
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json)
Hash identifier: 1OAcY3KnFxLTPqR3TL11P1fFxS6itND4y7vuNnMGSVc=
Subject key identifier: DB:D7:F2:62:28:DB:DD:53:D2:41:DB:B7:32:34:38:3C:0B:77:1E:9A
Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
Manifest number: 020C
Signing time: Mon 05 Oct 2026 03:23:42 +0000
Manifest this update: Mon 05 Oct 2026 03:23:42 +0000
Manifest next update: Mon 12 Oct 2026 03:23:42 +0000
Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: +ZaC9Lr9DtYfZHc5VFY3kpd2U5W0dwUmwjYaxsYTD5k=)
2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: xqa2jysdV84afATRjwbUStpDN/sz26H1yiVkTr6zHrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 03:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Validity
Not Before: Oct 5 03:23:42 2026 GMT
Not After : Oct 12 03:23:42 2026 GMT
Subject: CN=6ac3183e-226b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:39:72:7a:df:06:8a:cd:40:8f:24:cd:db:56:
1a:34:2b:40:a0:62:35:80:c5:57:a3:b0:98:13:b0:
21:37:25:bc:68:c6:02:39:7e:2c:29:bd:98:83:ba:
81:58:81:ef:13:57:2b:d8:27:d4:4f:bc:f0:2a:33:
91:f3:eb:14:1c:10:ee:db:a1:e9:8f:96:d0:de:51:
e4:98:70:a4:ad:59:99:fb:2d:09:78:cc:f2:36:c7:
ab:ce:b7:6c:f2:4f:08:1d:38:24:b7:65:aa:58:bd:
0a:14:97:ab:99:2f:2d:86:23:69:8f:4e:1e:c9:58:
e0:e8:39:ad:29:d8:26:04:18:0c:4a:b5:6f:b5:8d:
34:93:5b:e7:1d:8d:58:01:b5:e9:62:10:c3:13:4f:
0b:ac:39:ca:1d:5a:70:bb:66:ba:5e:54:9f:4b:69:
5d:fd:75:a4:a9:c6:2e:e6:65:c1:81:49:9e:99:ac:
2e:f7:07:bb:83:fa:f5:99:bf:3f:0c:e0:ad:6e:c4:
46:2c:70:fc:c6:84:7f:92:b6:df:b6:32:ac:4b:4a:
a3:8d:6f:c8:3d:49:9e:78:31:55:37:a0:8b:9b:75:
1d:60:67:1f:91:9d:31:cb:ca:f7:a9:e8:c0:fb:ab:
fc:92:f8:bd:60:1b:2f:b2:f1:8d:86:53:29:6d:83:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D7:F2:62:28:DB:DD:53:D2:41:DB:B7:32:34:38:3C:0B:77:1E:9A
X509v3 Authority Key Identifier:
keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:a9:58:ad:d8:90:bc:f1:73:5f:b0:79:aa:53:a0:ab:6c:70:
f1:aa:52:8e:d5:cd:10:85:d7:21:63:d9:b5:4f:0b:3c:1a:96:
42:f3:91:2b:29:80:07:f2:f1:22:ca:19:74:1c:c4:fe:6d:9a:
7c:45:ab:6e:9f:c7:ff:3c:f6:2a:d6:d9:c9:e6:8e:d3:e4:bf:
39:3b:38:35:97:c0:34:ba:66:1f:5f:d3:13:6e:64:e7:b7:45:
5d:6a:e0:d3:bb:63:7d:eb:a1:d8:cf:bb:c3:db:78:a3:a1:41:
c2:3c:92:8c:26:e8:6c:48:47:b2:0d:8e:27:e1:4f:49:9f:51:
5a:c8:9d:67:7a:00:eb:2d:b5:a9:0e:ba:3e:f5:1e:b7:03:e8:
2d:c6:ea:d4:1f:a2:ef:a1:12:34:0c:f7:42:0f:24:12:3c:e6:
dc:29:28:e9:65:99:28:9a:ab:b5:ea:63:1f:58:8e:32:0c:d4:
f0:6d:4f:4a:0c:1f:37:12:c6:83:0e:f2:3d:1d:48:fd:7b:42:
8c:1a:d3:0f:f0:48:38:44:b7:3e:b0:06:5d:2b:c3:a2:61:e8:
39:cf:60:c7:40:23:0e:82:94:aa:58:9c:68:46:75:f9:d8:5a:
cb:37:d5:e4:8c:2a:a2:a7:f8:1b:d7:10:12:38:9e:3e:e2:90:
5b:ee:c3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:48:39 2026 by rpki-client