
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier: d1z5y0bxSTagkfzNDl1tAnV+EzE8mMSldxadwg+/VKs=
Subject key identifier: 5B:40:A6:E8:8D:D4:7C:16:ED:65:82:8C:7F:DC:FE:BE:C5:42:59:50
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial: 0153
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number: 014F
Signing time: Thu 23 Jul 2026 05:12:40 +0000
Manifest this update: Thu 23 Jul 2026 05:12:39 +0000
Manifest next update: Thu 30 Jul 2026 05:12:39 +0000
Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: +zpoCI6Nsi1bxsLvzudjUGeTtfDhPIwNLDMMyAsj8io=)
2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: 845Y2aA2itdhNFcJh2u6MWKd/R973iis1jKrvrdf6+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:12:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 339 (0x153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Validity
Not Before: Jul 23 05:12:39 2026 GMT
Not After : Jul 30 05:12:39 2026 GMT
Subject: CN=6a61a2c8-18b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c8:e6:29:20:18:70:03:4f:d3:2a:57:96:2c:
a8:c6:60:2d:9a:91:49:80:3f:11:5d:18:14:2c:46:
c2:b4:da:35:54:7b:71:26:f7:66:3c:7c:42:72:56:
a7:16:85:01:d9:87:62:0d:e6:d1:dc:77:f7:eb:9a:
44:6c:5e:e0:f7:05:71:38:a6:1b:95:77:9b:9d:71:
99:42:1f:a0:36:b9:74:ef:64:32:e6:e4:3e:db:f9:
78:51:04:7d:1d:38:ce:a9:f4:f7:4d:26:1f:c4:31:
5f:dc:4a:c5:83:f8:57:7a:dc:49:06:f5:6f:94:15:
71:0a:9d:5c:f8:ea:96:dd:cb:f2:33:1c:e0:f1:cd:
48:31:da:79:d9:af:0c:de:04:a9:de:b5:39:52:be:
96:19:20:dd:e3:69:2b:89:cc:3b:b3:79:c2:d5:ee:
d9:a0:8f:7c:c6:08:c1:37:7b:9f:09:88:86:5d:df:
a7:a0:8a:8f:c6:a4:8a:33:9f:fc:12:be:a2:20:8c:
62:6b:09:b0:d6:5b:6b:ad:c4:6a:9c:1c:06:78:7c:
00:76:2a:8f:1c:b9:8d:49:2b:05:83:b6:00:3d:d4:
79:21:17:1a:41:53:63:8f:0c:d5:f1:88:f9:84:1e:
c6:86:c0:1f:bc:d0:30:72:42:ad:57:5d:cf:fd:20:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:40:A6:E8:8D:D4:7C:16:ED:65:82:8C:7F:DC:FE:BE:C5:42:59:50
X509v3 Authority Key Identifier:
keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:46:ff:ab:af:6d:9a:f8:57:b4:a1:6c:18:50:8f:aa:f0:ab:
e0:7b:26:ec:02:ca:ef:5f:e5:56:18:93:f9:6c:b0:da:01:7d:
0e:42:57:35:6e:5e:65:16:2a:5e:33:57:10:c4:fe:9e:01:9b:
c1:af:fd:91:f4:57:74:fb:12:80:c3:2b:30:0a:29:bb:99:15:
24:c9:21:40:0c:41:2b:0d:dc:2a:aa:95:76:d5:e6:fa:0a:4e:
b3:d0:94:53:25:df:b2:a8:3a:ac:63:7e:91:f7:53:bb:3b:a6:
b9:49:7f:64:d3:d8:fd:4c:6f:31:11:44:af:f8:5e:55:d3:dc:
2e:9e:2b:33:68:24:67:e6:8a:2a:2e:4a:7e:12:0c:c8:d6:1f:
61:da:5c:13:2b:51:32:c1:51:cf:1f:ad:b1:c4:f7:30:6d:9e:
26:11:be:82:fd:d2:34:87:53:18:e5:43:e4:ce:49:ef:34:09:
3c:90:8b:80:a9:f7:95:08:20:49:bf:d6:b3:8a:99:76:2a:f8:
e4:c9:bb:df:d3:92:16:5d:74:2a:86:9b:a2:1b:40:bb:a7:fe:
f7:33:0e:d0:04:04:c9:0f:04:d8:e9:af:86:cd:e6:f5:78:7f:
77:3c:cc:06:2c:1b:79:a0:af:d0:09:be:84:a2:6e:ed:e7:0d:
67:b5:87:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:56 2026 by rpki-client