
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier: zT//Tz52Ro2m6TjnOA24+neuLyfwuZSQNL2cu+St5/w=
Subject key identifier: 76:56:7B:7B:F5:24:C5:4F:30:6F:0A:A8:65:20:A9:36:45:78:08:31
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial: 17C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number: 17B0
Signing time: Tue 22 Sep 2026 16:30:28 +0000
Manifest this update: Tue 22 Sep 2026 16:30:28 +0000
Manifest next update: Tue 29 Sep 2026 16:30:28 +0000
Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: X9cGD5ctpqHLnMyVxOQ0rFdjMBIl5PIiMB2jJK/70aU=)
2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: ixlZRVOoeUZJ75nnpCsBl4fkLgRW7J4+9KrLoGwUAJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 15:21:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6083 (0x17c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Validity
Not Before: Sep 22 16:30:28 2026 GMT
Not After : Sep 29 16:30:28 2026 GMT
Subject: CN=6ab2ad24-b5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4e:d7:45:8b:3f:08:61:32:93:ff:ca:3a:b9:
15:e3:9f:8b:c3:8a:ac:35:70:13:f3:91:ec:1e:a9:
54:e3:48:52:b3:00:f6:aa:9c:7d:cf:40:fd:05:46:
8e:cb:f7:bf:f6:a9:71:03:c6:99:04:27:cf:4d:eb:
fd:a5:d7:9c:a6:f1:ba:9b:91:b0:88:00:ef:ec:67:
25:e4:7f:29:38:dc:2e:fd:62:9b:33:97:40:12:9f:
af:28:dd:c2:21:5b:41:33:fd:3d:ce:12:94:fd:77:
df:88:38:a8:a8:2b:e2:04:73:54:32:c5:69:b6:6d:
10:20:27:da:c6:3d:33:e1:f5:89:32:c2:28:86:45:
0c:2e:86:a8:ce:dc:45:64:6a:55:45:72:b4:93:e7:
76:90:f4:63:1e:94:ab:82:f5:9a:3c:cd:fe:7c:62:
61:51:14:6c:86:ca:f9:82:1d:f8:5a:af:c4:8d:56:
32:2f:49:69:c2:06:9c:28:e7:82:bb:e2:78:ce:46:
0d:0e:1a:87:ee:a5:91:c9:6b:75:cc:b5:bd:e4:b8:
42:b4:18:84:ca:3a:98:98:52:6d:dc:9e:96:87:65:
ba:f2:03:dc:67:24:cc:a8:09:49:c5:e3:43:76:38:
b5:0c:fc:b1:91:ca:9c:9c:dc:3d:fb:b6:c5:f1:d4:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:56:7B:7B:F5:24:C5:4F:30:6F:0A:A8:65:20:A9:36:45:78:08:31
X509v3 Authority Key Identifier:
keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d1:90:d2:20:2e:80:6d:2f:95:ff:4d:ba:0a:ea:f0:24:fe:
be:0e:df:09:ad:8d:3d:57:d5:48:9d:ce:97:53:d4:85:1b:23:
3c:4a:63:fd:60:2b:7d:07:17:88:9b:12:6e:55:7b:37:4d:4f:
00:ca:03:d1:29:20:ce:9c:61:65:56:d5:9f:f7:fe:33:26:04:
01:96:c6:20:9b:aa:f9:2e:ca:74:66:03:19:ed:aa:03:f1:d5:
37:b8:52:dc:e2:b6:91:ec:d6:7f:37:32:c1:b2:4e:d3:dc:4f:
01:d2:4a:ad:8a:e0:8b:73:8c:4d:ce:b1:c8:28:bc:06:80:7e:
c3:be:3a:80:43:ce:8b:ba:fd:55:9b:de:af:47:6f:70:ae:7e:
37:fe:b2:dc:b2:da:95:f4:d7:b8:73:9b:e0:ed:cf:c6:01:28:
9e:7e:a6:28:22:8e:de:33:3a:e6:04:97:50:92:67:d6:d3:8f:
92:d9:70:c3:b0:5d:9a:7b:ca:01:a5:9b:ea:bd:6e:11:65:41:
23:ad:16:87:b1:57:da:76:12:01:c3:7a:3d:f6:b5:42:08:bc:
6e:5b:9e:a5:34:2e:e1:53:00:99:c1:01:17:72:bc:4a:f3:62:
86:cc:04:f8:24:e2:e3:76:04:64:64:50:37:e2:01:b5:ae:12:
15:d7:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:04:12 2026 by rpki-client