
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json)
Hash identifier: cWNVxNUGiN8ClZOQh8c35gtuwiaWgMcsHJ/gcXtpzIo=
Subject key identifier: C1:AA:35:80:4B:16:EF:6A:1E:BA:5E:D5:CD:83:D6:19:62:3B:B3:19
Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Certificate serial: 01B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
Manifest number: 01AA
Signing time: Wed 25 Mar 2026 03:23:44 +0000
Manifest this update: Wed 25 Mar 2026 03:23:44 +0000
Manifest next update: Wed 01 Apr 2026 03:23:44 +0000
Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: ASAtCvoaZvVsKnT0ppL/qxRyuqOH5YLf2dUlCOTFVI4=)
2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: xqa2jysdV84afATRjwbUStpDN/sz26H1yiVkTr6zHrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 03:23:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432 (0x1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Validity
Not Before: Mar 25 03:23:44 2026 GMT
Not After : Apr 1 03:23:44 2026 GMT
Subject: CN=69c35540-910e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:c3:6f:9f:8a:e1:66:12:05:0f:a9:9c:ce:
a0:0b:91:59:63:dd:c8:ca:bb:93:2a:9a:51:d4:ef:
fe:c8:d6:24:cb:ea:ba:c7:b3:e2:60:0f:87:1c:51:
ef:2c:a5:86:f6:bb:20:d7:e0:68:4b:e4:aa:29:9b:
a7:60:74:df:c0:9c:15:56:7b:29:56:5e:69:44:92:
da:3c:6c:0d:b5:47:be:c2:27:15:9b:81:88:98:70:
e3:0d:18:ec:f8:f7:1a:5b:71:ff:43:59:59:1b:fb:
86:75:82:af:c2:5c:3d:aa:0f:b7:fb:aa:6b:5e:65:
81:52:77:3a:b2:7e:4c:ab:59:39:b7:f0:b7:ac:ee:
e7:1e:f1:79:48:a2:8b:80:39:02:79:b4:b4:c9:57:
7d:a9:ca:0e:b0:df:8d:07:c7:0e:5c:16:29:fd:5d:
11:0b:cf:24:0c:50:4b:ae:17:18:ff:14:68:bb:c2:
c2:3a:fa:e7:55:ed:cf:bd:26:9c:2c:f0:5b:a5:e9:
c8:cc:c6:46:29:46:f5:8b:c2:95:76:bf:85:ab:13:
25:ff:1b:c6:60:a7:ff:ff:11:96:0d:b5:9d:b6:1b:
5b:66:ce:12:cb:a6:09:95:aa:48:5b:f0:fb:a7:4c:
54:5a:72:31:22:91:78:63:11:6a:4f:6f:27:6f:16:
a6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AA:35:80:4B:16:EF:6A:1E:BA:5E:D5:CD:83:D6:19:62:3B:B3:19
X509v3 Authority Key Identifier:
keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:8c:35:ca:f3:23:e6:f3:3f:79:f4:8b:7e:e1:8c:2d:37:4d:
dd:78:96:6a:c8:29:d8:bc:93:d0:6b:88:9c:43:3d:69:36:d4:
03:aa:fc:e4:42:e9:ce:11:e4:21:cb:51:4a:1d:dc:df:5f:60:
eb:c7:d6:31:d5:cd:95:71:ef:0e:a6:5d:18:39:1e:e9:11:15:
f0:37:88:ef:59:fe:29:4f:d5:8c:d0:5d:3d:db:60:37:c4:47:
1c:9d:e8:86:4e:4d:3c:39:d7:37:9b:15:5e:d9:1d:de:6d:ac:
c0:4c:73:73:92:7f:66:46:af:d7:09:4e:0d:5e:ff:0a:e1:dd:
80:94:ee:20:8d:fd:3c:e7:8a:dc:91:e1:b4:33:5e:6b:59:64:
f4:f9:34:48:b4:80:ed:de:22:a4:fa:39:7c:53:8f:37:f5:eb:
cc:c4:f2:06:94:64:2d:76:7c:11:30:ae:dc:40:be:02:2f:25:
3b:6e:8f:d3:00:ff:fa:df:0c:8f:3a:f7:c8:c4:2d:fb:7b:75:
d8:06:fd:87:f6:d6:7f:4a:68:f7:93:71:c4:89:b5:f3:08:21:
89:1e:e5:f0:83:80:95:0e:91:23:c1:70:34:09:fd:74:54:f4:
cb:3b:32:36:6c:ab:7d:e6:76:1c:66:be:32:57:8e:41:8f:16:
d5:f2:4e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:51:01 2026 by rpki-client