
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier: ZnONBVAELiOzUxCfDhRLT6v1CidmPqmP6MGzyr94bZk=
Subject key identifier: 4D:F1:6F:6E:4E:D7:EB:26:0A:8E:8B:6D:5D:69:8A:7A:67:65:CB:86
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial: 35F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number: 35C2
Signing time: Thu 24 Sep 2026 14:17:46 +0000
Manifest this update: Thu 24 Sep 2026 14:17:45 +0000
Manifest next update: Thu 01 Oct 2026 14:17:45 +0000
Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: 8yllKBK6fcsiHcy543oc1Snp4VI4ppCOuQPlBcqi/kE=)
2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 14:17:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13816 (0x35f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Validity
Not Before: Sep 24 14:17:45 2026 GMT
Not After : Oct 1 14:17:45 2026 GMT
Subject: CN=6ab53109-a9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:c6:29:a3:99:1e:e5:06:f0:3e:9e:77:47:
03:fa:76:e2:e2:bb:8b:59:21:df:78:e7:00:68:f1:
e6:2b:bb:57:97:cf:79:71:15:bb:7b:48:61:79:d8:
89:d3:9a:78:f6:91:db:9a:86:b0:0a:bf:fd:99:a9:
a7:a5:20:7a:85:06:61:fc:a9:cc:6d:ca:89:28:a0:
d5:00:4f:62:69:7f:b7:33:81:71:1f:1b:5e:67:c7:
ef:08:16:b2:76:36:13:65:cd:28:d8:36:4a:fd:43:
9f:61:3e:ac:06:b5:23:5c:83:96:60:73:58:26:ae:
0a:b0:d5:a3:86:38:81:e3:c1:d0:bd:28:2c:af:95:
fc:19:1f:06:0c:06:c6:69:c0:3d:e4:d9:bf:af:18:
ba:9c:dd:d3:24:2b:70:ec:4b:a7:1b:62:ab:11:1a:
1f:d3:46:19:b9:87:cd:1a:92:b9:bf:ca:9e:b1:c7:
3a:eb:cf:58:9e:82:20:0c:13:94:67:b5:be:a8:1a:
fa:1d:6e:d3:57:2e:70:9c:18:36:fc:55:97:b9:bc:
ac:6c:56:67:e6:67:37:ef:e5:2a:0d:07:a0:3a:33:
91:b0:a5:95:48:89:ee:39:e3:e4:81:0d:2a:06:52:
b1:8a:1e:6e:ec:d7:86:b0:aa:90:76:f7:66:31:45:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:6F:6E:4E:D7:EB:26:0A:8E:8B:6D:5D:69:8A:7A:67:65:CB:86
X509v3 Authority Key Identifier:
keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ac:a7:04:ca:c1:bd:0d:47:16:c0:e6:ed:9c:0e:58:f2:dc:
b9:a6:3d:11:f3:36:ea:bb:5e:c7:d8:24:3f:f8:b9:79:20:7c:
73:46:4a:e9:24:70:25:4d:30:08:53:3a:1e:fa:a9:2a:0d:ba:
59:b6:34:75:d0:30:67:60:2e:1e:f0:a9:ab:32:ae:53:a0:85:
3a:dd:48:ba:2e:4a:8e:6c:6c:54:89:fc:15:19:ce:f6:5c:32:
21:18:ef:ca:d9:f5:4c:ab:73:77:d0:67:aa:de:e1:9f:ab:5c:
b9:90:17:ac:2c:08:07:ee:f2:c8:fa:9e:e9:88:64:a5:58:4c:
41:6a:6b:a0:ed:64:c2:5c:53:45:da:cf:05:cc:44:0e:f9:8f:
8f:f3:92:dd:6e:43:17:cf:65:f2:1c:12:08:c6:9e:b5:46:24:
22:1b:f3:b9:69:78:3b:c7:dc:46:76:32:cf:e9:3e:ff:a8:ce:
b0:ae:11:7f:21:52:34:19:cf:9e:ad:15:8f:d1:67:99:a1:67:
2f:41:0f:bd:35:fd:42:8a:b9:6f:0d:56:3e:12:d9:b3:36:90:
7a:5a:bb:40:50:47:7a:18:85:ec:0d:25:61:f3:1b:47:d0:a6:
7e:14:8d:b9:64:8c:57:ae:1d:d1:68:94:cf:7a:9e:47:b9:77:
3e:eb:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:53:46 2026 by rpki-client