
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier: nE0UMBZ78BgceFtPZVckYVxoCaM1MiNqMAe8ym6DAbE=
Subject key identifier: 13:6F:93:13:6E:D4:B5:A9:7E:6C:B0:63:66:80:CC:93:77:74:56:AD
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 0245
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number: 0232
Signing time: Mon 27 Jul 2026 04:10:00 +0000
Manifest this update: Mon 27 Jul 2026 04:09:59 +0000
Manifest next update: Mon 03 Aug 2026 04:09:59 +0000
Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: PiXz96YFuBW5kJ5dWV9Iau/N+2s1ot2RzPQ3B9sXquY=)
2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
3: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
4: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 04:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 581 (0x245)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Jul 27 04:09:59 2026 GMT
Not After : Aug 3 04:09:59 2026 GMT
Subject: CN=6a66da18-3211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:e9:f1:06:5e:9d:48:45:39:57:05:20:66:
e8:6a:cb:3d:ee:b7:30:39:b1:5e:66:ab:ce:0a:a0:
2a:ed:4b:0b:d2:c8:85:44:d3:e4:13:85:b9:2e:61:
b7:21:1b:0f:94:cd:19:b2:3b:76:f0:db:ae:e3:d5:
1b:0a:5e:77:be:24:bd:ec:e6:d7:24:d6:ab:9b:dd:
bc:7e:94:ee:73:f0:68:76:fc:cb:8c:28:ef:eb:b4:
9d:aa:4a:bb:ec:23:cb:7b:5f:28:86:4b:f9:3f:cc:
5f:f4:88:fb:00:a1:19:4c:3f:e9:63:c0:a7:bd:40:
98:5a:3c:3a:01:83:81:71:b0:c3:a9:78:b2:b6:f9:
d2:f0:0b:a6:e6:f4:7e:d5:19:64:ec:d6:3f:e4:50:
9f:03:dc:d8:d4:3f:66:2f:8d:a5:d5:8e:4b:95:5e:
aa:82:ae:ad:5d:c4:ef:46:6b:6c:c8:c6:d1:84:0a:
d5:bc:b2:22:3c:87:07:9f:cc:b3:6a:06:d8:27:41:
ae:44:80:d0:94:8c:76:fa:6f:d2:32:be:62:28:58:
d5:00:67:e9:b9:5c:1f:f1:c8:fb:fd:5c:bd:77:0e:
70:85:cd:7f:18:a3:35:1e:2e:8e:16:37:b6:b2:5d:
cb:d2:f0:d9:26:4b:aa:25:0a:f4:dc:d3:b8:e4:08:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6F:93:13:6E:D4:B5:A9:7E:6C:B0:63:66:80:CC:93:77:74:56:AD
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:98:dc:8e:70:87:4d:9b:01:88:f6:6f:57:5e:99:7e:0f:f5:
ac:22:d6:2b:e8:6e:42:0e:b8:e2:d4:c2:8f:a5:f7:96:b2:cd:
d3:79:43:5e:bd:c7:66:49:1c:4d:b5:bb:fe:3c:d0:ac:77:8f:
71:68:ce:29:87:da:a4:05:48:2f:54:d3:72:0b:8a:91:6b:a8:
aa:eb:ac:0b:56:ba:8f:a2:87:40:dd:eb:19:97:4a:f9:fb:21:
58:04:8d:a9:dd:d1:22:0a:2d:64:00:45:da:f2:97:a2:b1:08:
6e:c2:8f:31:90:4f:8e:af:a6:60:c7:74:9b:b8:00:34:45:96:
b2:3a:f1:ec:4f:cc:f2:c9:83:f1:27:05:8a:6c:8b:a9:bf:81:
37:24:2f:0c:aa:04:b9:50:fb:77:a2:4b:f5:c4:fd:54:03:65:
5d:8a:b4:cb:b2:07:ed:15:0a:ee:d7:1f:9d:88:5b:9a:d4:fe:
40:9c:3d:3e:32:b8:93:4d:54:61:5e:a5:08:22:80:18:eb:e1:
87:44:4d:c6:a3:26:00:4a:f9:cc:ea:5d:cf:cb:e4:f7:65:56:
fa:9d:d0:34:6d:ee:06:c5:62:b1:8f:cf:b4:22:fd:03:17:22:
3e:f2:28:27:9f:7a:41:26:52:ac:54:c5:08:0e:b1:23:09:ac:
f2:bc:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:15 2026 by rpki-client