
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json)
Hash identifier: b5W0lUGQPVASdXsrYtA+IvR/I3ks6aYV44uUcsmzDuw=
Subject key identifier: B5:1C:19:AC:D4:EE:FE:32:02:7E:A6:99:EB:5F:99:09:49:D0:DC:8A
Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Certificate serial: 04BF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
Manifest number: 04A6
Signing time: Sun 20 Sep 2026 23:45:17 +0000
Manifest this update: Sun 20 Sep 2026 23:45:16 +0000
Manifest next update: Sun 27 Sep 2026 23:45:16 +0000
Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: XQSo1L6MUZViQFbY6nczRd0Kb1n1C1A0z8x9/8OxNJ4=)
2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: Yd4aj0Xz2uIrQ1PLk7dpencIrjVP/srZ0d6+nM1nW20=)
3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: VF/yOEpWsOo4vNzEYgZ7XcVUKEX9pgfOe0DLJMbLn2Y=)
4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: 5C0/u4C53UqpaffmN8FC5wF2DCitwcKnVPAroKK+u3Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5
Validity
Not Before: Sep 20 23:45:16 2026 GMT
Not After : Sep 27 23:45:16 2026 GMT
Subject: CN=6ab0700c-2a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:be:ca:92:2f:2b:05:ce:13:14:c2:b5:5d:
3a:bf:11:43:95:16:5f:89:4b:7e:42:47:bc:22:77:
e8:1d:c7:96:a4:92:de:5b:08:6e:72:9c:5a:00:f7:
cb:b6:3a:88:e8:94:84:06:0f:22:7f:24:c4:b5:28:
b9:35:b4:41:f7:9f:a1:57:34:89:87:04:6a:9c:c3:
2b:d9:a5:eb:89:4a:74:6b:d8:4b:f5:23:29:4f:f8:
1a:8d:0b:e8:7a:33:68:18:b6:53:55:27:7f:06:47:
e3:03:42:66:e4:b3:f6:7e:fc:ed:d0:07:a9:3c:73:
7e:ae:d3:10:e7:da:cc:74:b9:12:bb:27:32:e4:26:
fb:15:53:a7:e3:e6:64:ef:0b:ce:63:95:f0:9f:b6:
3f:73:f9:5e:2c:1a:6d:4b:7d:64:7e:d1:1d:ed:df:
af:aa:42:93:0a:37:05:d9:62:93:59:ae:1d:15:59:
c9:09:55:43:04:64:1d:1f:99:a1:b9:eb:40:c1:17:
9c:78:0b:fa:2a:b0:19:e8:da:22:9f:26:92:77:81:
84:59:90:45:58:3c:f9:d5:26:32:b1:e8:88:85:dc:
77:28:47:58:9f:37:3d:67:34:4e:91:54:b0:8c:81:
08:3a:c1:4a:da:21:3f:75:50:ee:69:bb:3b:c7:33:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1C:19:AC:D4:EE:FE:32:02:7E:A6:99:EB:5F:99:09:49:D0:DC:8A
X509v3 Authority Key Identifier:
keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:da:1c:0b:03:f1:56:11:6b:52:57:35:c4:56:56:48:ec:6c:
6b:2b:b5:9f:92:7f:39:25:1d:e1:0b:09:e7:57:7f:4f:e1:63:
8f:29:06:8e:40:db:dd:35:85:be:3b:ae:2e:4d:e7:c3:74:73:
5b:2f:da:96:24:94:06:e9:58:5c:d0:a0:7b:c0:45:3b:2e:0d:
ee:95:3a:7c:5b:31:8a:3e:ff:5e:0b:7c:14:a0:14:3b:62:30:
6e:3f:3b:f7:80:05:4a:01:0f:dc:83:be:17:b5:f5:7c:e8:53:
1d:5b:7a:0f:fa:3a:2d:9e:3b:7c:1f:66:3f:f4:ed:d7:2f:80:
e8:3d:92:72:77:de:ea:61:27:41:6f:b9:60:f5:22:1c:51:20:
d9:81:3c:53:9c:58:bc:88:c4:5b:81:a3:57:a9:b4:52:63:d8:
df:66:f2:1d:b6:37:e6:15:1e:14:35:79:71:8a:24:f1:1c:8e:
9e:9d:03:97:4e:a6:c0:fa:8c:6e:84:fb:5c:44:6f:09:9f:bd:
02:a4:ff:f5:70:c6:f9:96:b5:67:ed:6f:22:49:b0:64:0b:c0:
4b:ee:ea:b1:a8:0e:58:29:90:c1:b3:b3:29:3f:67:f7:70:1d:
98:d9:ec:04:0f:cd:42:a1:b3:58:2e:a5:84:3b:58:5e:11:05:
e8:7e:8d:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx
N0VENTZBRTUwHhcNMjYwOTIwMjM0NTE2WhcNMjYwOTI3MjM0NTE2WjAYMRYwFAYD
VQQDEw02YWIwNzAwYy0yYTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyr6+ypIvKwXOExTCtV06vxFDlRZfiUt+Qke8InfoHceWpJLeWwhucpxaAPfL
tjqI6JSEBg8ifyTEtSi5NbRB95+hVzSJhwRqnMMr2aXriUp0a9hL9SMpT/gajQvo
ejNoGLZTVSd/BkfjA0Jm5LP2fvzt0AepPHN+rtMQ59rMdLkSuycy5Cb7FVOn4+Zk
7wvOY5Xwn7Y/c/leLBptS31kftEd7d+vqkKTCjcF2WKTWa4dFVnJCVVDBGQdH5mh
uetAwReceAv6KrAZ6NoinyaSd4GEWZBFWDz51SYyseiIhdx3KEdYnzc9ZzROkVSw
jIEIOsFK2iE/dVDuabs7xzMfKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLUcGazU
7v4yAn6mmetfmQlJ0NyKMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2
MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD
RzluSW5yUEV2dGdYN1ZhdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHNocCwPxVhFrUlc1xFZWSOxsayu1n5J/OSUd4QsJ51d/T+FjjykGjkDb3TWF
vjuuLk3nw3RzWy/aliSUBulYXNCge8BFOy4N7pU6fFsxij7/Xgt8FKAUO2Iwbj87
94AFSgEP3IO+F7X1fOhTHVt6D/o6LZ47fB9mP/Tt1y+A6D2Scnfe6mEnQW+5YPUi
HFEg2YE8U5xYvIjEW4GjV6m0UmPY32byHbY35hUeFDV5cYok8RyOnp0Dl06mwPqM
boT7XERvCZ+9AqT/9XDG+Za1Z+1vIkmwZAvAS+7qsagOWCmQwbOzKT9n93AdmNns
BA/NQqGzWC6lhDtYXhEF6H6NXw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:17:56 2026 by rpki-client