
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
File: dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft (raw, json)
Hash identifier: eYKOLbpPgopVHQHjhVxRdSNrKzQT9H0O58T8qd/sQUs=
Subject key identifier: 5F:47:66:80:E0:21:9B:75:5C:E5:5E:D0:86:6E:B9:7A:B7:FE:03:0B
Authority key identifier: 74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
Certificate issuer: /CN=A9178424/serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Certificate serial: 01AC
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
Manifest number: 01A5
Signing time: Wed 23 Sep 2026 04:01:24 +0000
Manifest this update: Wed 23 Sep 2026 04:01:23 +0000
Manifest next update: Wed 30 Sep 2026 04:01:23 +0000
Files and hashes: 1: dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl (hash: Z0KSAJYa0yxTbu3Nfw7ed0wdxxn2O+ic3L8ZZtoma6o=)
2: D672BC9638E411EF8BF0C15EC4F9AE02.roa (hash: 2Pw8KaLRV6aBD082BqEQ7VHZ0JNyhO7oJeP00MvVoik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 428 (0x1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178424, serialNumber=74A11669C43E53B0F21D4B413F92D9EA91315503
Validity
Not Before: Sep 23 04:01:23 2026 GMT
Not After : Sep 30 04:01:23 2026 GMT
Subject: CN=6ab34f14-9ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:b5:46:4c:9c:1c:27:62:27:29:7b:67:d1:
e6:69:da:5a:3f:e1:24:e7:73:28:cd:34:a9:63:cb:
f3:18:57:3c:54:d8:47:e8:8a:d9:1b:7b:8a:aa:b6:
f5:b9:ba:c2:72:63:94:c6:af:2f:2e:86:43:88:18:
33:71:de:cf:fb:c9:b9:d9:91:46:22:09:2b:dc:83:
28:67:a7:1e:00:ee:e0:eb:01:0d:f7:f1:67:14:4d:
b1:33:d3:06:ef:b5:d0:cc:ed:b3:70:d7:80:9b:35:
f2:62:d6:22:12:0e:e1:9c:0c:7e:39:32:16:2b:44:
14:36:d1:ba:2d:bb:c5:ec:31:73:03:42:20:d8:3d:
0e:6c:36:97:1e:90:35:5d:82:c0:de:e3:79:be:e8:
26:2c:26:fc:55:e9:dd:8d:30:43:93:23:29:d2:14:
b6:10:95:8c:54:13:ec:5d:73:9d:e6:bd:50:1b:25:
90:aa:cb:20:44:a7:42:77:46:57:77:a1:e9:b4:04:
5a:a3:80:a0:8f:ae:e8:03:b9:1e:0e:0c:4a:58:a8:
ef:92:14:83:aa:6a:df:4d:d9:61:32:83:63:d7:cc:
c5:6d:08:bb:fc:99:b9:28:75:bd:f7:07:9f:bc:c9:
f4:fe:fe:36:67:71:81:0e:cb:b2:42:26:53:a2:9f:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:47:66:80:E0:21:9B:75:5C:E5:5E:D0:86:6E:B9:7A:B7:FE:03:0B
X509v3 Authority Key Identifier:
keyid:74:A1:16:69:C4:3E:53:B0:F2:1D:4B:41:3F:92:D9:EA:91:31:55:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dKEWacQ-U7DyHUtBP5LZ6pExVQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178424/793EA6DA38E311EF914B2F33C4F9AE02/dKEWacQ-U7DyHUtBP5LZ6pExVQM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:94:4f:8a:87:3f:d7:1b:06:d6:22:04:9f:2a:e7:69:9c:ae:
9b:af:ea:b2:bb:8e:b7:6c:53:70:c3:77:d4:46:16:b4:c9:bd:
d7:76:dc:c8:9e:e0:52:8b:c0:77:29:af:00:50:87:53:79:38:
8d:96:34:2d:ef:96:d2:0a:f0:36:bd:bf:34:00:55:2e:5d:66:
77:c7:4a:11:11:fc:bd:9f:ae:13:db:e4:bf:b4:5f:c3:9e:ac:
ff:2c:64:32:d1:e3:97:69:aa:c0:69:9f:a5:56:78:24:a6:11:
66:83:a5:bd:40:da:82:70:80:b2:fb:7d:b4:f6:c4:71:1f:bf:
5a:37:01:13:0f:22:00:cf:11:a0:c0:49:23:55:8a:47:84:38:
57:cb:79:44:8e:58:a4:5a:25:c9:90:3f:16:8b:37:d1:b1:b9:
1d:ee:1b:df:ce:5b:93:dc:8f:5d:f3:9d:ac:87:af:d1:d3:ed:
26:1e:bf:0f:19:8d:d7:69:59:54:02:d3:40:b8:0c:f6:e7:cc:
b1:61:d9:3e:32:3d:27:47:87:a0:10:c9:2f:46:02:9b:7c:70:
5c:91:e3:1c:f4:f5:c9:5d:9d:52:f2:fa:0e:79:bd:2f:d3:09:
55:19:36:62:c9:90:ed:82:9d:97:fb:33:a3:cc:a2:fb:45:66:
73:83:9d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:15:51 2026 by rpki-client