
$ rpki-client -vvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json)
Hash identifier: i87N0Ct1HFb6CLkZDTm2THWelNOXVHpuDyeZfHWQhvc=
Subject key identifier: 11:90:F9:B5:4D:21:A5:FE:44:3C:EF:61:65:BE:AE:F6:F8:6A:A5:84
Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Certificate serial: 01A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
Manifest number: 019E
Signing time: Sun 01 Mar 2026 23:42:05 +0000
Manifest this update: Sun 01 Mar 2026 23:42:03 +0000
Manifest next update: Sun 08 Mar 2026 23:42:03 +0000
Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: buQS2WF3uuPS2/xCrBYnu2jqijYMj/GmCkBpVHCDydk=)
2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: xqa2jysdV84afATRjwbUStpDN/sz26H1yiVkTr6zHrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:42:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Validity
Not Before: Mar 1 23:42:03 2026 GMT
Not After : Mar 8 23:42:03 2026 GMT
Subject: CN=69a4cecc-d639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:75:4e:f6:92:65:9f:6b:8b:04:20:a1:77:c4:
01:52:9f:b7:25:d3:d8:e8:36:22:e5:19:96:dd:d4:
8b:53:69:24:39:5d:70:98:90:7c:61:18:38:94:bc:
84:cd:b6:3d:51:79:be:de:27:ca:56:22:5e:a9:3d:
3e:bf:0d:8d:56:11:d2:73:d1:47:2b:b0:22:f0:ab:
54:59:91:d3:e3:7d:0c:55:a4:63:29:8d:fd:bd:b3:
87:d3:aa:27:29:ef:db:f4:8a:60:4a:b8:e4:88:e4:
50:9d:0c:7c:5f:b1:af:7b:26:02:fd:e7:44:7b:cb:
e7:b9:bf:13:d1:23:e9:ca:53:91:55:e4:a5:0d:82:
27:14:93:b8:c2:0e:93:71:f1:cd:49:44:73:9b:18:
ab:73:d2:7b:9b:19:19:a4:d2:af:8d:bf:e1:42:37:
20:95:d7:95:9b:f4:62:8a:94:c3:e1:e1:27:21:50:
ae:d1:7a:c9:a4:d1:1b:ca:32:e5:13:a1:ae:b3:1f:
20:45:8e:9d:16:42:e9:d4:76:12:1b:c9:87:2f:4b:
04:db:28:4c:b3:09:a8:28:cc:ee:ea:c9:05:be:b3:
3e:bf:c2:ad:ab:9e:65:24:7f:9a:b5:15:cf:d4:bc:
aa:eb:de:5e:50:93:34:d2:fc:2a:b1:3b:5c:2a:c5:
e2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:90:F9:B5:4D:21:A5:FE:44:3C:EF:61:65:BE:AE:F6:F8:6A:A5:84
X509v3 Authority Key Identifier:
keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:bf:d6:40:f3:58:b8:76:cd:b6:28:1c:fd:56:18:7f:f4:fc:
e0:4a:b6:2f:ef:0f:98:2f:dd:00:eb:73:5d:4b:bf:ff:54:ef:
30:a9:64:78:51:e8:db:4d:c2:f8:07:7f:88:48:d7:af:49:e1:
02:16:cd:8d:3d:0a:e6:7d:3f:7b:fc:be:80:4e:78:59:5f:b7:
78:f1:ac:ca:e8:82:60:02:12:81:66:66:41:d5:55:cf:e0:89:
82:39:e4:55:c6:cc:22:a0:d1:e1:34:f3:2d:9a:5f:5d:d9:c5:
48:9e:6c:c9:d9:f3:0f:c8:73:26:24:c8:9d:87:92:d5:16:4d:
7e:3c:e7:c5:d9:b2:28:4c:80:a2:82:d9:dd:14:4a:c6:80:ce:
35:a2:ef:0e:ae:50:d3:4a:6b:58:59:17:aa:7c:6c:29:63:02:
d5:fd:03:38:42:8f:c2:82:16:26:ec:4c:8c:cf:30:47:b0:fa:
83:95:59:21:65:3c:cf:f2:91:30:e7:29:b0:df:a7:25:15:81:
df:18:61:9a:82:e0:ce:c5:aa:e6:f0:a7:81:5a:6f:0f:63:2b:
e0:c0:3a:1f:97:7e:d5:cf:a1:92:b4:28:ae:be:d8:17:78:1f:
09:8c:5c:18:ea:42:22:71:8f:63:21:ed:c8:2f:cb:cd:30:4e:
fc:3e:41:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:54 2026 by rpki-client