
$ rpki-client -vvf rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
File: dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft (raw, json)
Hash identifier: U6GBUtJELJ8B3FtV/Budl+IOFob206gjF6UVwdQ0myE=
Subject key identifier: B2:18:96:A7:63:89:F2:E2:E0:C9:03:2E:EC:18:E8:8E:71:89:4B:33
Authority key identifier: 77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
Certificate issuer: /CN=A91557BA/serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Certificate serial: 0D0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
Manifest number: 0D00
Signing time: Tue 12 May 2026 18:14:42 +0000
Manifest this update: Tue 12 May 2026 18:14:41 +0000
Manifest next update: Tue 19 May 2026 18:14:41 +0000
Files and hashes: 1: dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl (hash: EKeknULFTLwnjnbd4toXphs3BwHXy/b0uhh/xo0a5M4=)
2: D68289BE984B11ECB04DAB38C4F9AE02.roa (hash: 2fSA/Xuks+HjnmqBwbLjNPpAQRgRqBJVlHexUjGLyjE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3341 (0xd0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91557BA, serialNumber=7706D088E921DE8B01EBBA06201D04150E864D04
Validity
Not Before: May 12 18:14:41 2026 GMT
Not After : May 19 18:14:41 2026 GMT
Subject: CN=6a036e12-73b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:e8:4b:c7:c1:5f:fb:d5:5c:ab:99:de:98:
51:d2:78:d7:40:54:f1:b9:2c:b0:0b:d4:22:30:95:
b8:97:d0:4a:77:28:25:6f:03:75:99:85:9f:84:2a:
31:79:29:e9:05:19:72:dd:04:6e:74:c7:09:11:e3:
b8:33:e4:f1:c0:33:eb:92:00:0b:51:d2:3b:40:4f:
14:0e:89:d0:24:5f:69:49:0a:39:0e:50:c1:1f:09:
d1:51:3e:57:35:9d:db:96:d0:cd:11:78:64:ea:5d:
97:e1:88:9e:48:78:7a:fe:50:ce:40:63:16:f5:8d:
76:2b:59:bc:dd:89:c8:76:71:15:0e:03:94:45:e1:
d2:73:14:9b:af:91:0a:dd:81:d2:d4:b6:af:0e:a1:
23:d1:bf:8c:71:85:7e:6d:35:d1:db:44:9f:4a:21:
30:31:e6:87:7c:36:95:1a:09:ff:66:94:5f:00:7b:
3c:37:a8:77:8b:6f:8a:50:8a:9e:4e:c3:5e:19:90:
2a:4f:29:53:cb:b2:a4:01:4b:81:39:a3:5a:65:e9:
30:03:c0:e9:36:f4:df:45:50:2a:9a:aa:53:ec:76:
e7:60:77:bb:4b:c8:b9:fb:7f:84:00:57:6b:99:b1:
ff:e8:81:56:dc:b2:ab:8a:03:51:92:c0:42:20:d3:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:18:96:A7:63:89:F2:E2:E0:C9:03:2E:EC:18:E8:8E:71:89:4B:33
X509v3 Authority Key Identifier:
keyid:77:06:D0:88:E9:21:DE:8B:01:EB:BA:06:20:1D:04:15:0E:86:4D:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwbQiOkh3osB67oGIB0EFQ6GTQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6E74951004EB11EAA72FA363C4F9AE02/dwbQiOkh3osB67oGIB0EFQ6GTQQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:93:47:ec:3b:3c:a5:cd:df:b3:fd:98:88:0e:5d:8d:98:
53:6e:55:7a:db:2a:4e:51:c5:ba:76:bc:91:94:d0:9b:e7:46:
c3:b0:74:e1:d0:21:04:d4:b9:4a:f8:a4:82:f0:71:77:40:61:
9c:25:93:28:7d:e6:a5:16:dd:f2:71:ab:ec:d0:4c:c6:74:cc:
a2:0b:09:2f:1e:fe:70:13:4e:5d:35:4a:3e:ff:40:b4:67:ed:
cd:e7:cd:7b:61:ba:74:1b:0e:0f:09:82:a0:d8:1e:80:83:18:
52:1c:c1:9f:36:a7:15:86:db:55:a9:81:99:ed:ba:73:b4:c5:
0d:d4:86:54:e4:19:e8:13:04:2e:23:bb:1a:f1:3f:b9:ed:92:
7c:7d:98:0e:cf:82:3c:8b:1c:31:50:d5:1a:84:14:95:1d:71:
a5:22:6f:5f:1f:e4:86:f1:c3:5d:29:f0:78:3d:02:3c:32:a3:
9f:46:89:4a:78:1c:d2:20:30:c7:53:05:f5:99:b3:a6:51:97:
ac:8d:be:ef:cf:93:4a:01:0b:04:d1:39:b7:ac:b8:39:5a:98:
f4:cb:58:59:b8:c7:a6:99:76:13:3e:9d:88:01:0e:c3:f9:96:
b0:1b:a3:24:4f:54:06:00:40:4c:9a:fd:f4:56:54:b5:c5:ea:
c5:5d:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:15:20 2026 by rpki-client