
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File: diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier: SX3USbG7OD8fJkSCNMbwOQL0PAVW4K81jIU8llqXlpc=
Subject key identifier: DC:EB:D9:8F:D2:2C:8A:5E:8E:46:08:0F:D1:FA:B8:7F:E1:34:84:D3
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial: 014D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number: 0149
Signing time: Sun 11 Oct 2026 05:58:13 +0000
Manifest this update: Sun 11 Oct 2026 05:58:12 +0000
Manifest next update: Sun 18 Oct 2026 05:58:12 +0000
Files and hashes: 1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: HWsBmgULUhbQJfXg5aceU27Z47RymQpKY/JUIwyUQmM=)
2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Validity
Not Before: Oct 11 05:58:12 2026 GMT
Not After : Oct 18 05:58:12 2026 GMT
Subject: CN=6acb2575-4835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ce:e8:e2:21:15:b3:ab:b5:f9:6e:8b:f3:c8:
1a:d2:07:d8:5c:7c:44:65:33:1d:aa:8f:65:64:9a:
42:e8:72:1e:82:f8:fd:2e:7b:64:e5:75:4d:55:10:
cd:89:0c:ea:9c:0f:09:3e:0e:6a:ad:90:8a:c4:c5:
a7:23:72:d4:8f:d5:36:09:f4:09:24:8e:ca:ec:91:
1c:4b:4f:1a:2e:f0:16:d0:17:f1:dc:21:3f:10:0e:
c9:4e:fd:62:79:e3:d5:99:8d:be:1d:96:8b:07:d8:
1e:3a:04:3c:01:c7:c9:eb:d2:95:05:75:b7:a7:15:
47:74:35:9c:88:32:99:53:11:e5:99:13:5b:02:f3:
b8:f3:d0:1d:6a:82:97:dd:f5:68:29:ff:8c:96:41:
c3:50:0c:19:0b:a0:61:94:ee:20:ca:33:26:a2:d2:
f1:96:5f:be:e8:bb:87:35:7b:c2:35:2c:72:a4:04:
f5:c5:6e:70:8f:0f:fc:20:dd:79:6a:f8:b9:67:a7:
c5:5b:74:99:4c:b3:a6:f9:d3:04:34:9b:68:2d:20:
83:3f:a7:c4:87:af:3e:15:89:9d:47:69:eb:03:0e:
ee:1f:5a:af:ab:01:f0:58:96:64:78:81:f4:44:4c:
c7:69:fc:4d:ee:2d:24:2a:da:6e:9e:e0:af:0f:92:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:D9:8F:D2:2C:8A:5E:8E:46:08:0F:D1:FA:B8:7F:E1:34:84:D3
X509v3 Authority Key Identifier:
keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d1:bf:b4:42:6d:ba:09:8c:86:ec:82:a6:1b:6d:f9:39:05:
82:49:3f:57:44:d5:f7:4d:b1:17:81:09:39:3a:33:93:2c:74:
3f:d9:b4:4e:ef:cc:f2:b7:49:38:ad:ea:c2:fb:74:0b:d2:88:
4c:d9:a8:fd:82:5f:85:6e:75:d3:bc:ca:42:25:79:6b:12:3f:
96:6c:81:1d:10:c3:fb:28:be:9d:45:e5:e1:9f:ef:d9:5e:41:
43:2d:8e:79:ef:cd:5b:2e:0f:b3:dd:08:2b:c7:76:d2:f0:b7:
34:b9:77:9a:af:de:da:2c:99:0c:75:7b:8b:6c:f2:49:51:ba:
1e:74:e3:f7:36:4f:87:f1:2b:bb:e1:88:51:48:34:48:f3:cf:
84:09:5d:db:1b:bc:54:45:3a:74:de:27:9a:30:93:4c:a1:91:
04:4c:0d:7d:6f:79:70:76:ec:a9:1f:98:da:34:51:f8:d0:a7:
ef:ea:15:e4:10:30:41:6c:1a:7c:b9:b5:ae:18:6d:72:f3:48:
2e:f6:1b:cd:c3:6d:82:c6:0f:0b:27:3c:82:21:b8:62:eb:05:
48:8e:87:57:1b:4e:07:61:97:f2:cf:ae:46:8f:26:c7:9e:eb:
2a:11:77:0b:c4:e9:b2:96:e5:20:b2:8c:7f:22:a7:5a:ff:e6:
40:d6:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:51:11 2026 by rpki-client