
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
File: DWTFbg5hGlzB01iGdsV03iLVdQE.mft (raw, json)
Hash identifier: 6IvQs84N+HmXceKV7f+v0R1axqFBZdj6DpYMa9b1Y7Q=
Subject key identifier: 87:13:8C:FB:2D:F6:BD:25:9A:CF:11:3B:37:F7:20:56:59:70:88:F9
Authority key identifier: 0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
Certificate issuer: /CN=A9128D30/serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Certificate serial: 020B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
Manifest number: 0205
Signing time: Mon 21 Sep 2026 03:09:07 +0000
Manifest this update: Mon 21 Sep 2026 03:09:07 +0000
Manifest next update: Mon 28 Sep 2026 03:09:07 +0000
Files and hashes: 1: DWTFbg5hGlzB01iGdsV03iLVdQE.crl (hash: K6bDr3Qlb7Lib75a97ejppYF7IOLHn9WjQtZglay89Q=)
2: 7D28601A9FD211EEAC56900AC4F9AE02.roa (hash: xqa2jysdV84afATRjwbUStpDN/sz26H1yiVkTr6zHrE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:09:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 523 (0x20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9128D30, serialNumber=0D64C56E0E611A5CC1D3588676C574DE22D57501
Validity
Not Before: Sep 21 03:09:07 2026 GMT
Not After : Sep 28 03:09:07 2026 GMT
Subject: CN=6ab09fd3-7546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7b:08:73:32:af:af:84:c1:7b:7e:dc:40:23:
01:40:d2:e5:16:6c:98:fc:4f:98:ef:11:66:67:e0:
2c:6d:ae:be:b7:fa:75:d3:1e:42:ff:75:fe:d3:66:
ca:ce:23:e1:b8:95:3b:5a:33:e3:7a:e3:21:bf:a9:
31:ec:57:54:04:a9:46:b8:14:d6:56:32:66:64:46:
dc:d6:58:55:9f:07:b7:e4:66:49:9a:a5:7c:e5:63:
89:5b:5d:39:53:72:7f:09:52:1e:ba:98:1d:b8:d5:
53:fc:e3:72:81:20:4e:4f:b8:cd:ef:9b:2e:d0:62:
f4:60:67:3a:38:d1:58:19:e5:25:7e:02:03:3d:7f:
19:97:6c:35:2a:0d:10:44:04:11:71:d1:98:58:52:
81:d6:ea:6e:59:f5:3c:cf:2d:ff:c3:1f:8e:ec:7b:
6b:55:d1:41:52:6e:07:5a:be:2a:76:a1:23:9a:c7:
9a:e6:a6:12:ef:92:b7:d9:e0:12:90:55:44:07:73:
8e:68:12:64:98:c8:14:e8:c9:06:b0:7b:c8:e1:a3:
0f:89:ec:43:f7:42:30:79:c2:6f:2a:65:31:fc:04:
11:f3:cb:e8:21:08:48:8f:72:c8:e8:f5:c7:2a:2c:
e5:d9:65:a6:9b:e8:ca:f7:b8:06:c5:7d:df:87:51:
c5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:8C:FB:2D:F6:BD:25:9A:CF:11:3B:37:F7:20:56:59:70:88:F9
X509v3 Authority Key Identifier:
keyid:0D:64:C5:6E:0E:61:1A:5C:C1:D3:58:86:76:C5:74:DE:22:D5:75:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWTFbg5hGlzB01iGdsV03iLVdQE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128D30/CD80AAE69FD111EEAD704409C4F9AE02/DWTFbg5hGlzB01iGdsV03iLVdQE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:9f:70:3e:4e:97:33:1a:26:b9:af:53:ce:a1:19:61:5e:b7:
23:56:f2:29:62:af:b3:58:1c:3c:ac:fe:ce:32:f2:33:c4:0b:
7b:6f:92:28:1f:ea:32:f6:00:40:8a:7e:bb:e3:c3:c6:9a:c0:
5c:e8:66:f5:3e:f2:6f:03:fb:4d:d0:93:85:fb:21:aa:d2:39:
58:f8:29:05:f8:c8:43:14:d6:08:b4:b3:6a:f2:78:7d:fb:fa:
43:d6:14:c5:54:03:b5:c4:59:e3:38:c0:3b:16:e7:ea:64:db:
7a:f7:f3:36:d3:14:f0:2a:e5:56:0f:b1:c4:84:b3:7b:ef:a6:
b6:3e:ea:4b:e0:50:b6:61:8a:f4:48:27:5c:94:02:43:52:d4:
75:b0:0b:02:35:07:ea:c1:d3:97:67:13:7b:e2:63:ef:85:fe:
fd:12:d4:42:f0:a8:5d:c4:e7:f5:eb:a1:8b:75:44:38:43:79:
14:24:29:83:08:cf:cf:62:08:2e:20:33:f4:71:af:c4:ac:87:
15:91:f9:43:8f:d6:a3:b3:bf:d6:6b:78:f1:f0:bd:14:c1:8e:
23:94:a9:fd:3f:d1:60:f3:45:e7:30:ea:0d:2b:15:48:36:7b:
9a:0a:b6:0e:bf:fe:ff:00:3a:35:54:0a:43:c1:60:17:75:3f:
42:ad:ff:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:51:55 2026 by rpki-client