
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
File: DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft (raw, json)
Hash identifier: wr0aXSuoYnou5pm4hXpbLdbEY8IBxi1U+3jnvYNrPNU=
Subject key identifier: E8:29:18:9A:9C:4B:93:32:71:D7:D0:B3:01:09:BB:49:E6:50:4B:6E
Authority key identifier: 0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
Certificate issuer: /CN=A917D114/serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
Manifest number: 6C
Signing time: Wed 25 Mar 2026 07:07:07 +0000
Manifest this update: Wed 25 Mar 2026 07:07:07 +0000
Manifest next update: Wed 01 Apr 2026 07:07:07 +0000
Files and hashes: 1: DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl (hash: gRkIfScu7mUIJcIG5cDb6CupuX+m2BPu6NnWqL26NvU=)
2: 77248CD0889111F0810C3E1FC4F9AE02.roa (hash: C+v8DxSw3+udVzZSqwvQqRGQ9Pr2cv6HbsmEoxT6o4g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 07:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D114, serialNumber=0D8C1F110BDB33D053B656BBA0073B930C64F314
Validity
Not Before: Mar 25 07:07:07 2026 GMT
Not After : Apr 1 07:07:07 2026 GMT
Subject: CN=69c3899b-6f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:e4:ec:23:42:ad:6e:bd:61:b3:c7:05:e4:
3b:c1:93:5d:6d:f6:ce:70:b7:e8:9f:47:c9:1c:10:
d5:dc:bb:05:70:d9:f3:ed:96:9e:ff:90:94:23:e5:
05:7c:49:61:46:5a:4d:ba:92:65:75:de:19:1c:57:
fe:70:1e:85:ed:9e:2c:dc:db:76:95:ce:a5:15:66:
5b:26:a7:d2:f8:e6:c1:ec:e5:97:aa:7b:3e:40:af:
80:23:df:92:04:3e:68:65:30:23:46:28:77:2e:0e:
55:52:24:93:00:5a:a3:76:f3:0d:1f:57:9e:c2:87:
f0:0a:ba:5c:ea:6b:34:b9:f2:73:49:a6:a1:2f:1b:
bc:7d:1e:8a:d4:05:9a:3c:5d:fc:94:cc:92:12:10:
2a:26:7e:6c:62:3e:e4:8a:fd:55:cb:c7:4c:4b:b0:
bc:71:81:6e:95:57:95:1c:74:07:b5:71:97:b9:c4:
76:28:b7:57:b0:1d:fd:c8:f5:02:cf:e6:3d:cc:a2:
e6:5a:7c:3e:94:cb:e8:e4:08:e5:9c:1d:93:5b:38:
47:ab:cc:4c:ad:9b:bc:79:d8:4f:64:fe:17:45:9f:
78:da:1c:de:ee:cd:11:82:f0:ea:2d:d5:2e:1a:10:
71:1e:1c:67:d2:cf:3d:0c:3d:b1:6d:53:b7:d4:d7:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:29:18:9A:9C:4B:93:32:71:D7:D0:B3:01:09:BB:49:E6:50:4B:6E
X509v3 Authority Key Identifier:
keyid:0D:8C:1F:11:0B:DB:33:D0:53:B6:56:BB:A0:07:3B:93:0C:64:F3:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYwfEQvbM9BTtla7oAc7kwxk8xQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D114/79D430BC889011F0893A4D1CC4F9AE02/DYwfEQvbM9BTtla7oAc7kwxk8xQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:58:32:28:17:27:fe:05:d7:a4:26:9b:51:87:43:3e:e2:
e4:6e:e6:9e:88:6f:63:92:45:06:74:ad:fb:3f:71:37:3d:98:
6f:d0:99:06:ec:15:4c:78:14:03:36:79:92:cb:de:64:65:d9:
33:71:98:26:0a:80:6f:11:66:2a:60:d4:b0:5d:62:b3:c4:a5:
97:5c:5e:83:51:1e:08:dc:9c:f3:22:bd:48:74:35:9b:a1:41:
a9:3e:f4:da:32:e2:fc:40:fc:7a:fa:c0:95:f6:a9:51:de:df:
2c:36:aa:84:af:c9:a7:96:be:71:43:80:3a:d0:1a:5d:04:9e:
fe:ef:72:77:51:d6:94:c4:9b:db:fa:5f:75:40:6a:2f:1e:aa:
82:3f:70:f3:c6:1a:50:c7:99:e8:71:fe:e3:d7:70:ba:f7:58:
af:03:63:1f:f9:2d:70:ac:d6:c7:64:30:cf:e2:64:5a:39:eb:
76:72:8a:5d:c5:75:1d:f5:83:29:39:9b:bc:15:01:4b:a8:25:
31:98:20:d7:1c:49:77:8d:54:da:33:4d:5c:a0:7a:34:22:31:
a6:b4:b6:7f:70:62:59:63:00:b2:6b:71:8d:d3:90:f3:53:76:
95:5c:f3:71:f6:d8:5a:32:39:98:e3:c5:33:a5:c4:21:10:6b:
9d:6b:aa:63
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RDExNDExMC8GA1UEBRMoMEQ4QzFGMTEwQkRCMzNEMDUzQjY1NkJCQTAwNzNCOTMw
QzY0RjMxNDAeFw0yNjAzMjUwNzA3MDdaFw0yNjA0MDEwNzA3MDdaMBgxFjAUBgNV
BAMTDTY5YzM4OTliLTZmNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQChguTsI0Ktbr1hs8cF5DvBk11t9s5wt+ifR8kcENXcuwVw2fPtlp7/kJQj5QV8
SWFGWk26kmV13hkcV/5wHoXtnizc23aVzqUVZlsmp9L45sHs5Zeqez5Ar4Aj35IE
PmhlMCNGKHcuDlVSJJMAWqN28w0fV57Ch/AKulzqazS58nNJpqEvG7x9HorUBZo8
XfyUzJISEComfmxiPuSK/VXLx0xLsLxxgW6VV5UcdAe1cZe5xHYot1ewHf3I9QLP
5j3MouZafD6Uy+jkCOWcHZNbOEerzEytm7x52E9k/hdFn3jaHN7uzRGC8Oot1S4a
EHEeHGfSzz0MPbFtU7fU15T5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6CkYmpxL
kzJx19CzAQm7SeZQS24wHwYDVR0jBBgwFoAUDYwfEQvbM9BTtla7oAc7kwxk8xQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMTE0Lzc5RDQzMEJDODg5
MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlCVHRsYTdvQWM3a3d4azh4
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRFl3ZkVRdmJNOUJUdGxhN29BYzdrd3hrOHhRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE
MTE0Lzc5RDQzMEJDODg5MDExRjA4OTNBNEQxQ0M0RjlBRTAyL0RZd2ZFUXZiTTlC
VHRsYTdvQWM3a3d4azh4US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAirVgyKBcn/gXXpCabUYdDPuLkbuaeiG9jkkUGdK37P3E3PZhv0JkG7BVMeBQD
NnmSy95kZdkzcZgmCoBvEWYqYNSwXWKzxKWXXF6DUR4I3JzzIr1IdDWboUGpPvTa
MuL8QPx6+sCV9qlR3t8sNqqEr8mnlr5xQ4A60BpdBJ7+73J3UdaUxJvb+l91QGov
HqqCP3DzxhpQx5nocf7j13C691ivA2Mf+S1wrNbHZDDP4mRaOet2copdxXUd9YMp
OZu8FQFLqCUxmCDXHEl3jVTaM01coHo0IjGmtLZ/cGJZYwCya3GN05DzU3aVXPNx
9thaMjmY48UzpcQhEGuda6pj
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:05 2026 by rpki-client