
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
File: DWVNb87NM-FRbiDC43NPhUBuckY.mft (raw, json)
Hash identifier: NKHXhOcfoN4xk4U539rKJqPopxpJ1Ck8nvAHndVpSmI=
Subject key identifier: 86:96:D4:BE:57:54:18:2C:BC:D5:11:9D:0A:AA:DA:FF:7B:96:3A:C4
Authority key identifier: 0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
Certificate issuer: /CN=A91ECB9B/serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Certificate serial: 050D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
Manifest number: 0505
Signing time: Mon 02 Mar 2026 01:43:28 +0000
Manifest this update: Mon 02 Mar 2026 01:43:26 +0000
Manifest next update: Mon 09 Mar 2026 01:43:26 +0000
Files and hashes: 1: DWVNb87NM-FRbiDC43NPhUBuckY.crl (hash: 4eq/u7JOJKSQ7Y3z7JBHvfI2hHcGtaRYyEB9QBW7ou4=)
2: 48BEEFFEF52F11EDADE1B280C4F9AE02.roa (hash: cOiTv4jIjEC1QGh5pKSW61/U/hcuKiSP4jdxBNCSef0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1293 (0x50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECB9B, serialNumber=0D654D6FCECD33E1516E20C2E3734F85406E7246
Validity
Not Before: Mar 2 01:43:26 2026 GMT
Not After : Mar 9 01:43:26 2026 GMT
Subject: CN=69a4eb40-e54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:6d:f5:4e:c3:d2:b4:5f:a4:79:1e:de:38:
a0:3e:f1:c1:5a:4f:26:9e:05:10:0f:cb:4c:c3:86:
0c:88:7c:18:eb:42:1e:58:0d:80:44:08:21:08:9b:
87:14:2c:fa:d1:fb:ec:76:52:da:96:38:6a:60:2e:
67:a8:f8:87:a8:55:0d:15:61:e3:e3:fc:2d:0d:c7:
7c:d4:a0:56:3e:06:94:68:9a:dc:19:1b:a1:73:f3:
e2:9e:b9:5f:56:4c:20:5e:04:1b:77:2d:8d:74:1d:
2e:ed:15:7c:0d:23:db:29:c5:c5:f8:66:62:18:97:
86:cc:c2:1f:d3:50:b4:66:43:c1:eb:23:70:ec:3e:
03:07:17:bb:f3:c4:a5:26:f8:37:92:d3:7b:41:42:
45:38:93:f4:90:94:ae:eb:34:51:19:99:b9:ac:44:
9e:a4:ac:8c:28:44:23:dd:c6:a6:4a:4f:0b:26:db:
1b:dd:24:1c:8c:6d:6b:47:a3:a5:0d:cf:86:90:c8:
df:39:c7:e8:69:36:7c:96:2b:14:d1:ca:59:84:37:
f4:ce:ca:ec:26:7a:90:a9:97:0d:17:59:19:a3:ff:
2e:05:48:25:3e:25:e2:8c:ec:f8:99:fa:fe:2f:d2:
18:59:01:91:0a:79:26:40:27:6c:28:e7:90:37:61:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:96:D4:BE:57:54:18:2C:BC:D5:11:9D:0A:AA:DA:FF:7B:96:3A:C4
X509v3 Authority Key Identifier:
keyid:0D:65:4D:6F:CE:CD:33:E1:51:6E:20:C2:E3:73:4F:85:40:6E:72:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DWVNb87NM-FRbiDC43NPhUBuckY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECB9B/39DA287045DE11ECA823C571C4F9AE02/DWVNb87NM-FRbiDC43NPhUBuckY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:66:5e:00:bd:5f:69:1b:40:09:1a:0d:9b:4e:ee:f3:39:14:
07:80:8c:b4:9b:a0:8b:a8:3d:f1:ea:08:05:39:5d:b1:18:7e:
d3:a5:bd:da:0a:75:79:2e:1a:f6:80:4e:f3:22:d4:d6:7c:98:
dc:39:76:37:53:4b:aa:49:b7:ed:db:d4:01:3b:e9:10:45:8b:
aa:c6:1b:2d:64:88:33:8a:85:80:7e:5d:3f:f6:dc:78:ae:e6:
93:46:6f:5e:d6:62:47:74:45:c2:4e:e1:12:5f:91:03:0c:95:
18:12:04:b9:c0:c8:25:07:ec:d6:3b:7e:09:64:e3:ca:2b:49:
a4:cf:37:b5:17:9e:5a:c6:9d:d7:03:d5:40:00:76:13:4e:98:
c8:93:d3:61:13:81:2c:8b:f7:9f:be:d8:a8:dd:64:46:04:17:
49:fa:ac:ab:d1:08:0f:c6:70:5f:a9:c2:ef:3a:98:15:c0:c8:
f2:c5:b4:eb:04:df:89:3b:03:ef:ac:9d:14:e3:a7:7a:f1:6c:
6b:f3:af:98:14:e4:9e:7a:e7:cb:38:05:e3:6e:0f:ad:fe:8f:
0f:08:8f:61:04:a9:2e:58:90:98:54:f5:d8:d0:2f:00:b4:80:
57:f6:c9:ed:06:6c:2b:77:19:59:99:1c:9e:42:9c:31:fd:1e:
c4:4e:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:48 2026 by rpki-client