
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier: DrjugfFxveE+uGy3mU0M+7jdoWZCHp6kHAs8gH/3Vm8=
Subject key identifier: 21:A8:21:33:01:BD:52:98:D3:A4:82:FF:27:90:CE:84:DA:8D:7B:AD
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 0262
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number: 024F
Signing time: Mon 21 Sep 2026 02:24:07 +0000
Manifest this update: Mon 21 Sep 2026 02:24:06 +0000
Manifest next update: Mon 28 Sep 2026 02:24:06 +0000
Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: ejrMWfJIEy1D2+depUqWOjkVkl2Yud6lg43rJYBCFp0=)
2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 02:24:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 610 (0x262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Sep 21 02:24:06 2026 GMT
Not After : Sep 28 02:24:06 2026 GMT
Subject: CN=6ab09547-09f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a8:5f:de:67:a8:bd:73:1a:6b:aa:24:5f:47:
ed:f3:ea:46:94:b6:85:81:d1:86:a7:a0:08:06:68:
7f:90:65:4e:d1:ec:69:ce:0e:9f:a9:dc:77:e2:82:
ad:dd:4c:fe:8a:b6:9f:9b:ac:62:af:e4:07:5e:b6:
64:e3:5a:d2:7d:4f:b2:35:39:0f:0f:4d:dd:de:53:
4a:2d:4f:be:a6:ca:38:b0:68:aa:51:c0:54:8d:1b:
26:98:22:b6:af:06:d8:f6:ca:74:ed:95:a4:59:2f:
c6:17:44:50:c2:b2:c4:fe:4e:7f:b7:7b:51:7e:a4:
42:f8:e4:01:c1:8a:fb:8e:83:b0:f0:5c:8c:58:0a:
a0:28:60:3a:33:68:21:7b:ab:71:24:e3:e3:25:5b:
db:e3:27:10:0a:7f:62:f2:21:4a:de:7c:8f:74:5c:
bf:14:c7:8d:62:aa:03:72:63:16:f8:3b:b7:c2:ea:
fa:05:61:14:f6:4e:9b:4f:b0:14:41:13:e3:45:fe:
cd:c7:7b:1a:bd:ff:85:ff:fc:ce:d3:ba:4f:10:b4:
7e:8a:88:b3:d9:ce:df:dd:83:12:cd:7f:c0:0f:d3:
07:bf:b7:de:ff:95:c8:ec:55:68:46:f4:cb:34:7a:
66:ca:80:22:d3:4d:fc:fd:c2:81:66:1c:77:c4:60:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A8:21:33:01:BD:52:98:D3:A4:82:FF:27:90:CE:84:DA:8D:7B:AD
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:f0:0f:95:90:01:44:d9:e0:6e:c6:37:f2:6c:11:02:70:2f:
83:9f:2a:d8:00:82:45:e3:dd:13:bb:64:d1:87:48:91:cb:80:
7d:78:d4:2c:c2:38:99:ae:11:6c:9d:47:f5:d7:f9:00:4b:ab:
f7:90:0a:26:78:1e:ad:ba:da:3d:bd:d5:77:02:04:48:c2:61:
9f:49:f0:71:27:80:a0:5e:62:62:c8:16:35:9e:04:36:ff:7e:
a2:ae:a4:58:61:bd:1f:bb:94:bc:28:b7:1b:9a:5d:00:c8:c5:
6f:0a:23:51:6d:a3:e6:54:a1:57:43:05:a6:4e:20:39:bd:2d:
83:6d:e3:ee:e8:00:2c:e7:f3:20:ac:d4:ce:ca:8c:86:03:a5:
55:0c:f3:95:40:d7:0c:fe:fc:3e:22:32:20:fd:c5:e8:e7:4f:
10:22:60:ab:68:cd:d9:07:85:25:f8:ab:c9:2f:07:ff:d3:7d:
ab:92:c4:a0:64:aa:7e:8e:b4:50:e2:28:48:02:35:b8:cf:cc:
6a:de:43:2d:57:1f:c8:28:02:88:c3:e3:0d:52:a9:4a:6f:5f:
e7:e5:35:2a:19:fd:4b:d5:99:18:ec:66:60:b1:ae:5f:67:5f:
89:e1:02:29:16:bf:65:65:63:50:ca:b4:69:34:cd:5e:29:48:
80:41:6a:76
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy
QTFGMDA5MkQwHhcNMjYwOTIxMDIyNDA2WhcNMjYwOTI4MDIyNDA2WjAYMRYwFAYD
VQQDEw02YWIwOTU0Ny0wOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0qhf3meovXMaa6okX0ft8+pGlLaFgdGGp6AIBmh/kGVO0expzg6fqdx34oKt
3Uz+irafm6xir+QHXrZk41rSfU+yNTkPD03d3lNKLU++pso4sGiqUcBUjRsmmCK2
rwbY9sp07ZWkWS/GF0RQwrLE/k5/t3tRfqRC+OQBwYr7joOw8FyMWAqgKGA6M2gh
e6txJOPjJVvb4ycQCn9i8iFK3nyPdFy/FMeNYqoDcmMW+Du3wur6BWEU9k6bT7AU
QRPjRf7Nx3savf+F//zO07pPELR+ioiz2c7f3YMSzX/AD9MHv7fe/5XI7FVoRvTL
NHpmyoAi0038/cKBZhx3xGAFewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGoITMB
vVKY06SC/yeQzoTajXutMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx
RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv
dG9CU1dzUWZwODRxSHdDUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAN/APlZABRNngbsY38mwRAnAvg58q2ACCRePdE7tk0YdIkcuAfXjULMI4ma4R
bJ1H9df5AEur95AKJngerbraPb3VdwIESMJhn0nwcSeAoF5iYsgWNZ4ENv9+oq6k
WGG9H7uUvCi3G5pdAMjFbwojUW2j5lShV0MFpk4gOb0tg23j7ugALOfzIKzUzsqM
hgOlVQzzlUDXDP78PiIyIP3F6OdPECJgq2jN2QeFJfiryS8H/9N9q5LEoGSqfo60
UOIoSAI1uM/Mat5DLVcfyCgCiMPjDVKpSm9f5+U1Khn9S9WZGOxmYLGuX2dfieEC
KRa/ZWVjUMq0aTTNXilIgEFqdg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:30:50 2026 by rpki-client