
$ rpki-client -vvf rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
File: -Dcw_Tkbb492_vMXbtufxvVUHkA.mft (raw, json)
Hash identifier: RfmJG+8eyyIogsfoBJ8MWtcyyvJGt7d67HOaB+/mJS4=
Subject key identifier: D5:24:A9:89:46:5B:B1:A7:5D:62:AF:C5:BF:55:74:19:1E:01:7E:77
Authority key identifier: F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
Certificate issuer: /CN=A913621A/serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Certificate serial: 358E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
Manifest number: 3558
Signing time: Mon 02 Mar 2026 01:46:57 +0000
Manifest this update: Mon 02 Mar 2026 01:46:55 +0000
Manifest next update: Mon 09 Mar 2026 01:46:55 +0000
Files and hashes: 1: -Dcw_Tkbb492_vMXbtufxvVUHkA.crl (hash: lhhgIp47ApYYKsAeF2dRu+i0XF4P2niAH0HAJSDxSos=)
2: 7369CB76E42F11E9B6290B4EC4F9AE02.roa (hash: hFcT6GGoZtfB5obxWLs1zq4yzpXCoVBcNvn/SUcTV4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:46:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13710 (0x358e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913621A, serialNumber=F83730FD391B6F8F76FEF3176EDB9FC6F5541E40
Validity
Not Before: Mar 2 01:46:55 2026 GMT
Not After : Mar 9 01:46:55 2026 GMT
Subject: CN=69a4ec10-e736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:71:af:df:d0:4a:3a:db:00:52:3c:bf:f2:
8e:e8:52:3a:f4:76:ea:77:4e:2d:48:16:a5:07:a0:
fc:c3:6d:96:37:08:e9:d9:9c:de:0d:ea:35:db:38:
02:1a:17:8e:f5:0c:cd:a3:13:1f:80:19:e3:88:4c:
92:6c:27:04:c3:80:f4:f8:33:1c:3d:50:44:e3:7c:
60:22:9f:bb:31:6a:b6:8b:3f:f5:c3:f9:48:a7:79:
5e:d0:d8:b6:7a:4c:25:40:d5:b2:55:75:d8:86:c4:
b2:4f:1d:a8:1d:e7:9c:21:da:81:db:33:53:4d:0e:
20:60:83:f9:25:b9:cc:f0:73:20:02:b9:b4:03:09:
e6:b2:80:45:ef:11:e6:e9:fb:40:93:8e:4a:9f:33:
d3:92:02:5e:e3:b3:cc:dc:ea:79:ea:30:95:bc:6c:
87:92:69:20:62:81:77:14:ab:96:93:e1:dc:5e:19:
c1:df:f6:29:a0:57:f3:22:08:e6:f8:fa:95:5c:3c:
04:48:ec:60:ee:20:62:c8:db:71:30:ba:9a:6f:ea:
8b:99:40:5a:b0:82:e2:2c:cf:bd:3c:f2:d0:39:41:
e5:a4:ba:00:83:37:fa:66:2a:e0:c2:b8:44:46:1a:
68:27:c2:7f:db:1f:b2:6c:99:83:a9:1c:7d:6a:8c:
9d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:24:A9:89:46:5B:B1:A7:5D:62:AF:C5:BF:55:74:19:1E:01:7E:77
X509v3 Authority Key Identifier:
keyid:F8:37:30:FD:39:1B:6F:8F:76:FE:F3:17:6E:DB:9F:C6:F5:54:1E:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Dcw_Tkbb492_vMXbtufxvVUHkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913621A/282242F01D6D11E2B4C0E6AD08B02CD2/-Dcw_Tkbb492_vMXbtufxvVUHkA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:ca:4d:a6:f7:f7:12:07:b6:40:bb:87:d6:ae:15:06:98:3b:
54:63:5a:fa:4a:10:89:ca:5c:44:62:35:66:78:e9:3d:f8:43:
4c:a3:bb:06:f4:ac:60:ed:32:db:af:87:ca:fa:86:bd:7c:cc:
25:19:d4:8c:fc:91:10:68:57:5e:44:d9:3b:21:9c:e2:1d:c8:
39:f5:a5:2b:f3:a6:21:18:99:77:bc:ec:66:52:09:d4:6c:f3:
46:2c:91:e9:e7:1a:5e:16:3b:90:ac:3b:96:b8:02:25:cf:43:
a7:8d:95:c0:1d:b7:b9:4d:2c:51:72:31:28:f2:18:e9:34:64:
87:54:c1:db:d4:27:39:b8:c2:17:5a:48:a4:a5:d8:96:06:19:
a8:3a:2a:f0:65:dd:50:22:92:a2:6e:0f:a9:4f:48:3d:e7:55:
d8:01:ae:25:49:81:eb:93:80:87:01:2a:70:37:00:35:f5:da:
1f:45:da:3c:34:b8:75:d5:c6:9a:fb:96:5b:e7:dc:23:9f:a1:
62:98:eb:3f:9c:93:7f:f8:e0:f5:72:18:c4:62:bc:b9:2b:f3:
64:be:07:fe:7b:a6:bf:bf:fa:76:3d:7e:68:43:00:8c:64:68:
a9:14:51:1f:68:54:b6:e0:f2:07:25:15:cd:d6:49:ab:f8:d9:
66:46:b0:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzYyMUExMTAvBgNVBAUTKEY4MzczMEZEMzkxQjZGOEY3NkZFRjMxNzZFREI5RkM2
RjU1NDFFNDAwHhcNMjYwMzAyMDE0NjU1WhcNMjYwMzA5MDE0NjU1WjAYMRYwFAYD
VQQDEw02OWE0ZWMxMC1lNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwGtxr9/QSjrbAFI8v/KO6FI69Hbqd04tSBalB6D8w22WNwjp2ZzeDeo12zgC
GheO9QzNoxMfgBnjiEySbCcEw4D0+DMcPVBE43xgIp+7MWq2iz/1w/lIp3le0Ni2
ekwlQNWyVXXYhsSyTx2oHeecIdqB2zNTTQ4gYIP5JbnM8HMgArm0AwnmsoBF7xHm
6ftAk45KnzPTkgJe47PM3Op56jCVvGyHkmkgYoF3FKuWk+HcXhnB3/YpoFfzIgjm
+PqVXDwESOxg7iBiyNtxMLqab+qLmUBasILiLM+9PPLQOUHlpLoAgzf6ZirgwrhE
RhpoJ8J/2x+ybJmDqRx9aoydUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNUkqYlG
W7GnXWKvxb9VdBkeAX53MB8GA1UdIwQYMBaAFPg3MP05G2+Pdv7zF27bn8b1VB5A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjIxQS8yODIyNDJGMDFE
NkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0OTJfdk1YYnR1Znh2VlVI
a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1EY3dfVGtiYjQ5Ml92TVhidHVmeHZWVUhrQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjIxQS8yODIyNDJGMDFENkQxMUUyQjRDMEU2QUQwOEIwMkNEMi8tRGN3X1RrYmI0
OTJfdk1YYnR1Znh2VlVIa0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeMpNpvf3Ege2QLuH1q4VBpg7VGNa+koQicpcRGI1ZnjpPfhDTKO7BvSsYO0y
26+HyvqGvXzMJRnUjPyREGhXXkTZOyGc4h3IOfWlK/OmIRiZd7zsZlIJ1GzzRiyR
6ecaXhY7kKw7lrgCJc9Dp42VwB23uU0sUXIxKPIY6TRkh1TB29QnObjCF1pIpKXY
lgYZqDoq8GXdUCKSom4PqU9IPedV2AGuJUmB65OAhwEqcDcANfXaH0XaPDS4ddXG
mvuWW+fcI5+hYpjrP5yTf/jg9XIYxGK8uSvzZL4H/numv7/6dj1+aEMAjGRoqRRR
H2hUtuDyByUVzdZJq/jZZkawww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:33 2026 by rpki-client