
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier: z6zgxXXZTLyel4fDLzppZ8GDr8L13g4h4EG6Bz8v6k8=
Subject key identifier: 48:40:4B:77:20:0E:F6:BF:BB:33:D5:B5:2C:A4:0C:8B:5E:0B:86:8E
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial: B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number: AE
Signing time: Mon 27 Jul 2026 09:17:16 +0000
Manifest this update: Mon 27 Jul 2026 09:17:15 +0000
Manifest next update: Mon 03 Aug 2026 09:17:15 +0000
Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: Rh1mzk/tKyI8HJokwpQgP8nCnTjzVrfWXju8ifpOlho=)
2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=)
3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 09:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179 (0xb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Validity
Not Before: Jul 27 09:17:15 2026 GMT
Not After : Aug 3 09:17:15 2026 GMT
Subject: CN=6a67221b-a3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dd:83:90:02:b4:3b:98:07:32:d4:c2:2f:ef:
9d:a5:02:28:31:23:52:1a:fc:5e:78:83:9e:0c:b1:
c1:24:cb:89:66:f1:ce:de:fc:85:ba:89:37:d0:2b:
6b:de:bc:07:47:ba:42:b5:c0:61:94:17:1c:b3:e5:
57:37:f5:f5:9a:c8:bf:d7:60:7f:21:b7:cd:c5:dd:
a5:6c:e1:65:65:72:ef:4f:4b:86:43:a3:5c:4c:76:
9b:00:e9:04:92:9e:80:17:86:0d:86:cd:1f:e2:9f:
75:01:d5:0b:04:37:b1:d0:a1:63:2e:b3:04:91:5e:
0f:19:af:aa:90:44:07:e9:55:da:ff:5d:01:59:09:
25:dd:e3:95:9b:24:49:d4:e4:ce:62:dc:37:8f:f9:
b0:fe:66:dd:57:75:f4:55:42:ac:ef:a7:59:fa:ce:
c9:d0:67:75:c2:e0:73:0c:03:71:96:a3:99:72:c2:
77:5c:e0:a0:11:a9:32:bb:d5:a3:4d:81:3f:88:77:
9a:15:a9:4e:5b:fe:0d:bb:5d:d5:0e:79:50:e0:c1:
15:8c:6c:0d:f2:c7:9f:28:a1:8d:c0:ae:62:a8:65:
80:5a:f0:93:e1:ee:f8:f0:62:50:22:ed:30:c4:00:
31:ff:fc:1c:e7:04:86:86:ad:da:ee:eb:06:b7:38:
66:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:40:4B:77:20:0E:F6:BF:BB:33:D5:B5:2C:A4:0C:8B:5E:0B:86:8E
X509v3 Authority Key Identifier:
keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:be:88:61:bb:1f:f8:af:92:8d:01:33:51:cf:cb:d9:97:f3:
0b:45:a8:d1:b6:54:39:be:2e:20:25:4f:40:91:f8:8c:a5:07:
f8:f6:d0:0c:6d:79:3a:ec:fe:4f:da:65:62:d4:37:39:5b:b5:
6f:ba:bb:23:bf:7e:5f:ea:5f:d0:47:7f:50:5c:7b:17:26:df:
78:6a:40:39:08:a6:51:7d:79:af:93:ae:3c:82:f1:16:c9:97:
39:f2:e8:c4:88:39:69:66:1d:ba:de:6d:87:1f:d8:ae:d9:7d:
c0:7c:5a:ef:c3:b4:35:d5:9e:de:af:54:2c:40:66:7a:e6:59:
e5:27:57:84:20:2f:d2:a0:a7:d8:8c:2e:24:56:42:eb:7a:8f:
41:e8:40:c5:59:d3:dc:35:7b:da:14:c2:5c:6e:81:e9:87:bc:
b8:37:b6:d8:f6:39:f9:30:30:02:94:fa:52:bf:60:cc:a7:ff:
69:1a:ba:5c:c7:2f:2f:65:b2:d1:5b:31:b7:d4:a5:45:06:2c:
43:6c:60:08:40:44:79:a5:0a:22:4b:e1:12:f7:9c:32:ed:e8:
f2:99:e6:fd:8c:af:b8:a7:c6:4e:08:bf:e4:6d:54:2c:0a:17:
4c:3b:f6:ab:f0:12:bb:be:b9:0f:78:b8:e3:32:25:f3:e6:16:
26:e2:14:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:28:12 2026 by rpki-client