
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
File: DWjbrWAPi9kLNVuY9LI4-56aV_o.mft (raw, json)
Hash identifier: HS9PVsMIhwc1Yd//BML2oMPTtSRjF3FSwthDJ2zNBUk=
Subject key identifier: 08:A0:CA:BA:FB:FA:9D:85:A3:3A:0A:47:14:AC:C7:8A:A9:0D:35:C7
Authority key identifier: 0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
Certificate issuer: /CN=A91DBF0D/serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Certificate serial: 0919
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
Manifest number: 090B
Signing time: Wed 20 May 2026 20:19:09 +0000
Manifest this update: Wed 20 May 2026 20:19:09 +0000
Manifest next update: Wed 27 May 2026 20:19:09 +0000
Files and hashes: 1: DWjbrWAPi9kLNVuY9LI4-56aV_o.crl (hash: biVfjIRiYeRxYrdv8SBqcHWJA/umImOgbwWIeQJ+EeA=)
2: C9350D664F1E11F1B02A3F9FAD833773.roa (hash: fpG48xCdaUdNQMt55dQ4qwrwQHHc3YVMoK9lmGVCSsA=)
3: 9D664600CB1211EAACC0E528C4F9AE02.roa (hash: A/vW/8y1/8Csuv1WZEdk6lJbCOT0BwYWD575nFNCBMU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 20:19:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2329 (0x919)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DBF0D, serialNumber=0D68DBAD600F8BD90B355B98F4B238FB9E9A57FA
Validity
Not Before: May 20 20:19:09 2026 GMT
Not After : May 27 20:19:09 2026 GMT
Subject: CN=6a0e173d-9190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:20:4f:dc:76:b5:be:a6:1e:8c:6c:ab:c8:63:
3a:c4:4f:14:aa:e9:2a:1f:e5:63:d2:f1:d0:fb:98:
09:f7:f8:64:75:39:dc:37:d3:be:28:d5:27:0a:a5:
b6:b5:b2:0f:c0:49:7a:86:a5:1f:4d:95:17:e6:cd:
69:9f:55:0b:1e:63:aa:01:ba:53:23:cf:c8:e2:82:
bb:d2:84:0c:80:9f:2c:7e:52:ae:44:99:ad:ac:2f:
28:04:6e:97:7e:55:0d:e2:c7:d8:e8:16:ae:ae:de:
9c:40:3c:0f:f0:7d:48:c6:f1:3b:23:b8:f6:54:4e:
12:eb:de:54:fe:09:2d:c3:40:49:c6:b2:d2:ad:a9:
1d:52:8c:7e:ef:4f:99:dc:96:4e:9e:09:04:db:7d:
54:da:f3:f8:6b:ec:1a:dc:18:75:19:3d:3f:8f:cc:
1e:12:25:b1:64:87:03:64:72:eb:8b:9e:9d:34:2c:
b5:f1:75:e6:56:f9:87:cb:6e:44:66:c0:d6:27:fa:
63:d3:99:9e:28:e2:87:23:f4:45:18:ea:5f:5a:a2:
e1:5b:93:ce:97:b1:39:c7:a4:18:51:b3:94:c0:4e:
ec:67:ff:cc:aa:37:23:01:12:0c:c9:aa:13:d0:83:
98:bf:39:0a:82:64:c6:b1:e7:6b:f1:d1:18:db:49:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A0:CA:BA:FB:FA:9D:85:A3:3A:0A:47:14:AC:C7:8A:A9:0D:35:C7
X509v3 Authority Key Identifier:
keyid:0D:68:DB:AD:60:0F:8B:D9:0B:35:5B:98:F4:B2:38:FB:9E:9A:57:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWjbrWAPi9kLNVuY9LI4-56aV_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBF0D/57964D4ACB0E11EAA10F331DC4F9AE02/DWjbrWAPi9kLNVuY9LI4-56aV_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:e6:d9:eb:ba:84:13:aa:d0:8c:bf:78:77:0c:03:5b:93:
43:e7:43:60:2f:bf:89:19:79:d7:45:4a:d7:81:1a:fb:fa:1a:
fb:23:ad:fc:36:a9:2f:b0:73:fb:76:2c:2a:d9:bc:da:18:16:
4a:b1:85:39:21:4a:a1:a4:de:b3:aa:dc:71:ab:c2:2c:ae:e7:
6c:18:8a:7b:de:c7:cc:de:5a:2a:6d:6e:a9:ca:2f:44:e7:57:
00:43:95:86:f4:3d:bf:0b:18:e6:d1:9d:d8:63:00:3b:42:9b:
a1:00:46:28:6f:10:e2:fe:2c:ca:22:e8:e3:f1:6a:71:5d:46:
78:86:b3:fd:16:24:cf:12:62:9c:71:82:78:ad:85:c4:c2:af:
a1:73:30:cb:97:a6:71:a4:ad:bd:80:66:5e:a4:5c:eb:f5:fe:
87:f0:44:4a:08:ca:c4:bf:0f:5c:ca:79:38:a7:b6:2f:a0:5e:
84:e8:34:b7:3e:62:71:8d:43:da:1c:03:69:97:87:ea:fe:bb:
a3:34:e3:84:fc:59:d3:a5:c5:7e:b5:d4:1b:cc:eb:b5:42:82:
4b:bf:7d:74:fe:49:cd:0e:48:76:9a:87:23:75:ca:40:1d:1b:
a4:f7:8d:58:0a:70:18:d1:57:2a:cb:ed:ff:88:d6:8f:e5:94:
1e:c6:60:1a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REJGMEQxMTAvBgNVBAUTKDBENjhEQkFENjAwRjhCRDkwQjM1NUI5OEY0QjIzOEZC
OUU5QTU3RkEwHhcNMjYwNTIwMjAxOTA5WhcNMjYwNTI3MjAxOTA5WjAYMRYwFAYD
VQQDEw02YTBlMTczZC05MTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAniBP3Ha1vqYejGyryGM6xE8UqukqH+Vj0vHQ+5gJ9/hkdTncN9O+KNUnCqW2
tbIPwEl6hqUfTZUX5s1pn1ULHmOqAbpTI8/I4oK70oQMgJ8sflKuRJmtrC8oBG6X
flUN4sfY6Baurt6cQDwP8H1IxvE7I7j2VE4S695U/gktw0BJxrLSrakdUox+70+Z
3JZOngkE231U2vP4a+wa3Bh1GT0/j8weEiWxZIcDZHLri56dNCy18XXmVvmHy25E
ZsDWJ/pj05meKOKHI/RFGOpfWqLhW5POl7E5x6QYUbOUwE7sZ//MqjcjARIMyaoT
0IOYvzkKgmTGsedr8dEY20kZ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAigyrr7
+p2FozoKRxSsx4qpDTXHMB8GA1UdIwQYMBaAFA1o261gD4vZCzVbmPSyOPuemlf6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkYwRC81Nzk2NEQ0QUNC
MEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5a0xOVnVZOUxJNC01NmFW
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RXamJyV0FQaTlrTE5WdVk5TEk0LTU2YVZfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QkYwRC81Nzk2NEQ0QUNCMEUxMUVBQTEwRjMzMURDNEY5QUUwMi9EV2picldBUGk5
a0xOVnVZOUxJNC01NmFWX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACo3m2eu6hBOq0Iy/eHcMA1uTQ+dDYC+/iRl510VK14Ea+/oa+yOt/DapL7Bz
+3YsKtm82hgWSrGFOSFKoaTes6rccavCLK7nbBiKe97HzN5aKm1uqcovROdXAEOV
hvQ9vwsY5tGd2GMAO0KboQBGKG8Q4v4syiLo4/FqcV1GeIaz/RYkzxJinHGCeK2F
xMKvoXMwy5emcaStvYBmXqRc6/X+h/BESgjKxL8PXMp5OKe2L6BehOg0tz5icY1D
2hwDaZeH6v67ozTjhPxZ06XFfrXUG8zrtUKCS799dP5JzQ5IdpqHI3XKQB0bpPeN
WApwGNFXKsvt/4jWj+WUHsZgGg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:21:25 2026 by rpki-client