
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
File: dOW7m208x_jCmoO9yEkrllnw7hc.mft (raw, json)
Hash identifier: 3cmIcMymTC0SU8AR3VfJJG1piQ6nSNxZyFW36zGjE2s=
Subject key identifier: 6F:4D:CC:98:CC:E3:67:61:38:26:D9:CC:85:18:12:69:16:05:DC:52
Authority key identifier: 74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
Certificate issuer: /CN=A91620E0/serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Certificate serial: 102C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
Manifest number: 0EAE
Signing time: Tue 06 Oct 2026 18:48:35 +0000
Manifest this update: Tue 06 Oct 2026 18:48:34 +0000
Manifest next update: Tue 13 Oct 2026 18:48:34 +0000
Files and hashes: 1: dOW7m208x_jCmoO9yEkrllnw7hc.crl (hash: KFQDamB38JqRzlQS1X3EWNHDQZ6vfDNZZUMFRscYy6g=)
2: DA216556B3D411F090043E0CC4F9AE02.roa (hash: DnzikzuEnbVtegOuduasWy5MsFISN20nSzjc18rL36w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 18:48:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4140 (0x102c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91620E0, serialNumber=74E5BB9B6D3CC7F8C29A83BDC8492B9659F0EE17
Validity
Not Before: Oct 6 18:48:34 2026 GMT
Not After : Oct 13 18:48:34 2026 GMT
Subject: CN=6ac54282-f9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:1b:4c:5e:ca:94:9d:bd:fd:9a:b1:8f:d6:
29:62:8d:5c:b5:3d:71:9c:08:b5:38:e0:3c:a5:3c:
e1:cf:92:56:6f:03:ff:09:25:ac:fc:a5:0f:4f:72:
de:80:8d:44:83:83:61:d6:88:13:f9:47:ad:2b:96:
2c:7c:e2:41:53:d8:6a:48:dd:29:d1:ae:77:f7:f8:
18:6e:c9:b0:15:f2:73:3e:48:80:b7:d7:30:60:c1:
cd:37:e2:89:09:87:41:e3:a4:0e:3b:79:27:4c:ad:
18:1e:25:a0:c4:21:34:c0:7a:1c:66:3d:64:51:16:
52:9c:80:bf:8c:9b:2e:0f:bd:d1:43:b2:57:84:2a:
a5:15:64:4d:d8:7b:d3:16:d3:fb:f4:08:13:a6:41:
fe:66:23:a2:df:c3:4c:2c:69:2c:53:ab:65:64:bb:
7d:64:8f:67:8c:48:38:c4:5b:48:b5:e0:3d:00:d4:
b3:61:39:fe:f4:6d:2b:03:5b:c2:61:43:97:23:9d:
8e:21:76:10:65:01:bd:13:a2:98:ab:6f:4b:59:4b:
42:ab:c7:db:82:e8:43:36:46:71:02:21:21:7a:4b:
b4:0a:fb:fd:b9:78:79:e5:56:f6:e9:30:1d:f9:61:
fc:bf:29:db:91:bf:b9:13:15:41:3d:25:da:43:8d:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:CC:98:CC:E3:67:61:38:26:D9:CC:85:18:12:69:16:05:DC:52
X509v3 Authority Key Identifier:
keyid:74:E5:BB:9B:6D:3C:C7:F8:C2:9A:83:BD:C8:49:2B:96:59:F0:EE:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dOW7m208x_jCmoO9yEkrllnw7hc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620E0/D964B482310E11EA9C3CE72FC4F9AE02/dOW7m208x_jCmoO9yEkrllnw7hc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:8e:2b:34:da:80:53:9a:3c:e9:a6:0f:14:90:9e:4e:19:2f:
b6:34:6c:61:a6:21:52:a4:f2:41:ba:09:a9:44:1c:62:91:4b:
1a:7f:e0:07:91:d4:59:df:13:df:c2:b0:5b:f8:99:31:58:b5:
1a:bb:3d:c9:a6:5f:03:24:14:66:43:91:98:ff:4e:f5:be:a9:
d5:fc:d9:11:d2:72:a1:42:21:f6:64:8e:65:ae:35:38:b8:d8:
df:c1:49:bb:70:19:6c:c9:17:94:f0:f9:43:37:3c:2b:04:9b:
2d:dd:d4:a5:d7:5b:3d:27:dc:41:67:36:4b:aa:6b:c1:0c:60:
d1:5f:94:fd:10:bb:47:91:a9:f0:0b:9a:30:64:80:7a:12:cd:
cc:bb:92:ec:48:f1:6f:c5:ec:e5:ab:ed:c3:5c:13:53:c3:de:
49:84:8d:81:62:f8:e2:69:ea:1f:f9:3c:61:91:35:f5:53:c6:
3b:9b:ea:31:41:48:09:0f:03:86:b4:ea:7d:8d:aa:08:4e:db:
4b:37:9f:a0:f6:e2:00:2e:57:1c:bf:fc:d5:9e:de:4f:14:5e:
37:6d:ab:7b:66:f1:7a:8e:8f:ad:77:1e:af:4c:52:80:49:07:
bf:7f:ba:fe:83:3a:76:82:23:89:7f:5b:d1:d5:0a:37:6d:f9:
c1:7c:54:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICECwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjIwRTAxMTAvBgNVBAUTKDc0RTVCQjlCNkQzQ0M3RjhDMjlBODNCREM4NDkyQjk2
NTlGMEVFMTcwHhcNMjYxMDA2MTg0ODM0WhcNMjYxMDEzMTg0ODM0WjAYMRYwFAYD
VQQDEw02YWM1NDI4Mi1mOWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzUgbTF7KlJ29/Zqxj9YpYo1ctT1xnAi1OOA8pTzhz5JWbwP/CSWs/KUPT3Le
gI1Eg4Nh1ogT+UetK5YsfOJBU9hqSN0p0a539/gYbsmwFfJzPkiAt9cwYMHNN+KJ
CYdB46QOO3knTK0YHiWgxCE0wHocZj1kURZSnIC/jJsuD73RQ7JXhCqlFWRN2HvT
FtP79AgTpkH+ZiOi38NMLGksU6tlZLt9ZI9njEg4xFtIteA9ANSzYTn+9G0rA1vC
YUOXI52OIXYQZQG9E6KYq29LWUtCq8fbguhDNkZxAiEheku0Cvv9uXh55Vb26TAd
+WH8vynbkb+5ExVBPSXaQ41GWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG9NzJjM
42dhOCbZzIUYEmkWBdxSMB8GA1UdIwQYMBaAFHTlu5ttPMf4wpqDvchJK5ZZ8O4X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFMC9EOTY0QjQ4MjMx
MEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhfakNtb085eUVrcmxsbnc3
aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RPVzdtMjA4eF9qQ21vTzl5RWtybGxudzdoYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MjBFMC9EOTY0QjQ4MjMxMEUxMUVBOUMzQ0U3MkZDNEY5QUUwMi9kT1c3bTIwOHhf
akNtb085eUVrcmxsbnc3aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANY4rNNqAU5o86aYPFJCeThkvtjRsYaYhUqTyQboJqUQcYpFLGn/gB5HUWd8T
38KwW/iZMVi1Grs9yaZfAyQUZkORmP9O9b6p1fzZEdJyoUIh9mSOZa41OLjY38FJ
u3AZbMkXlPD5Qzc8KwSbLd3UpddbPSfcQWc2S6prwQxg0V+U/RC7R5Gp8AuaMGSA
ehLNzLuS7Ejxb8Xs5avtw1wTU8PeSYSNgWL44mnqH/k8YZE19VPGO5vqMUFICQ8D
hrTqfY2qCE7bSzefoPbiAC5XHL/81Z7eTxReN22re2bxeo6PrXcer0xSgEkHv3+6
/oM6doIjiX9b0dUKN235wXxUJA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 17:05:24 2026 by rpki-client