
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier: gWJQf0VCcnBIDelsZmdsiTQnGZBCE4JBG8rg+ZfsI/Q=
Subject key identifier: 66:D9:F8:90:1B:4C:DC:B5:6F:6C:96:63:DE:94:1A:D2:32:3E:C4:B1
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number: 01F0
Signing time: Mon 21 Sep 2026 03:28:25 +0000
Manifest this update: Mon 21 Sep 2026 03:28:25 +0000
Manifest next update: Mon 28 Sep 2026 03:28:25 +0000
Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: XU22IGwFZY5l4STPO7U6wft57NOe21KTAiBfqu4TxMY=)
2: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: phsa0aOE8eqCOpQqL6MkEfoEn022+mvXBZ0Y/k/Gb6A=)
3: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 1cBkJAATgAnAWpkL5ephYU2tTfXe7A7jghvap9dsu7Q=)
4: F278C026892911EFB08D7746C4F9AE02.roa (hash: wlRisXvx0zTP/TvUTz15M4hS2Jw5htErhvvetPP2grU=)
5: 79F7221E892911EF896D1145C4F9AE02.roa (hash: 4HsEjdA6ll0rAi2M5nFxa1SGJVN7pNCKPiFzJN7imik=)
6: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: z+lohyQaMeb0DYcM3/qn4iEQ+VpTj1TLsiVBPUy6pZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Validity
Not Before: Sep 21 03:28:25 2026 GMT
Not After : Sep 28 03:28:25 2026 GMT
Subject: CN=6ab0a459-869b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:02:bf:dd:0a:50:31:83:fa:f0:cc:d3:d0:
c5:6c:65:40:89:69:3b:72:c5:a4:b7:a4:9b:15:e4:
d2:cb:8f:02:fc:da:15:5e:da:c9:d9:54:ef:7a:78:
00:78:c6:46:da:8a:53:2d:e5:03:2c:71:a2:b8:d7:
23:e1:f4:73:f0:7e:27:b5:81:49:ff:2e:7a:3f:c1:
7a:1f:e6:2a:9d:11:2b:39:e2:1b:a2:c9:f1:ef:84:
70:1c:79:ef:c1:01:1d:6d:32:c1:c7:a4:52:49:c6:
89:e5:6b:8f:38:64:17:88:20:20:2d:e9:c7:ed:f9:
e1:fa:64:aa:eb:22:aa:6a:68:e1:e2:97:f5:ce:44:
19:36:3e:ee:38:b9:16:39:5d:16:ba:4d:56:f3:f0:
d7:03:22:62:68:77:08:72:18:4a:1c:0f:e6:10:4f:
21:ac:c0:2b:9c:3f:3c:34:33:5a:28:51:d1:13:a9:
eb:a6:28:e3:67:c1:c9:d5:51:ff:2d:3b:31:69:c8:
73:11:ba:62:c4:dd:83:60:fa:78:39:08:eb:44:7f:
aa:ee:0f:9c:db:5c:08:f3:de:2b:89:f3:56:1a:b9:
b3:09:0e:e7:b9:6a:90:3c:b4:5e:2e:8b:fc:f9:8c:
95:3b:19:50:ac:0e:6c:6d:76:92:a9:ea:ef:4a:37:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D9:F8:90:1B:4C:DC:B5:6F:6C:96:63:DE:94:1A:D2:32:3E:C4:B1
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5c:af:6c:9e:9b:d5:4c:3d:45:61:85:4f:ea:6d:4b:73:88:
17:61:ec:b3:d2:91:82:1a:6d:fd:b9:c5:ba:d5:fd:35:ad:a1:
df:c8:84:b3:b0:92:06:5e:71:ea:3b:b6:23:d0:6d:75:04:ee:
15:24:7b:b2:16:4b:b1:06:6b:b7:bd:91:ad:62:72:59:d0:13:
87:47:80:3a:38:d9:13:bc:08:8c:08:14:45:f1:2a:b2:14:96:
b6:72:c2:58:1e:7b:bf:e7:51:0c:ba:9d:f8:ea:e4:78:6e:20:
12:83:d6:e7:17:f8:b2:29:a8:ce:95:01:28:46:20:f6:0a:b5:
f0:a4:1d:aa:a6:1c:37:15:e4:ae:08:f7:2d:90:6a:0f:d1:fd:
ed:5b:4a:3f:da:97:56:43:49:28:7c:1c:bd:96:22:1e:7c:d2:
64:29:e9:fb:04:9d:5d:24:6b:4e:78:07:86:98:4e:37:1d:59:
2c:34:65:02:9e:81:8e:99:9f:6d:1f:8a:81:f7:58:54:a5:36:
97:5e:96:7c:23:77:d4:f2:93:98:f2:b0:eb:89:61:d1:1c:cf:
1a:75:c4:60:a8:50:25:2b:08:fc:fc:61:fa:60:3b:a2:e3:2d:
f7:37:10:27:d6:e8:6b:4d:da:db:33:5d:bc:fc:31:f1:ce:80:
e4:1e:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:11 2026 by rpki-client