
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
File: dQWoa19PqlBUPSSMbwhUxQWu3A8.mft (raw, json)
Hash identifier: +DBNpiCL/l/1V5o4r2WK1Zlj14nE2BLJsCBK4NRNZAA=
Subject key identifier: 6C:72:4C:BD:7A:EF:31:97:E9:A3:FC:1F:00:20:5B:DA:E3:9F:5D:79
Authority key identifier: 75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
Certificate issuer: /CN=A918D0E6/serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Certificate serial: 0BD6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
Manifest number: 0BC1
Signing time: Mon 02 Mar 2026 00:13:26 +0000
Manifest this update: Mon 02 Mar 2026 00:13:25 +0000
Manifest next update: Mon 09 Mar 2026 00:13:25 +0000
Files and hashes: 1: dQWoa19PqlBUPSSMbwhUxQWu3A8.crl (hash: QXZiXo4tyiM2AJQ9iTRAGfL+gcEPCq8JCA6lDTXQoMw=)
2: A77121520E7711F1B88700272A3D8C67.roa (hash: 6f2MZabIV9/41LXq6L3lOj/k/ZzxiNqapWZIuUa5bRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl
rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:13:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3030 (0xbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918D0E6, serialNumber=7505A86B5F4FAA50543D248C6F0854C505AEDC0F
Validity
Not Before: Mar 2 00:13:25 2026 GMT
Not After : Mar 9 00:13:25 2026 GMT
Subject: CN=69a4d626-61fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9f:0e:4c:f8:37:df:29:a3:ec:b5:f6:ce:b7:
36:fb:4a:f4:63:51:3d:3f:70:de:49:23:2e:b8:cf:
14:21:82:a7:d8:57:c5:7b:15:50:57:22:bd:35:68:
92:b0:aa:6e:f6:48:53:32:06:21:20:ab:ac:fa:75:
a0:9b:59:81:bc:a6:fd:c6:47:72:8a:6a:21:94:d6:
67:52:01:c7:34:28:30:be:8b:a3:c4:bd:52:3e:74:
0f:ae:8e:2f:bf:de:ad:6f:54:c8:c0:df:b1:20:c5:
73:d8:ff:cc:f2:4b:96:54:1a:ba:1b:1c:ef:2e:17:
3e:94:dc:49:59:1c:1d:d3:83:0e:ed:52:03:76:e1:
d5:92:ab:db:86:e3:3e:37:ae:65:cc:b4:2b:a8:07:
46:d8:95:a5:ce:ed:db:d9:56:20:5d:c1:ae:9b:5f:
7a:a0:52:54:c7:8f:3b:87:53:fe:0a:4b:a4:af:27:
d8:5f:61:37:2b:0e:b9:8e:de:93:25:ae:74:d0:bb:
d1:29:a9:e5:94:74:e9:e9:ba:8b:b0:9e:5d:4d:9f:
be:66:c6:1c:f3:af:93:1f:26:d1:1e:ce:f4:6f:e6:
2d:23:81:63:97:19:ca:5c:7b:c6:97:0d:78:55:16:
a8:dc:79:c6:f8:b6:c9:73:91:64:68:89:74:4b:82:
0d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:72:4C:BD:7A:EF:31:97:E9:A3:FC:1F:00:20:5B:DA:E3:9F:5D:79
X509v3 Authority Key Identifier:
keyid:75:05:A8:6B:5F:4F:AA:50:54:3D:24:8C:6F:08:54:C5:05:AE:DC:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dQWoa19PqlBUPSSMbwhUxQWu3A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0E6/D8ADD9423F3711EAA786434BC4F9AE02/dQWoa19PqlBUPSSMbwhUxQWu3A8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:c9:8a:b0:89:3a:64:d8:86:6c:45:d5:21:26:51:ad:7c:10:
71:15:ac:d3:2a:f7:40:bc:0f:75:5b:c2:2d:31:f0:d3:8f:be:
f2:3b:12:2a:66:c3:d3:31:90:aa:b2:01:84:87:d9:3a:38:69:
31:f1:a6:1d:f0:21:47:b2:46:22:e7:e0:b2:14:29:ac:72:ba:
70:cb:33:00:f7:be:45:9b:7f:c9:01:10:10:2b:e3:ec:41:92:
72:91:03:f6:f8:10:cf:ac:00:2d:50:46:22:5d:00:62:2a:81:
24:95:a2:b2:58:20:e4:45:09:8b:b4:42:22:fe:c5:4f:78:1e:
be:09:b8:db:37:7e:34:c9:3b:7e:b2:41:6f:22:4e:ce:93:f3:
37:7c:b5:87:56:b2:c8:d9:12:9d:6b:a0:6d:6b:79:00:a2:d3:
db:f7:b9:87:17:e5:d2:f6:ff:d2:6a:2d:67:5b:56:fe:41:39:
41:0c:2f:c2:7d:3f:de:7f:c9:29:e6:0c:68:7e:f1:2c:a6:69:
12:9e:95:41:a3:a1:00:a8:c9:51:55:7c:d1:b4:3b:fa:55:2d:
55:48:28:f5:8a:6a:99:24:5c:33:d4:b6:62:b2:96:9c:de:a6:
a9:88:b0:b4:29:b6:35:15:d1:8a:95:31:d8:0c:78:1f:b5:0f:
16:d2:6d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:34 2026 by rpki-client