
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json)
Hash identifier: in9iCgh0zXSyt6F2p5YioEelQ80ynzqoJ2vS3KCsTh8=
Subject key identifier: 3D:98:08:24:6A:13:E5:08:43:13:63:FB:44:93:C6:CF:BF:12:8C:D8
Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Certificate serial: 0576
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
Manifest number: 056E
Signing time: Tue 22 Sep 2026 22:59:56 +0000
Manifest this update: Tue 22 Sep 2026 22:59:55 +0000
Manifest next update: Tue 29 Sep 2026 22:59:55 +0000
Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: wMw9sYkLIitXXKegbE1h0rx04MXTjGA0V+/jnh/bZig=)
2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: cOiTv4jIjEC1QGh5pKSW61/U/hcuKiSP4jdxBNCSef0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1398 (0x576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Validity
Not Before: Sep 22 22:59:55 2026 GMT
Not After : Sep 29 22:59:55 2026 GMT
Subject: CN=6ab3086b-e84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c7:4f:8c:17:68:0b:a1:c7:98:66:3b:09:2e:
95:a5:0f:aa:bb:cc:b7:b6:d0:15:ec:42:03:51:4e:
22:a7:70:14:12:53:55:a7:1b:e1:fc:59:57:e2:4a:
35:c8:e4:a2:95:af:b5:24:ec:83:88:7d:05:aa:c0:
7c:88:86:b8:25:10:93:6b:a7:1f:5d:3e:c0:4d:fb:
83:1c:8c:33:66:95:52:71:b5:69:ca:ec:d8:f6:f6:
c9:95:07:48:91:e7:3a:5f:9a:6e:10:03:d9:0c:3a:
56:62:f7:f0:7f:32:13:1d:8c:e0:9b:bd:41:42:2d:
5f:d4:e1:15:5e:65:4a:e5:06:0c:5b:41:a1:02:cc:
dc:b2:27:f6:37:cc:23:32:27:78:7b:93:51:b4:c4:
f4:b1:07:df:1e:00:10:3e:fc:d6:7c:5e:b6:ed:97:
2c:fc:63:05:b9:22:0a:d7:9b:a8:c6:63:94:28:28:
95:4f:4c:93:1e:43:90:cf:1c:b6:79:db:4a:a6:fc:
ca:44:13:82:13:4e:bd:b9:2f:ec:c2:1d:8c:84:75:
ba:22:24:14:d8:51:24:71:36:d3:08:c0:31:09:ca:
bf:a0:a4:1a:02:e2:e4:5f:0b:e2:63:9d:8c:d9:d3:
d7:4b:75:e6:7b:61:54:fa:11:09:2f:9e:bb:50:7b:
94:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:08:24:6A:13:E5:08:43:13:63:FB:44:93:C6:CF:BF:12:8C:D8
X509v3 Authority Key Identifier:
keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:59:99:3b:5a:c5:1d:bd:1f:9c:0f:44:f5:24:35:fb:b3:b5:
20:59:00:f6:bc:fc:dd:4f:df:2f:ec:2f:30:ee:29:f7:cd:38:
87:da:48:11:b0:75:cc:b8:d7:23:f0:3d:87:c1:76:c4:89:d9:
dd:06:1f:f7:b1:cd:3c:da:bc:d5:ca:b8:0d:b2:67:13:2c:12:
a3:17:9d:5c:08:fe:ed:f7:e4:3e:ee:0d:23:3b:39:bf:cd:5b:
be:9e:63:44:96:71:47:95:d6:9f:67:62:03:ed:48:b3:7a:f9:
d7:b7:51:e5:23:3a:fb:f0:18:8d:e1:08:eb:ac:20:94:bc:dd:
0e:ba:cb:2f:b6:74:6e:eb:51:ab:9c:0f:33:b4:7a:80:a1:3c:
65:e0:c9:43:88:d3:6c:59:d4:3e:d0:2d:5f:27:94:7d:d0:73:
00:a1:ab:97:79:8a:3c:56:4d:8f:44:2f:9d:d8:5b:8e:e8:ea:
8c:11:c0:4a:4d:07:6b:25:5e:7f:07:0b:37:c9:83:91:10:52:
fe:4f:8b:34:f6:b7:52:ff:f3:90:9b:13:f2:12:f6:ce:03:60:
83:bc:2f:ee:08:03:b8:73:45:a5:e3:af:23:70:a3:fd:8a:c7:
7b:8b:63:a3:82:b2:52:45:d4:73:a3:52:64:3c:02:52:b7:ee:
78:41:de:05
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUNCOUIxMTAvBgNVBAUTKDBENjU0RDZGQ0VDRDMzRTE1MTZFMjBDMkUzNzM0Rjg1
NDA2RTcyNDYwHhcNMjYwOTIyMjI1OTU1WhcNMjYwOTI5MjI1OTU1WjAYMRYwFAYD
VQQDEw02YWIzMDg2Yi1lODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvcdPjBdoC6HHmGY7CS6VpQ+qu8y3ttAV7EIDUU4ip3AUElNVpxvh/FlX4ko1
yOSila+1JOyDiH0FqsB8iIa4JRCTa6cfXT7ATfuDHIwzZpVScbVpyuzY9vbJlQdI
kec6X5puEAPZDDpWYvfwfzITHYzgm71BQi1f1OEVXmVK5QYMW0GhAszcsif2N8wj
Mid4e5NRtMT0sQffHgAQPvzWfF627Zcs/GMFuSIK15uoxmOUKCiVT0yTHkOQzxy2
edtKpvzKRBOCE069uS/swh2MhHW6IiQU2FEkcTbTCMAxCcq/oKQaAuLkXwviY52M
2dPXS3Xme2FU+hEJL567UHuUEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2YCCRq
E+UIQxNj+0STxs+/EozYMB8GA1UdIwQYMBaAFA1lTW/OzTPhUW4gwuNzT4VAbnJG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0I5Qi8zOURBMjg3MDQ1
REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0tRlJiaURDNDNOUGhVQnVj
a1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RXVk5iODdOTS1GUmJpREM0M05QaFVCdWNrWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Q0I5Qi8zOURBMjg3MDQ1REUxMUVDQTgyM0M1NzFDNEY5QUUwMi9EV1ZOYjg3Tk0t
RlJiaURDNDNOUGhVQnVja1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAK1mZO1rFHb0fnA9E9SQ1+7O1IFkA9rz83U/fL+wvMO4p9804h9pIEbB1zLjX
I/A9h8F2xInZ3QYf97HNPNq81cq4DbJnEywSoxedXAj+7ffkPu4NIzs5v81bvp5j
RJZxR5XWn2diA+1Is3r517dR5SM6+/AYjeEI66wglLzdDrrLL7Z0butRq5wPM7R6
gKE8ZeDJQ4jTbFnUPtAtXyeUfdBzAKGrl3mKPFZNj0QvndhbjujqjBHASk0HayVe
fwcLN8mDkRBS/k+LNPa3Uv/zkJsT8hL2zgNgg7wv7ggDuHNFpeOvI3Cj/YrHe4tj
o4KyUkXUc6NSZDwCUrfueEHeBQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:51:35 2026 by rpki-client