
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json)
Hash identifier: oDpZA7py7fzER7EsyJ30X7ayTZFwe/+DciG7bi5SN9o=
Subject key identifier: 9D:B0:10:F6:E4:24:D6:33:EA:A1:E9:83:22:11:D8:F0:65:05:5D:77
Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Certificate serial: 0BE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
Manifest number: 0BCD
Signing time: Tue 24 Mar 2026 18:47:47 +0000
Manifest this update: Tue 24 Mar 2026 18:47:46 +0000
Manifest next update: Tue 31 Mar 2026 18:47:46 +0000
Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: lgJdbYjGof69K2SABhxxyvRhC1+4+B4wbVqqQ05IIjk=)
2: A77121520E7711F1B88700272A3D8C67.roa (hash: 6f2MZabIV9/41LXq6L3lOj/k/ZzxiNqapWZIuUa5bRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl
rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3042 (0xbe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Validity
Not Before: Mar 24 18:47:46 2026 GMT
Not After : Mar 31 18:47:46 2026 GMT
Subject: CN=69c2dc53-c328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:6f:4f:86:9f:07:7d:ef:79:05:da:76:96:
e0:90:17:05:04:52:b4:95:71:99:82:e4:43:fa:d9:
29:b5:3f:7f:f9:3c:92:0a:91:9c:4a:ce:d8:de:bf:
3e:d7:0d:5e:27:56:44:19:b4:93:46:44:85:83:bc:
c3:f4:a1:a3:db:20:be:95:49:5e:b5:ee:dc:d9:fd:
a1:b9:c8:00:48:87:54:e7:42:c9:31:c6:d3:67:30:
3e:c0:1e:52:dc:0c:fd:bf:2b:c2:e3:57:0b:49:bb:
7e:b0:5e:9e:0f:ff:5f:84:6b:3b:d9:3f:67:3d:4a:
d8:05:b8:ef:06:bd:64:f5:8c:fb:d0:0e:0f:8a:a2:
ec:f8:95:14:0f:d1:74:c5:4b:54:5d:c1:41:0f:16:
99:56:e5:05:99:58:10:e9:73:b2:ac:8d:d7:61:f1:
36:d2:0f:8d:92:3f:8e:4b:d9:aa:78:33:e3:ff:84:
5c:4d:e3:72:c5:9c:0d:e8:cc:60:f7:b3:dc:22:4d:
64:4d:f2:46:a9:77:b5:4a:aa:71:8b:38:96:0d:71:
cf:0d:59:16:83:f1:65:eb:be:2c:fa:5f:b2:6e:70:
f0:87:23:61:da:d7:31:a6:93:d3:29:f0:a6:17:73:
6a:40:be:fb:35:70:3c:6b:77:98:f5:9b:b7:da:2f:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:10:F6:E4:24:D6:33:EA:A1:E9:83:22:11:D8:F0:65:05:5D:77
X509v3 Authority Key Identifier:
keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:83:61:8c:4a:34:20:8d:59:c5:6a:75:e9:54:62:bd:0e:
e3:8c:fa:d2:94:ea:bf:82:a3:31:7b:b1:e3:44:4d:d6:7a:53:
36:e2:d4:1c:0a:7f:85:0c:9d:ff:28:5f:90:de:38:92:d5:18:
c9:22:f2:a3:f5:7d:e5:30:f6:0b:cc:77:db:52:3b:fb:da:ed:
9a:28:5a:f3:51:c8:c8:a8:b0:3f:6e:c9:b2:65:ec:37:07:23:
56:28:53:c7:8d:53:2a:ab:b4:44:de:5c:80:fa:9b:03:28:61:
a2:4d:48:11:44:2c:7f:95:5e:76:59:6e:61:72:c7:2c:c9:d5:
a9:ea:60:96:3a:4b:56:38:24:9d:b0:54:e2:bf:13:be:70:f8:
55:1a:8f:c2:af:d4:28:cd:c3:67:2e:69:1c:ba:54:5c:e9:35:
83:7b:40:2b:c9:c6:6a:61:71:fe:48:18:8f:43:c2:d5:52:69:
35:db:fb:65:2c:e5:b7:a5:55:e4:6c:da:5d:2c:f5:b9:94:c8:
0e:3f:b9:bf:4b:e3:f2:f1:8b:c2:d7:0e:ca:cf:4b:42:36:2e:
fa:c3:fe:5c:3c:5d:33:6c:20:00:08:41:a9:45:de:76:bc:09:
2a:21:99:a2:56:bb:27:90:12:bd:c0:eb:c9:15:8a:37:0d:3b:
93:0b:94:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQwRTYxMTAvBgNVBAUTKDc1MDVBODZCNUY0RkFBNTA1NDNEMjQ4QzZGMDg1NEM1
MDVBRURDMEYwHhcNMjYwMzI0MTg0NzQ2WhcNMjYwMzMxMTg0NzQ2WjAYMRYwFAYD
VQQDEw02OWMyZGM1My1jMzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2FvT4afB33veQXadpbgkBcFBFK0lXGZguRD+tkptT9/+TySCpGcSs7Y3r8+
1w1eJ1ZEGbSTRkSFg7zD9KGj2yC+lUlete7c2f2hucgASIdU50LJMcbTZzA+wB5S
3Az9vyvC41cLSbt+sF6eD/9fhGs72T9nPUrYBbjvBr1k9Yz70A4PiqLs+JUUD9F0
xUtUXcFBDxaZVuUFmVgQ6XOyrI3XYfE20g+Nkj+OS9mqeDPj/4RcTeNyxZwN6Mxg
97PcIk1kTfJGqXe1SqpxiziWDXHPDVkWg/Fl674s+l+ybnDwhyNh2tcxppPTKfCm
F3NqQL77NXA8a3eY9Zu32i+YPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ2wEPbk
JNYz6qHpgyIR2PBlBV13MB8GA1UdIwQYMBaAFHUFqGtfT6pQVD0kjG8IVMUFrtwP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBFNi9EOEFERDk0MjNG
MzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFsQlVQU1NNYndoVXhRV3Uz
QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RRV29hMTlQcWxCVVBTU01id2hVeFFXdTNBOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDBFNi9EOEFERDk0MjNGMzcxMUVBQTc4NjQzNEJDNEY5QUUwMi9kUVdvYTE5UHFs
QlVQU1NNYndoVXhRV3UzQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqp+DYYxKNCCNWcVqdelUYr0O44z60pTqv4KjMXux40RN1npTNuLUHAp/hQyd
/yhfkN44ktUYySLyo/V95TD2C8x321I7+9rtmiha81HIyKiwP27JsmXsNwcjVihT
x41TKqu0RN5cgPqbAyhhok1IEUQsf5VedlluYXLHLMnVqepgljpLVjgknbBU4r8T
vnD4VRqPwq/UKM3DZy5pHLpUXOk1g3tAK8nGamFx/kgYj0PC1VJpNdv7ZSzlt6VV
5GzaXSz1uZTIDj+5v0vj8vGLwtcOys9LQjYu+sP+XDxdM2wgAAhBqUXedrwJKiGZ
ola7J5ASvcDryRWKNw07kwuU2w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:06:36 2026 by rpki-client