
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
File: DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft (raw, json)
Hash identifier: eGLv4zDBqEVRiAqkzmGI8JofjJ76X42Jp2kQDoD/ysc=
Subject key identifier: BF:BC:67:0B:78:91:51:D9:F4:77:A4:66:B0:40:5C:0E:19:AE:DC:A3
Authority key identifier: 0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
Certificate issuer: /CN=A91E8161/serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Certificate serial: 1772
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
Manifest number: 175F
Signing time: Thu 16 Apr 2026 16:32:45 +0000
Manifest this update: Thu 16 Apr 2026 16:32:45 +0000
Manifest next update: Thu 23 Apr 2026 16:32:45 +0000
Files and hashes: 1: DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl (hash: Ij/R6T0kHyqVDtjj9Mu16esybSV1iQ2npAJnH0aLdkE=)
2: C109FFF4FC0511E7BAFB3E48C4F9AE02.roa (hash: ixlZRVOoeUZJ75nnpCsBl4fkLgRW7J4+9KrLoGwUAJc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 16:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6002 (0x1772)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E8161, serialNumber=0F0BCEE15ADB6D57D02CD04B45223AB8066A545D
Validity
Not Before: Apr 16 16:32:45 2026 GMT
Not After : Apr 23 16:32:45 2026 GMT
Subject: CN=69e10f2d-9d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:02:5c:be:19:83:c4:e0:ec:fc:37:48:aa:f6:
a4:e2:d9:cf:22:04:46:11:4a:f1:81:f8:4c:20:9b:
9d:90:28:53:0a:84:ce:b2:4d:18:f8:b9:84:8c:56:
8c:c9:04:d6:65:76:01:c5:d2:03:c9:1c:3c:08:49:
95:5d:53:b1:96:e5:37:8f:52:63:a9:51:04:fd:2b:
6b:4e:a4:61:37:81:cb:ec:81:8b:ab:6f:10:90:44:
05:75:3f:5d:ef:ed:fe:3b:a3:d8:c1:ae:14:f0:db:
65:4a:5b:33:45:51:a6:b5:18:e0:a7:55:20:cf:8d:
82:c3:a0:b8:12:49:3d:3c:f6:ca:59:9a:f5:f3:9c:
ba:b7:7e:06:b8:b0:b1:a5:18:5a:cf:11:4d:51:98:
08:1c:56:28:d0:8e:3d:af:53:08:fc:8d:b0:06:24:
b4:0e:53:b1:18:40:a3:d8:a3:c1:d0:67:2f:99:4b:
8c:be:b7:28:ea:33:40:16:f1:aa:f9:32:42:0d:3f:
cf:25:34:c2:91:f6:dd:4d:ea:2b:d9:50:b4:73:05:
25:57:f2:9a:5a:fd:b1:a0:49:3a:34:21:61:bc:b4:
c7:46:0b:41:92:70:48:f8:d4:bf:b3:39:2c:69:6e:
01:45:38:2b:23:9b:cc:ed:f4:4c:8f:cd:33:4c:03:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:67:0B:78:91:51:D9:F4:77:A4:66:B0:40:5C:0E:19:AE:DC:A3
X509v3 Authority Key Identifier:
keyid:0F:0B:CE:E1:5A:DB:6D:57:D0:2C:D0:4B:45:22:3A:B8:06:6A:54:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DwvO4VrbbVfQLNBLRSI6uAZqVF0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8161/670612B0FA6411E7A4C2693EC4F9AE02/DwvO4VrbbVfQLNBLRSI6uAZqVF0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d1:f6:36:c1:cc:a3:cb:da:6a:db:7b:1a:bf:b3:8b:1a:74:
ae:df:d2:72:ea:48:2d:b4:0c:8e:47:f4:b0:16:c9:74:94:d7:
ff:4b:4d:9e:69:45:d3:64:fb:ca:22:5a:2a:e7:ad:f4:0e:37:
80:54:01:17:f8:6e:7f:a1:4a:b9:87:bc:40:b3:33:1b:74:fb:
04:4d:e4:a1:62:44:b5:9e:4a:45:40:c8:26:b8:4b:83:31:3b:
8f:7b:8e:3f:1e:d0:20:01:45:1b:43:62:e6:20:9c:39:b5:b7:
f5:82:c1:85:bb:83:e3:e5:ad:37:60:ed:c3:69:aa:ea:b8:21:
ae:f8:f3:31:94:6c:9b:40:6d:ff:79:6e:0d:2b:ec:4e:1f:82:
e0:f4:d9:4d:f9:75:5e:37:a1:5d:a8:dd:99:e7:53:c0:a3:b5:
8c:75:ca:60:37:83:82:07:eb:f5:d9:fa:4c:12:41:7f:dc:f3:
8b:a1:83:d1:9f:77:4e:13:0e:ac:70:13:37:75:44:a9:d8:46:
2c:29:73:6b:a3:28:84:09:99:f3:53:7a:3d:bc:84:83:8c:80:
c1:da:b7:24:ae:16:b7:85:85:fa:18:d7:e8:d8:7e:e2:51:c1:
ab:5e:43:ee:f5:a7:3a:a1:0c:61:79:fa:05:7d:5c:6e:75:81:
7d:8e:7e:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgxNjExMTAvBgNVBAUTKDBGMEJDRUUxNUFEQjZENTdEMDJDRDA0QjQ1MjIzQUI4
MDY2QTU0NUQwHhcNMjYwNDE2MTYzMjQ1WhcNMjYwNDIzMTYzMjQ1WjAYMRYwFAYD
VQQDEw02OWUxMGYyZC05ZDgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmgJcvhmDxODs/DdIqvak4tnPIgRGEUrxgfhMIJudkChTCoTOsk0Y+LmEjFaM
yQTWZXYBxdIDyRw8CEmVXVOxluU3j1JjqVEE/StrTqRhN4HL7IGLq28QkEQFdT9d
7+3+O6PYwa4U8NtlSlszRVGmtRjgp1Ugz42Cw6C4Ekk9PPbKWZr185y6t34GuLCx
pRhazxFNUZgIHFYo0I49r1MI/I2wBiS0DlOxGECj2KPB0GcvmUuMvrco6jNAFvGq
+TJCDT/PJTTCkfbdTeor2VC0cwUlV/KaWv2xoEk6NCFhvLTHRgtBknBI+NS/szks
aW4BRTgrI5vM7fRMj80zTANWHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL+8Zwt4
kVHZ9HekZrBAXA4ZrtyjMB8GA1UdIwQYMBaAFA8LzuFa221X0CzQS0UiOrgGalRd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODE2MS82NzA2MTJCMEZB
NjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJWZlFMTkJMUlNJNnVBWnFW
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0R3dk80VnJiYlZmUUxOQkxSU0k2dUFacVZGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODE2MS82NzA2MTJCMEZBNjQxMUU3QTRDMjY5M0VDNEY5QUUwMi9Ed3ZPNFZyYmJW
ZlFMTkJMUlNJNnVBWnFWRjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALdH2NsHMo8vaatt7Gr+zixp0rt/ScupILbQMjkf0sBbJdJTX/0tNnmlF02T7
yiJaKuet9A43gFQBF/huf6FKuYe8QLMzG3T7BE3koWJEtZ5KRUDIJrhLgzE7j3uO
Px7QIAFFG0Ni5iCcObW39YLBhbuD4+WtN2Dtw2mq6rghrvjzMZRsm0Bt/3luDSvs
Th+C4PTZTfl1XjehXajdmedTwKO1jHXKYDeDggfr9dn6TBJBf9zzi6GD0Z93ThMO
rHATN3VEqdhGLClza6MohAmZ81N6PbyEg4yAwdq3JK4Wt4WF+hjX6Nh+4lHBq15D
7vWnOqEMYXn6BX1cbnWBfY5+YQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:47 2026 by rpki-client