
$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: flajN4MbPomm5fi+OoKLOzVzk2307yLBZDJ18HhV7ks=
Subject key identifier: 41:A0:D3:75:AD:74:90:95:A8:8F:A6:5C:34:87:CA:E8:6E:20:17:4A
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 0487
Signing time: Mon 27 Jul 2026 01:04:02 +0000
Manifest this update: Mon 27 Jul 2026 01:04:01 +0000
Manifest next update: Mon 03 Aug 2026 01:04:01 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: 9ugpJy2yqt29YHBNq3t+aWXQOi5KuuBj4bhnJkBTp1o=)
2: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=)
3: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=)
4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 01:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: Jul 27 01:04:01 2026 GMT
Not After : Aug 3 01:04:01 2026 GMT
Subject: CN=6a66ae81-e94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:0c:9e:1d:8b:40:65:81:06:85:43:a2:d3:
95:34:71:cb:7e:9d:ae:c7:d7:13:a4:be:bc:3e:98:
01:e4:55:11:6b:48:58:0c:39:72:57:40:da:a9:61:
c8:19:4f:fb:a8:f7:a0:d2:49:e1:5e:4f:4a:ac:3a:
78:48:c3:2f:d0:d4:84:67:04:e9:9b:c7:92:56:f3:
52:3b:d9:3f:44:66:8b:f0:38:ae:96:e5:f7:39:13:
70:cd:40:4c:39:b9:c6:25:78:69:17:a0:2e:f5:2d:
7a:d1:3c:69:8b:f9:bc:6a:c7:10:a1:d7:cd:6d:78:
9d:d4:44:bf:ee:98:eb:86:3d:77:c0:24:b2:ba:f7:
3c:2b:36:e6:54:fc:af:24:81:59:1f:ea:54:78:29:
6a:82:49:51:29:50:a9:62:f3:85:22:d9:0b:0f:cd:
5e:46:de:7d:60:21:36:66:0e:43:0d:10:72:7a:ce:
c5:fe:fd:ae:ef:39:f3:6c:9f:e1:6d:51:c7:98:d6:
51:ee:c2:15:22:97:ff:e1:03:f3:c8:a7:80:ae:13:
d5:93:f7:b3:58:61:31:25:89:79:c6:83:61:d3:fa:
06:44:4e:5a:fd:41:08:45:be:c7:e2:4b:25:f5:6c:
12:01:d2:2e:ae:23:e8:08:4a:69:e1:47:66:a8:fd:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:D3:75:AD:74:90:95:A8:8F:A6:5C:34:87:CA:E8:6E:20:17:4A
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:12:b2:92:26:7c:f8:88:86:ed:9a:7c:df:ee:0e:32:61:d7:
82:fb:a9:7d:9b:7b:83:ef:17:21:cc:a0:3f:f5:94:0e:ad:67:
79:68:04:f0:6c:d2:be:31:ae:01:45:dd:63:ae:ed:e2:63:15:
73:1a:54:54:90:7d:98:13:5d:89:e3:99:1c:9a:8d:5e:a4:4f:
f8:32:75:2c:2b:25:1c:8d:ef:e2:40:85:4f:fb:09:3d:b2:83:
ff:a3:1d:af:b8:ff:ca:01:88:32:ef:6c:3e:21:fc:d3:03:f3:
52:ba:91:63:51:e2:8e:95:22:63:aa:b3:fa:d8:33:47:28:e1:
24:aa:1d:62:b6:f8:0d:20:0b:d6:eb:6e:61:a4:83:bf:83:5a:
bf:ce:53:5d:65:c1:92:e3:e6:1d:4d:77:7b:27:fb:95:ce:3e:
7b:e6:10:9d:d1:57:40:e9:82:8d:b1:17:ec:54:69:c9:5b:31:
09:ff:b9:0b:cd:76:69:6d:48:55:71:3d:31:24:16:1a:b4:cd:
83:82:36:8e:5e:e1:2f:e0:13:00:38:10:47:e4:d0:40:4e:71:
70:d7:a7:50:c9:4f:b1:46:bc:57:9a:5e:4f:3c:7e:d9:70:4e:
71:f1:af:76:ca:db:72:df:be:4a:49:4f:06:cc:26:e1:32:55:
12:2d:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:14:47 2026 by rpki-client