
$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
File: dtwBlmJpqGSLEcQlQCgDWjafFew.mft (raw, json)
Hash identifier: FkH+HpqlXjYs81n6brrUwyUuV4OoQm9yBNN7Dp7emYA=
Subject key identifier: 4A:B6:56:1A:70:6E:47:92:0E:0B:4C:96:82:AB:43:87:08:56:71:6D
Authority key identifier: 76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
Certificate issuer: /CN=A919E4A9/serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
Manifest number: 18
Signing time: Mon 27 Jul 2026 11:26:06 +0000
Manifest this update: Mon 27 Jul 2026 11:26:05 +0000
Manifest next update: Mon 03 Aug 2026 11:26:05 +0000
Files and hashes: 1: dtwBlmJpqGSLEcQlQCgDWjafFew.crl (hash: Vj5xi6WxfmC59c1HETPbZND9g8OnuOhuz4go6qRd8KU=)
2: 1BDA0F506D4011F1A585AE4B7347A888.roa (hash: wpnVumsB2f8dA1T8SzbB3vP+w3jToecyu35SvlLd2e4=)
3: 0A3499FA6D4011F18402C72C7347A888.roa (hash: IcAFoiT1xNzuxGEcSGlqRhiYhlm73dEBd3/qHI8dWW0=)
4: DF6CFFE66D3F11F1AD19B30B7347A888.roa (hash: Xkludu2C6ECpMoaKu70hUDHxFQYA88cJcDG8muAieG4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 11:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919E4A9, serialNumber=76DC01966269A8648B11C4254028035A369F15EC
Validity
Not Before: Jul 27 11:26:05 2026 GMT
Not After : Aug 3 11:26:05 2026 GMT
Subject: CN=6a67404d-5271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:c8:fa:fc:99:65:5c:8d:10:a7:34:02:e5:
e7:7c:9c:be:da:79:90:a1:04:67:37:4c:36:29:c4:
8f:fb:cf:a3:37:dd:c5:4d:ed:26:fd:12:1c:ad:a9:
69:8e:20:e2:7b:f6:64:04:d7:b4:f9:2f:24:b8:9d:
ed:bb:ba:45:48:94:e9:c4:a4:18:51:62:fb:51:01:
59:d0:6a:4d:45:f6:73:3a:71:b3:c8:4e:1f:97:f3:
67:94:a4:e3:6f:87:6f:85:14:d3:8b:b2:a3:cf:53:
6e:38:f5:51:9b:1d:25:d0:f1:fa:f9:10:f4:65:14:
b0:45:21:5d:a4:5b:a5:0a:d3:b1:8b:0c:0f:11:29:
03:3e:68:4e:0a:52:56:b9:36:8d:2e:5d:9c:ab:d7:
58:81:67:8f:54:9d:1e:9c:18:92:bf:6b:82:a1:54:
b9:0c:13:1a:d4:b8:e3:80:4b:fb:40:43:12:d5:c3:
e3:e7:1d:73:55:71:84:04:7a:74:3b:97:a2:76:38:
69:6a:bf:66:ce:b7:d8:14:17:d1:22:0a:fb:81:9c:
a6:10:40:46:cf:93:2f:c1:eb:6c:ff:ef:5a:dd:6c:
25:c2:d9:ca:db:b5:39:27:44:22:e9:d6:95:2f:5a:
86:ee:c6:e1:4b:95:10:0f:c8:f8:bb:ac:57:79:65:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:56:1A:70:6E:47:92:0E:0B:4C:96:82:AB:43:87:08:56:71:6D
X509v3 Authority Key Identifier:
keyid:76:DC:01:96:62:69:A8:64:8B:11:C4:25:40:28:03:5A:36:9F:15:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtwBlmJpqGSLEcQlQCgDWjafFew.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4A9/E80A46A46D3511F193E6FC266F47A888/dtwBlmJpqGSLEcQlQCgDWjafFew.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8d:cf:38:03:22:d9:66:43:6a:18:40:c9:80:19:41:f1:1f:
55:c6:58:17:ff:12:74:20:8f:62:87:50:15:13:92:c8:d1:31:
33:36:fe:75:59:ed:1c:c5:19:ab:96:e3:dc:17:e6:c8:43:3e:
ec:b6:d6:1a:83:5e:5d:3b:ca:aa:7c:09:ea:b0:21:06:a0:ee:
0a:ca:65:c5:5a:fb:58:9a:17:ca:ee:5c:13:9f:0d:59:f2:e9:
29:29:d9:d2:10:01:03:97:dc:01:8c:2f:0e:94:2b:b4:5d:30:
b7:21:1f:47:e1:3d:63:3a:da:45:00:28:b9:7b:63:da:bf:c2:
b8:18:cc:7c:e1:14:a8:5e:29:1d:ff:35:98:7e:10:a3:18:10:
9c:57:4c:f7:8e:18:57:5e:7e:89:3e:56:d4:e5:c5:69:96:0f:
24:d7:51:20:77:7a:67:c8:9f:eb:cc:0a:c5:c5:54:ff:b6:5c:
24:05:95:75:71:1b:a2:58:9a:a7:37:44:a5:c4:52:9b:c8:ef:
7c:10:1f:3e:43:f7:bf:2f:95:5e:4e:29:89:e2:47:4b:b5:eb:
24:3c:1e:c5:49:13:85:60:9b:03:59:42:65:88:39:ea:85:56:
db:6a:64:c0:31:52:72:b1:bc:b1:44:c7:54:e8:9b:44:0c:ba:
81:39:6f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:41 2026 by rpki-client