
$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier: tSCZelkhWoUe/J2bBwfHZwCr39KpY8Vdx0L6E9L6wmY=
Subject key identifier: 3C:C1:13:3A:8F:9B:3D:F9:9B:B8:DE:21:D2:DB:24:BB:DB:C2:7A:B1
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial: 359A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number: 3564
Signing time: Tue 24 Mar 2026 14:17:36 +0000
Manifest this update: Tue 24 Mar 2026 14:17:35 +0000
Manifest next update: Tue 31 Mar 2026 14:17:35 +0000
Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: IWwmgRDeuaHAt1ubCBdGv66DiWepGtOPdrANz1bnxgs=)
2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 14:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Validity
Not Before: Mar 24 14:17:35 2026 GMT
Not After : Mar 31 14:17:35 2026 GMT
Subject: CN=69c29d00-bab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:0c:44:da:8d:1c:0e:86:94:d5:6e:18:55:
27:f2:b3:dd:b8:76:c5:5f:53:db:48:97:e0:80:68:
98:76:4e:e0:cf:da:41:25:ce:8a:87:f3:38:d3:37:
f1:c8:86:01:f1:d5:77:22:7a:3b:f8:f0:64:f8:27:
9c:8e:09:ac:64:d5:88:96:08:ca:2e:56:f1:d1:6d:
e5:47:ff:69:2e:00:b1:e7:96:87:a4:6a:ab:ae:b0:
f4:24:29:d3:bf:27:a6:97:66:07:8b:66:f8:b8:4b:
c1:f0:56:ff:b9:de:61:24:fd:ee:b8:6e:a5:c2:a3:
82:fb:67:da:8c:08:ae:92:73:01:0b:e8:ce:2e:8f:
e8:79:aa:64:42:cb:ae:af:9c:d6:a4:a3:f2:20:f1:
55:98:57:30:e6:06:09:84:36:10:07:29:73:9e:0c:
4d:72:9b:50:a0:6a:63:9d:6b:fc:0e:5b:80:a2:85:
8e:63:ae:a4:0d:dc:88:68:f4:bf:9a:6b:58:27:91:
6d:59:46:41:93:e3:02:6b:d8:b7:14:d7:e4:c2:42:
9e:97:a0:bc:74:a2:53:7d:5c:9f:d5:7c:b1:4b:3a:
09:3e:8c:28:cd:65:a9:ef:4c:87:0b:be:e1:89:7c:
f1:21:8d:a0:7a:db:db:4d:bf:80:59:ae:fd:53:ed:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C1:13:3A:8F:9B:3D:F9:9B:B8:DE:21:D2:DB:24:BB:DB:C2:7A:B1
X509v3 Authority Key Identifier:
keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6d:54:cf:da:a6:fc:d0:3d:5f:9b:a7:09:e8:79:e9:49:aa:
44:5b:10:1c:cb:22:76:47:18:23:a8:39:f2:ef:e9:13:a7:ce:
a1:5c:69:2a:83:f2:41:88:4a:01:a5:4c:91:6f:f8:e3:1b:37:
c4:26:df:8a:e1:24:6d:77:a7:1a:fa:ee:da:27:bd:17:8c:9f:
65:02:a2:67:66:92:cd:03:0a:4d:5c:35:5f:6f:5d:8c:a2:b9:
84:34:86:af:89:07:8d:01:34:fb:4e:3c:3c:36:f4:8f:b0:4b:
28:3b:bf:c3:ac:30:df:28:f2:df:cf:21:42:b2:80:23:b5:8d:
d9:28:6b:f8:62:57:61:ac:de:4a:2e:e2:1e:1c:2f:9d:be:61:
58:f5:0f:4c:58:d6:cb:dd:05:f3:6c:4e:35:24:c4:59:24:e6:
e7:32:c0:6d:36:fc:a9:f9:3c:dc:d6:3e:45:6f:5c:93:28:b5:
ec:bb:c0:ef:ee:c5:c4:0c:3b:15:e6:d3:dd:04:31:8e:71:d3:
81:95:de:46:fc:ba:fc:18:42:2e:d8:56:ce:fa:26:e1:3f:8d:
c3:7c:88:de:eb:7d:73:19:cf:3c:66:44:d6:de:05:dd:38:18:
a2:49:fd:e8:03:32:f6:6f:0c:4f:99:dc:8c:2b:c5:2f:e8:b3:
af:d6:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:45 2026 by rpki-client