
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File: dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier: SxamsI55574LFzt4DPzh+Q7jzU9W1bHJ+5Hy+GviovI=
Subject key identifier: CB:89:64:92:DA:88:F7:85:BA:E7:37:97:4B:75:D2:A9:A0:F5:60:90
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer: /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial: 19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number: 15
Signing time: Tue 21 Jul 2026 10:58:32 +0000
Manifest this update: Tue 21 Jul 2026 10:58:31 +0000
Manifest next update: Tue 28 Jul 2026 10:58:31 +0000
Files and hashes: 1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: NspK9+4C82/7RVGGs7wWCJtyw0FzvxpxuKi36lYyGlM=)
2: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
3: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
4: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 10:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Validity
Not Before: Jul 21 10:58:31 2026 GMT
Not After : Jul 28 10:58:31 2026 GMT
Subject: CN=6a5f50d8-5fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9c:94:7b:37:d9:c7:60:5c:b4:0e:2d:23:26:
ed:90:51:e3:17:52:7f:b2:66:5c:6b:03:30:e8:84:
80:75:4b:e3:e6:0b:ab:fe:dc:f3:c6:8e:9d:16:2d:
4d:f0:ec:54:74:ca:6d:aa:be:2c:83:99:e8:70:fd:
ee:35:48:d2:c1:4b:6c:bf:c4:e5:53:fc:26:8f:75:
80:00:05:cc:6a:7b:04:78:b4:2d:ad:c2:1a:03:df:
e1:f8:b4:c7:ef:a3:ab:a0:ea:7b:a8:ed:54:5d:93:
e4:cd:49:0f:eb:1f:f2:50:fc:44:7c:8c:e4:b3:18:
a9:0c:9b:50:54:59:d1:1a:11:8b:4b:8f:27:9c:b0:
5e:37:be:ec:51:46:f2:d2:d2:00:11:04:ac:e7:46:
c7:61:6e:08:a2:b3:50:d2:e7:5f:3a:32:b2:e4:3e:
99:13:4c:52:9f:08:df:86:a2:94:59:ca:ba:db:11:
c3:ab:3b:43:81:30:8e:86:e2:ca:59:d7:c4:cd:a0:
44:03:f4:75:78:28:8a:bc:f9:05:d8:52:e9:28:aa:
1b:57:24:34:75:c7:bf:ac:b8:98:3f:4d:84:b3:08:
6d:79:48:75:9f:6c:4d:75:90:ed:28:e2:26:d0:65:
24:ff:4d:90:1e:b9:3a:c7:2c:99:31:f5:bd:b5:4c:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:64:92:DA:88:F7:85:BA:E7:37:97:4B:75:D2:A9:A0:F5:60:90
X509v3 Authority Key Identifier:
keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:55:54:5a:82:53:c0:ff:cd:f7:ea:5e:14:73:83:9b:0a:63:
ef:a4:39:81:c7:29:9a:cf:e5:56:aa:97:ca:63:66:01:fa:8f:
19:e7:5f:4f:a7:4f:9b:53:f9:ee:4a:e7:2d:2b:57:b9:24:75:
65:f7:ea:b2:da:26:b9:bf:f5:fe:5f:d4:b2:43:6f:f3:c6:10:
a5:02:01:03:d5:aa:d2:12:d7:e0:ae:8b:e2:d2:ac:ac:05:77:
6a:26:dc:aa:6f:de:31:a9:76:1a:9f:82:7c:95:b6:2a:7d:e9:
28:da:a2:d3:8e:4f:60:98:5c:70:38:0d:20:76:fa:44:c7:d1:
17:43:64:db:0f:de:e9:76:8a:0e:2f:c9:66:a7:5c:f1:07:a3:
0f:35:74:95:29:d2:11:eb:03:91:60:89:de:f3:be:ba:ab:54:
9e:bf:ad:f0:a7:be:0d:6a:80:11:1e:53:cf:60:14:0d:a4:7a:
2e:d1:06:a8:f0:85:bf:dd:42:2c:51:04:68:eb:6f:09:48:d2:
03:13:b4:6e:8a:4e:98:65:5e:39:c0:45:3c:ee:04:92:e3:27:
c9:d9:56:24:36:ed:31:79:d9:81:e6:25:a6:48:2b:57:9b:8d:
6f:22:19:97:61:1b:a0:51:13:ce:94:29:93:17:02:31:06:0a:
52:1b:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:53 2026 by rpki-client