
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: XNsUqNkd8IS4TJegfLTRXkKFaiQwtk/AoBA390ohqtA=
Subject key identifier: C8:ED:15:49:FE:8E:E1:06:84:9C:B3:D8:A7:D6:8A:35:7A:68:10:BF
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 0477
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 0461
Signing time: Wed 13 May 2026 00:16:35 +0000
Manifest this update: Wed 13 May 2026 00:16:35 +0000
Manifest next update: Wed 20 May 2026 00:16:35 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: zO5a11fhGfE60dFTQ8mk6e7ne8YbjrJPBFtPDCz11LU=)
2: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=)
3: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=)
4: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 00:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1143 (0x477)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: May 13 00:16:35 2026 GMT
Not After : May 20 00:16:35 2026 GMT
Subject: CN=6a03c2e3-9ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ef:98:17:cc:73:3b:89:6c:f1:44:94:3f:7d:
4e:44:60:85:e1:4b:2e:f7:b1:99:ea:60:de:2b:d9:
46:68:6b:d6:47:ac:46:ec:2e:4f:93:da:d0:90:d8:
94:89:4a:c9:81:23:7d:5c:4f:78:f2:e6:6d:f4:b1:
de:ea:22:cc:25:9e:f7:2f:b5:6e:66:9d:34:90:92:
83:d7:04:3a:a7:59:c9:fc:a5:f6:09:f4:ce:1d:51:
d2:dd:a3:56:5a:ab:0c:9f:53:b5:6a:66:4c:74:1c:
d8:58:18:1c:bd:ce:9e:02:d8:cd:09:8c:08:4e:b5:
18:4f:ad:8a:f1:82:ac:ad:6c:c1:c2:18:aa:40:ff:
f8:cd:8a:b3:14:2c:44:68:0a:02:93:4c:31:e6:65:
75:8b:4f:bf:cb:90:fe:26:46:6f:98:55:0e:d8:3d:
82:82:50:d0:9a:3e:ca:24:2e:75:1a:6a:36:44:69:
95:11:2f:f2:3c:31:42:95:f7:ad:07:d5:c4:dd:10:
9d:77:1e:f6:99:4a:56:fa:94:f6:88:0d:1e:1b:80:
53:e6:a7:11:74:74:d4:2e:7c:a5:98:2f:49:7a:86:
20:93:e4:8d:4d:25:60:75:18:25:89:f4:67:7f:21:
5a:49:00:6d:4c:b0:ca:01:fe:26:ba:5c:3e:82:61:
4b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:ED:15:49:FE:8E:E1:06:84:9C:B3:D8:A7:D6:8A:35:7A:68:10:BF
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:c4:14:00:8b:da:3b:56:49:c3:c0:cc:ca:66:46:bd:77:
e5:9f:28:c2:3c:d3:ca:86:3d:7c:d9:0b:71:da:c1:e6:08:d9:
5f:a2:2f:dc:00:d6:12:50:6f:13:47:39:7a:9d:66:a1:55:bf:
b2:99:c8:70:eb:30:d9:34:4b:37:c3:8f:27:b3:17:d7:5a:1f:
4a:d9:84:34:91:7d:16:64:1d:f5:3b:78:9d:75:15:08:d4:4f:
51:ab:d1:a3:41:09:19:8a:39:5f:a0:4d:54:eb:75:2a:3b:ca:
4b:13:c3:f5:ac:5c:54:2a:51:48:55:67:4b:5a:ab:48:a9:c7:
21:62:ee:1d:87:30:06:23:e8:1f:be:dd:ac:3b:6f:9b:90:f6:
58:e8:47:8c:85:ce:14:fa:fa:f0:3d:46:a2:5f:6a:13:26:0c:
18:76:9c:7c:85:c1:7b:ea:29:2f:d7:40:b9:6f:f5:23:70:c5:
e9:6e:73:b9:78:c9:9f:99:30:fb:32:9b:34:4c:3a:31:7c:4e:
52:e7:b3:1f:6e:73:0d:4a:73:29:3d:7d:9b:e0:8b:e4:e2:91:
bb:f9:5e:99:49:b6:e9:61:61:44:2b:d4:a9:17:14:89:10:9e:
ef:1c:af:28:96:94:e5:95:ce:82:4c:dd:be:27:a5:71:2b:87:
ec:3c:20:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:40 2026 by rpki-client