d7:26:ec:fd:ef:ca:3e:31:8e:73:
56:86:6c:67:94:3c:dc:6f:09:23:75:ab:20:56:a6:
43:40:fd:70:f6:31:58:00:71:e4:26:a0:d8:b1:b6:
03:a2:04:fa:55:42:bc:bb:f0:5d:a8:05:9a:89:d9:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:74:5F:F4:16:76:E3:2C:85:BC:02:D6:EB:D7:FE:08:54:C2:3D:E3
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ae:d7:72:38:39:db:cd:a4:bf:6b:9e:4f:5f:76:9a:6c:cb:
88:17:4b:0b:27:73:06:7d:68:4a:f3:ce:8e:fd:f0:70:9a:69:
01:79:4e:7c:3c:ad:43:9b:d7:35:df:88:03:04:6e:e2:8d:3a:
8d:fb:3e:b5:07:9a:c3:59:e5:0d:9b:9c:8e:8e:68:f2:f5:5d:
49:d1:d2:0d:17:86:9d:b8:b5:00:e1:b1:5e:61:62:64:8c:ee:
ff:fd:02:a0:61:f1:45:88:14:79:20:d7:a1:24:09:35:65:e1:
fa:70:27:54:4a:ef:59:f8:62:eb:cf:71:c4:39:96:20:bd:84:
08:28:d4:49:b1:20:81:0a:90:58:97:40:88:61:9e:1b:ab:35:
1d:ee:2d:cc:98:61:ff:c7:00:d3:9a:d2:bd:ac:58:88:5e:f8:
ce:93:1e:14:df:98:40:df:22:a4:cb:93:95:d9:c7:9e:e7:75:
6a:d1:ea:6d:c6:01:69:1f:c4:29:d2:d0:c7:1d:c9:65:82:c8:
1a:2d:c4:29:49:c4:55:4e:d0:ce:bd:aa:5c:c8:5a:65:2e:29:
cc:37:e2:88:c6:99:c8:ba:44:e3:f8:75:2c:23:d9:d8:35:04:
c2:3e:2a:86:29:08:1f:73:b7:75:29:ec:8b:a7:f5:1a:dd:43:
18:e0:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:29 2026 by rpki-client