
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File: dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier: 3sDzZteONHJaN330TN+kwMYh/9gyw0A2Bg+EE1zPiHI=
Subject key identifier: A4:DF:0D:A2:FE:2A:91:C9:90:74:2A:0A:FD:9A:1D:01:B9:EA:67:F8
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer: /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number: 4C
Signing time: Thu 05 Nov 2026 09:23:09 +0000
Manifest this update: Thu 05 Nov 2026 09:23:09 +0000
Manifest next update: Thu 12 Nov 2026 09:23:09 +0000
Files and hashes: 1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: MtR9HGkJckUpA1/ZKksWwjJNbra9OkYln9NCsqcV2wA=)
2: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
3: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
4: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Nov 2026 09:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Validity
Not Before: Nov 5 09:23:09 2026 GMT
Not After : Nov 12 09:23:09 2026 GMT
Subject: CN=6aec4afd-da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6c:15:1e:0a:9d:3f:07:2b:f4:23:fe:b2:79:
07:c6:93:04:d8:7a:49:35:19:7e:df:2a:3c:78:ac:
0b:8f:ad:bf:d6:87:a6:2c:18:d6:8f:28:34:81:b3:
a2:1f:ae:8d:3b:5a:2b:f4:c7:4b:a6:3e:f2:20:65:
d8:2b:b7:8b:47:46:f4:7a:fa:b6:22:48:ec:4d:bc:
07:68:95:3e:46:6a:da:09:b0:b2:d4:92:ea:27:27:
a1:e1:0c:89:48:3a:7d:09:ba:6b:56:49:a8:c9:d9:
03:8e:a9:df:b0:84:51:78:98:c8:10:3b:18:5b:6a:
7e:d8:f1:43:c1:a8:c4:69:61:ba:50:80:ce:7e:39:
e6:ce:9c:33:a6:d4:0f:c7:65:7d:a5:b1:2a:8e:51:
3e:1f:29:f6:b6:b1:58:74:df:e5:2c:f6:4a:e0:63:
6c:19:00:2d:62:9f:f5:00:d8:d2:c5:7a:47:cf:f0:
a3:75:93:29:08:27:12:f6:75:fb:db:3d:8c:63:df:
c2:dd:4e:b2:ee:7c:81:56:7e:11:0f:e5:53:43:3d:
e1:d7:e4:a9:09:7a:fb:85:bf:ba:2a:39:c1:c7:cf:
8c:30:45:c3:d2:bc:95:fd:6a:ee:14:7a:ce:ae:c9:
b0:0e:be:1a:57:c6:64:d3:0a:dc:08:e2:cf:7c:35:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DF:0D:A2:FE:2A:91:C9:90:74:2A:0A:FD:9A:1D:01:B9:EA:67:F8
X509v3 Authority Key Identifier:
keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:08:16:9a:03:8a:f9:a4:6e:3b:6b:5f:02:fa:e1:d1:a9:18:
87:d9:69:3d:eb:d0:e5:92:1a:87:3e:eb:47:26:1c:07:ff:c7:
14:38:ce:84:8c:13:a1:ad:24:db:9c:18:89:dd:17:48:30:2a:
45:cf:10:17:0a:05:26:fa:d2:34:f4:b2:8b:cb:76:70:20:da:
6c:ce:6d:14:e4:2b:8b:99:4e:e5:56:71:b7:02:09:ce:ac:58:
cb:91:81:57:48:22:ab:2b:8b:81:13:b4:f4:85:bf:06:95:96:
5d:a6:b8:74:e4:a9:ac:be:27:56:3b:b6:70:06:b0:f6:26:28:
54:5e:80:dc:96:c4:9e:56:36:65:1d:06:8d:68:12:18:c9:e1:
ed:a1:dc:dc:84:98:b6:e0:7a:08:bc:0f:70:d7:8e:27:e1:27:
8a:10:d4:ef:ea:c6:a6:10:10:30:a0:52:58:d9:48:cd:13:96:
97:2a:52:cb:52:04:1b:66:65:72:85:f8:83:44:12:42:2b:e5:
02:4f:10:c7:49:f4:76:f6:3d:dc:79:ef:b6:d4:22:0d:5e:96:
eb:53:1e:1b:d9:bf:a2:61:b8:46:ad:9d:5a:ff:3c:b3:01:47:
cc:1f:27:ee:07:98:2f:ac:29:13:25:a1:c3:4a:9c:df:bf:73:
d3:47:38:15
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
RTRBOTExMC8GA1UEBRMoNzZEQzAxOTY2MjY5QTg2NDhCMTFDNDI1NDAyODAzNUEz
NjlGMTVFQzAeFw0yNjExMDUwOTIzMDlaFw0yNjExMTIwOTIzMDlaMBgxFjAUBgNV
BAMTDTZhZWM0YWZkLWRhNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLbBUeCp0/Byv0I/6yeQfGkwTYekk1GX7fKjx4rAuPrb/Wh6YsGNaPKDSBs6If
ro07Wiv0x0umPvIgZdgrt4tHRvR6+rYiSOxNvAdolT5GatoJsLLUkuonJ6HhDIlI
On0JumtWSajJ2QOOqd+whFF4mMgQOxhban7Y8UPBqMRpYbpQgM5+OebOnDOm1A/H
ZX2lsSqOUT4fKfa2sVh03+Us9krgY2wZAC1in/UA2NLFekfP8KN1kykIJxL2dfvb
PYxj38LdTrLufIFWfhEP5VNDPeHX5KkJevuFv7oqOcHHz4wwRcPSvJX9au4Ues6u
ybAOvhpXxmTTCtwI4s98NWeHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUpN8Nov4q
kcmQdCoK/ZodAbnqZ/gwHwYDVR0jBBgwFoAUdtwBlmJpqGSLEcQlQCgDWjafFeww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFNEE5L0U4MEE0NkE0NkQz
NTExRjE5M0U2RkMyNjZGNDdBODg4L2R0d0JsbUpwcUdTTEVjUWxRQ2dEV2phZkZl
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZHR3QmxtSnBxR1NMRWNRbFFDZ0RXamFmRmV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlF
NEE5L0U4MEE0NkE0NkQzNTExRjE5M0U2RkMyNjZGNDdBODg4L2R0d0JsbUpwcUdT
TEVjUWxRQ2dEV2phZkZldy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQASCBaaA4r5pG47a18C+uHRqRiH2Wk969DlkhqHPutHJhwH/8cUOM6EjBOhrSTb
nBiJ3RdIMCpFzxAXCgUm+tI09LKLy3ZwINpszm0U5CuLmU7lVnG3AgnOrFjLkYFX
SCKrK4uBE7T0hb8GlZZdprh05KmsvidWO7ZwBrD2JihUXoDclsSeVjZlHQaNaBIY
yeHtodzchJi24HoIvA9w144n4SeKENTv6samEBAwoFJY2UjNE5aXKlLLUgQbZmVy
hfiDRBJCK+UCTxDHSfR29j3cee+21CINXpbrUx4b2b+iYbhGrZ1a/zyzAUfMHyfu
B5gvrCkTJaHDSpzfv3PTRzgV
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:27:40 2026 by rpki-client