
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier: DxYAyyKYr7tS1ufjq8ff4b9+ZRThFZkSFztexj6V8ao=
Subject key identifier: 30:BE:C2:4F:28:27:9C:BA:AF:24:EA:0A:53:9D:BA:D1:CB:18:8E:05
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: 01BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number: 019F
Signing time: Fri 17 Apr 2026 04:02:31 +0000
Manifest this update: Fri 17 Apr 2026 04:02:31 +0000
Manifest next update: Fri 24 Apr 2026 04:02:31 +0000
Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: G1a1EN+jFS2WrjNv7kvYHFCBYqeM6zF3jgCuw+YajCo=)
2: F278C026892911EFB08D7746C4F9AE02.roa (hash: ZftiYzw5tdEy9qN1zhkdC2fMmi3Kd8fsFrQThDbtqRU=)
3: 79F7221E892911EF896D1145C4F9AE02.roa (hash: OR8jcGTbV0bFVy9IlsqFXRkqlclLb5Iptk5F3JoFORI=)
4: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: yiiAX2llQ6hAEkQaEwfWJJMvBw/dD+dotQQ+ZmoUPZY=)
5: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: Cl805i3E5GJ+Cs1OYWxNaJV0eF8zWSROQ+2LfJR2iGA=)
6: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 4DtJGQsQOtWQEaIVm9e3mKJdmYWMS51213hhqRFkVZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 04:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 444 (0x1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Validity
Not Before: Apr 17 04:02:31 2026 GMT
Not After : Apr 24 04:02:31 2026 GMT
Subject: CN=69e1b0d7-4a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:8b:9a:81:01:b7:8d:ff:fc:23:49:4b:61:
2c:a7:17:45:3d:99:53:c4:5c:a2:1a:c8:14:c9:4b:
14:1c:97:e0:97:9e:54:6c:cb:9f:76:73:e6:fb:48:
2d:d1:c0:63:db:38:06:56:78:f8:77:d6:89:c3:a7:
6b:df:99:af:2d:23:fa:b1:b9:40:ae:28:a5:03:92:
eb:f4:a5:9c:9b:db:02:90:c0:71:27:7e:1f:16:8c:
78:12:99:b0:b7:64:27:b0:55:29:ef:d4:a7:f8:50:
7f:b0:50:f1:68:c8:42:85:98:4e:23:19:ff:9e:db:
95:ce:70:89:7f:43:25:e8:be:3f:e0:fd:3d:18:b6:
88:2c:c1:07:0c:91:bb:53:6f:1e:92:6a:5d:04:95:
7b:f9:3a:3d:d4:60:a4:c6:f5:0d:2b:78:b4:84:1b:
28:2d:9f:5c:0d:dd:47:90:8d:20:9f:ee:8d:66:b6:
2d:5e:ed:a9:54:18:03:6b:d6:d7:e8:5d:18:12:27:
39:ed:9e:60:f1:77:17:40:f4:9d:35:16:0e:ac:5e:
e3:bf:a6:b1:27:53:d4:31:3e:52:d0:28:76:51:a7:
a8:40:a9:62:95:df:96:45:e3:94:55:75:83:c3:fb:
57:6b:dc:b8:c8:1f:75:7c:d4:ca:d8:f1:d7:2f:e0:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:C2:4F:28:27:9C:BA:AF:24:EA:0A:53:9D:BA:D1:CB:18:8E:05
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:03:b5:34:65:b7:bf:41:82:63:fe:8d:02:b6:db:d7:d8:a2:
65:e7:57:86:49:68:28:ce:d9:bc:41:ad:42:d5:54:0c:ec:81:
25:bf:3d:ff:c1:67:43:43:2c:ce:8d:29:72:26:da:4b:be:f3:
04:55:9b:25:c9:f3:f3:29:8a:b7:61:3d:bc:48:aa:58:0f:45:
2f:69:c3:fd:3a:23:d5:bb:db:c0:c8:7d:80:35:2a:da:1f:0a:
45:a1:fc:42:66:47:d1:51:48:21:af:2d:6d:58:47:50:7f:32:
a1:98:a0:3a:2e:84:97:02:18:af:2d:d3:d2:1a:d7:7f:5c:df:
5e:1d:69:56:a1:54:27:2b:a4:14:1c:3f:49:0e:7c:64:d8:7b:
72:a4:bb:a6:c6:9d:bc:fe:21:c7:b5:64:88:b3:d2:4b:78:35:
b9:ca:0a:02:26:9f:69:54:84:0d:cd:0f:d2:01:6f:05:9a:9f:
ad:30:f8:f5:69:9b:69:03:d7:fb:16:03:cb:e6:6e:c4:33:f4:
4b:5c:57:79:6a:55:d3:22:7c:e2:16:57:07:75:b6:d5:d0:bb:
37:ea:50:f4:b8:38:b9:81:39:61:cb:3f:1b:20:e5:bd:db:ce:
21:7c:d2:05:0a:82:08:66:14:eb:58:c4:2e:48:df:60:60:73:
5e:94:67:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:06 2026 by rpki-client