
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier: VMu3zFQDPExSXL0bYJ7aBX499lFRS0s1O0Cw9JxYEAU=
Subject key identifier: 7A:4D:EB:AA:26:5C:E0:F0:73:5E:AF:E5:CA:2F:1B:BE:E0:78:E2:12
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial: 1766
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number: 1753
Signing time: Tue 24 Mar 2026 16:30:48 +0000
Manifest this update: Tue 24 Mar 2026 16:30:48 +0000
Manifest next update: Tue 31 Mar 2026 16:30:48 +0000
Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: 6QJZEwNS4E2J8zGWyeHUmZCXiS4VWVdV/rsqEKp4lnE=)
2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: ixlZRVOoeUZJ75nnpCsBl4fkLgRW7J4+9KrLoGwUAJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 16:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5990 (0x1766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Validity
Not Before: Mar 24 16:30:48 2026 GMT
Not After : Mar 31 16:30:48 2026 GMT
Subject: CN=69c2bc38-246e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:32:c9:df:6a:3d:17:7e:3d:05:eb:96:37:
7c:31:ce:81:fe:94:a7:6c:f1:31:99:c1:2e:31:3c:
f0:bf:00:0c:0c:f2:3a:d4:f4:f9:0f:fa:d2:49:4f:
3f:bd:35:44:cc:b9:be:d8:fe:75:3c:37:3e:c3:5e:
17:79:29:8e:b0:2f:d4:19:c0:65:ee:6c:5b:9b:f7:
55:ba:cc:38:19:ac:2a:02:e9:21:a5:8b:63:f0:6b:
69:be:24:72:21:29:51:e2:4b:88:05:83:c6:c2:0a:
86:e6:d0:5b:9b:d4:68:96:38:a9:d0:73:dc:b6:7d:
8a:93:6c:ab:a3:92:28:94:15:89:d2:79:33:2b:f1:
1e:9c:95:8d:4b:3b:89:14:6a:ea:36:52:6b:08:31:
ec:c4:0d:81:dd:ff:6e:f7:de:ca:4e:17:8e:a7:6b:
57:03:1a:74:66:e6:43:c9:90:fe:c7:29:23:26:99:
3a:89:86:c0:eb:e0:28:40:b1:d2:ef:3e:3b:29:6a:
c4:0f:1e:5e:58:ec:4c:01:c5:4c:b5:09:e0:62:02:
1a:74:c4:e9:ca:e2:cf:3c:5b:57:b2:00:71:f9:d6:
8e:3f:5b:12:10:97:17:d0:23:d7:85:76:04:0f:ec:
c6:9b:e7:ef:ca:5c:c3:6a:5d:58:4c:ff:45:9e:ec:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4D:EB:AA:26:5C:E0:F0:73:5E:AF:E5:CA:2F:1B:BE:E0:78:E2:12
X509v3 Authority Key Identifier:
keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:78:5a:d3:6f:b1:88:5c:09:1a:2d:4a:2c:03:18:c8:bd:21:
20:86:18:9d:2f:80:70:5d:99:e7:57:75:e2:a1:f8:77:21:38:
15:3d:24:45:d4:1d:f8:bf:78:e9:a5:30:35:2c:6a:38:64:19:
92:c0:b3:2e:ee:07:7f:25:1c:38:98:42:1b:23:36:0b:e4:90:
08:e0:26:41:ad:57:fd:c1:1a:37:e7:5c:48:3c:0a:69:e4:8a:
5a:e3:88:cf:a5:40:8f:4e:74:ee:21:c0:8c:84:d9:5a:c6:ba:
5c:b0:36:0e:24:4e:50:24:1b:8a:eb:dd:59:40:16:36:98:b2:
73:b2:b0:e6:1e:45:5c:e2:56:6f:95:a2:f5:a3:9f:f5:f8:8c:
b2:a1:c8:0e:56:20:0a:f0:49:bd:1a:f8:2f:e5:33:9c:f0:e2:
75:19:1c:4c:c6:58:1f:18:d4:b7:0a:ef:5e:71:f9:32:9d:b0:
6e:ab:b4:b5:65:ac:d7:78:64:75:5c:40:e9:df:76:6a:83:b6:
d4:d5:5c:ab:65:78:0f:0e:b5:07:36:8a:4c:3b:7d:30:b8:e8:
2c:05:23:58:dd:53:f5:ee:75:20:80:3d:dc:bb:5a:29:c7:8d:
8c:2f:cf:29:cd:59:a3:b5:a6:9b:f3:2f:cc:aa:73:b4:74:14:
36:0b:b2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:55:32 2026 by rpki-client