
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File: dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier: jgQsGkybRz0uTgMnqrT4baAdAybTL5nqtxqqM7ZQAe8=
Subject key identifier: B5:8A:30:1D:75:A4:85:71:2D:41:BF:E6:15:7C:9A:FA:42:02:1C:78
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer: /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial: 3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number: 36
Signing time: Wed 23 Sep 2026 08:24:36 +0000
Manifest this update: Wed 23 Sep 2026 08:24:35 +0000
Manifest next update: Wed 30 Sep 2026 08:24:35 +0000
Files and hashes: 1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: 8qBO++zYMTfwap9peFriMMDVSuC5/5WnJtHSKnZdmaU=)
2: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
3: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
4: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:24:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58 (0x3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Validity
Not Before: Sep 23 08:24:35 2026 GMT
Not After : Sep 30 08:24:35 2026 GMT
Subject: CN=6ab38cc4-67fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:76:4c:9a:c1:91:0f:be:34:c2:6b:38:28:
14:ab:f7:38:5d:d8:16:a4:60:03:83:5d:83:3b:b7:
51:dc:ce:e2:49:f9:b6:ab:4e:73:1a:b6:1d:cc:98:
e8:62:81:30:d6:2f:35:73:ff:90:26:76:7d:e6:a6:
a4:fb:a0:ec:4e:46:bc:9f:47:b1:aa:c6:b7:6f:80:
7c:4a:63:0a:1d:fd:3e:e1:48:5c:aa:65:dd:fc:b4:
45:d3:40:12:5b:e6:63:db:b2:58:32:50:46:a4:68:
c9:88:d4:a9:1f:a1:ad:7b:be:56:48:b5:97:fe:a3:
be:7f:f6:cd:c5:c4:14:1c:85:6e:9f:8e:bb:5a:fd:
a0:31:b7:50:2d:a2:78:ae:b2:70:77:af:db:f1:9e:
f0:a8:15:fd:1d:46:1b:41:2d:1d:29:49:42:97:ea:
92:17:3f:50:21:cf:b7:a0:8c:2e:bd:46:31:e3:56:
33:bd:de:da:b4:3a:43:ff:7b:93:f3:bc:ba:ac:51:
4a:ae:83:ce:a7:74:97:0d:79:c6:dc:8d:f3:b9:24:
00:85:99:c4:8b:03:9d:3f:9c:99:b7:2a:5e:c9:a4:
ad:36:36:97:2c:66:ea:a0:f9:af:72:89:a6:a0:a4:
25:0f:16:50:3c:c5:97:16:e9:62:d3:a5:7a:c3:19:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8A:30:1D:75:A4:85:71:2D:41:BF:E6:15:7C:9A:FA:42:02:1C:78
X509v3 Authority Key Identifier:
keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d7:20:64:1e:7a:34:09:03:f7:b6:f4:3e:4a:54:d7:9e:96:
3e:50:1a:fb:2f:d5:e0:3c:a4:d8:b8:d3:1a:44:51:9d:4f:70:
d2:60:8f:e7:ca:4a:2c:5b:2d:14:4c:90:6b:17:65:50:25:ba:
52:a5:8b:56:74:6b:30:ed:08:36:af:1d:c7:8d:26:fa:5f:9f:
8d:35:c5:76:1f:06:22:8f:2a:27:cd:c5:d5:79:84:e4:30:c2:
58:91:88:f6:86:e2:2b:28:d1:d4:cd:fb:b3:3a:96:b9:5a:ae:
75:6d:30:a9:f1:1c:e9:d9:3b:42:0d:ab:0b:39:f0:f1:d5:e0:
05:15:8d:95:5c:07:9c:d0:7b:f0:66:a9:93:7d:8f:2a:3d:76:
21:d4:e5:64:db:fc:9b:cc:2f:c5:21:2e:48:52:a7:f4:3b:03:
32:93:e2:1a:a1:c7:0a:59:b7:41:b6:ab:58:8d:f2:5a:99:b5:
0c:ef:cb:a4:3e:a4:8b:be:cc:f2:6f:1f:32:ca:f6:15:e6:77:
e1:89:81:9a:26:56:15:38:89:c4:47:ca:3f:ab:b2:dc:a8:b2:
43:04:03:95:48:4f:88:44:a0:06:85:bb:66:10:96:07:51:c2:
61:3b:bf:d2:85:f3:c0:e1:11:e6:be:0b:01:b5:ad:e2:30:d5:
a3:81:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:27 2026 by rpki-client