
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
File: dEWTNjfMowmkwWGr_t-HecsqsT8.mft (raw, json)
Hash identifier: kUT7kqxKTK3+N40DN8zhtZ06kYwclPfUBxqe3oxCHOM=
Subject key identifier: 92:15:7F:3A:9D:21:FC:F6:0B:1D:0A:D1:20:37:DB:04:FF:32:A1:18
Authority key identifier: 74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
Certificate issuer: /CN=A912E53C/serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
Manifest number: 0107
Signing time: Mon 02 Mar 2026 01:34:57 +0000
Manifest this update: Mon 02 Mar 2026 01:34:56 +0000
Manifest next update: Mon 09 Mar 2026 01:34:56 +0000
Files and hashes: 1: dEWTNjfMowmkwWGr_t-HecsqsT8.crl (hash: 3tz7wEYGRR8K9/+waMSocYkGibR73JcNZSHZtMdbhEY=)
2: 9E3D544AFFFD11EF8D8A924EC4F9AE02.roa (hash: 845Y2aA2itdhNFcJh2u6MWKd/R973iis1jKrvrdf6+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E53C, serialNumber=7445933637CCA309A4C161ABFEDF8779CB2AB13F
Validity
Not Before: Mar 2 01:34:56 2026 GMT
Not After : Mar 9 01:34:56 2026 GMT
Subject: CN=69a4e941-508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:41:ee:f7:0e:11:a2:27:87:e2:e3:ca:0e:
68:ee:3b:eb:9b:fa:71:a2:5e:39:17:4b:47:b0:46:
8f:83:5e:a1:fe:32:e5:02:0a:7b:72:ee:b2:62:b9:
b0:f8:7b:f4:75:ac:fc:7c:b8:a9:87:59:d7:31:3c:
c0:23:03:fd:b4:f5:c6:98:18:b5:a8:db:ed:97:ff:
7d:39:99:68:b6:53:68:5f:6c:42:67:ea:5f:eb:2c:
68:0e:81:0b:c6:27:06:4b:31:5e:4a:1e:71:e7:f9:
67:88:15:b6:1c:ad:66:e2:5a:c0:76:bb:06:f7:94:
b6:26:a4:55:4d:e4:29:91:cd:41:f0:45:32:58:8f:
f5:93:61:99:f1:a4:d2:ce:7b:27:7a:55:f9:64:48:
30:08:42:7a:70:0f:80:fb:95:55:9e:e0:d2:ce:95:
d7:39:16:ac:d4:7a:c8:7e:ba:dc:14:fe:eb:69:52:
b0:9a:ad:b5:2c:95:a4:3f:e6:63:d6:75:77:f5:88:
eb:84:9d:d6:7a:83:cb:22:4e:1a:c1:c1:f5:5f:ff:
71:28:a2:2f:39:cf:b7:e0:a1:0b:0c:ba:fc:6e:76:
b4:c9:82:ce:1f:0e:a3:8d:ed:0e:a4:06:b9:9d:3c:
a9:11:c3:45:51:84:e5:d9:1d:37:57:4a:71:0b:eb:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:7F:3A:9D:21:FC:F6:0B:1D:0A:D1:20:37:DB:04:FF:32:A1:18
X509v3 Authority Key Identifier:
keyid:74:45:93:36:37:CC:A3:09:A4:C1:61:AB:FE:DF:87:79:CB:2A:B1:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEWTNjfMowmkwWGr_t-HecsqsT8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/29B86994903A11EFBF156D81C4F9AE02/dEWTNjfMowmkwWGr_t-HecsqsT8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:15:08:93:a4:14:2d:b1:5c:6e:38:bf:52:29:80:2d:98:e5:
c6:ab:51:4f:d0:07:d9:6a:36:ff:a8:87:0a:2e:82:0a:0a:f8:
54:3d:e0:67:e7:bd:76:88:dc:d8:28:26:fd:26:a2:fc:37:21:
bc:a1:de:69:7f:db:58:35:52:17:a5:f7:cf:c6:86:ca:27:ec:
6c:d6:25:e2:b1:c0:b2:b5:dc:ca:66:9e:a7:13:90:fa:a7:cf:
b9:d8:6d:cf:34:e9:2f:f8:a8:f9:b0:03:90:e5:13:f2:ea:a1:
11:c8:a0:fe:9f:98:b1:3e:11:7c:6d:93:0b:f2:63:bc:9c:36:
1a:54:3b:c8:61:2c:1e:fb:26:4f:6c:15:e1:1f:ae:91:7f:ea:
65:2d:a8:6d:aa:13:dc:23:7e:11:de:a1:04:61:ec:60:b3:04:
92:bc:7c:bd:95:69:59:b2:9d:c4:8b:0c:8e:c1:18:9b:86:ab:
e1:28:a5:fd:aa:b4:bf:3f:10:a1:c7:f0:a7:db:a2:59:b1:bf:
81:26:a8:2b:cf:b0:89:b7:e5:e1:cf:65:ef:d7:45:3d:5e:61:
54:68:7d:6a:8e:19:7f:29:80:72:3e:e0:c9:2d:17:2c:67:e3:
84:ed:df:ca:35:d5:8e:11:ff:7f:62:5d:0d:58:ea:cb:c1:7f:
a1:2c:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:00 2026 by rpki-client