
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier: AJ7oMObSv9uwCaA20RZLNDfbSShZ8obPdKnfaxZ00sw=
Subject key identifier: 38:F6:A1:37:10:23:DE:59:80:EA:63:A4:3D:71:CF:38:46:E9:A3:49
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial: 1147
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number: 112E
Signing time: Tue 22 Sep 2026 17:11:19 +0000
Manifest this update: Tue 22 Sep 2026 17:11:18 +0000
Manifest next update: Tue 29 Sep 2026 17:11:18 +0000
Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: n63XB2hLktxNnlVpvrmGppJCLK5UaSMCO3EBg4d9eJY=)
2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=)
3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4423 (0x1147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Validity
Not Before: Sep 22 17:11:18 2026 GMT
Not After : Sep 29 17:11:18 2026 GMT
Subject: CN=6ab2b6b7-af5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:f3:e5:a9:4b:66:cd:f2:c2:aa:16:a9:4d:
61:ad:61:2e:71:f4:b2:70:92:ff:99:7b:b4:0c:60:
80:09:1e:0c:a5:fa:fe:59:e7:4f:16:e5:d4:b7:c2:
c8:fe:95:06:d8:cb:77:5c:7e:f8:2c:f4:93:56:02:
50:ad:b9:6a:03:ad:05:18:83:23:59:3b:75:53:be:
07:25:62:18:11:72:da:23:06:1e:a2:03:4c:0e:5f:
b9:a6:f9:5e:0b:64:54:e4:c8:19:4e:99:69:46:af:
1c:1f:2d:56:9f:4d:56:7d:42:11:72:d5:8b:84:fc:
51:14:69:d6:9d:ee:e9:af:a8:1b:2d:e8:6d:df:a0:
95:f5:50:c9:11:d8:35:28:31:b4:20:f9:d7:61:7a:
25:54:12:ff:a6:10:0a:8d:92:6b:d7:40:02:91:e4:
c0:57:fa:70:32:db:8d:17:15:7c:b0:6f:b4:71:14:
f9:37:77:81:61:54:c2:05:36:4a:7b:ea:fc:ff:51:
eb:7b:85:ab:d1:fc:76:a3:f7:69:d9:09:ed:ca:dc:
05:4c:ce:4f:43:99:39:5e:d8:ea:52:cd:b0:50:23:
c1:e8:e0:6b:54:76:e1:3d:aa:5f:6e:a3:69:24:40:
59:13:67:1e:01:d6:b5:c5:41:a9:6b:0c:ee:f1:c1:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:A1:37:10:23:DE:59:80:EA:63:A4:3D:71:CF:38:46:E9:A3:49
X509v3 Authority Key Identifier:
keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ac:86:31:e6:cd:05:b1:65:b0:62:0f:d3:63:5c:45:e4:2d:
8a:13:94:bf:81:a1:02:be:6a:7d:4a:bc:8f:e9:e0:d3:bf:df:
d6:c9:07:13:1c:ac:22:e0:59:90:74:7b:34:a2:93:d2:b1:41:
03:40:b1:80:9a:55:b8:24:ba:3f:10:40:94:e0:11:81:ac:f1:
28:c5:4c:b5:a8:61:0c:22:a3:63:8c:05:ba:d3:91:55:10:6b:
3c:38:7d:29:63:a7:14:94:48:6d:ea:9b:05:55:3a:a4:9b:9a:
95:29:41:c1:65:81:d7:25:6a:7e:20:1d:ce:32:ca:40:ef:ed:
1d:e3:36:ae:d5:30:47:32:72:98:b8:f8:4c:65:ba:b7:3a:fa:
40:02:be:f3:58:de:7d:98:6a:66:1e:a9:56:3a:81:15:b4:ef:
e3:15:55:36:22:d2:ca:0c:0d:d6:a8:69:95:9b:65:4b:bd:7a:
e2:48:ae:f3:2b:3e:55:1d:07:b6:6f:6c:05:b3:37:05:af:a5:
04:f6:73:0b:22:51:e1:71:cf:90:05:5d:10:1a:64:96:c3:5a:
f5:23:17:37:f6:d0:9e:b1:03:9a:92:e7:55:55:0c:d7:90:62:
0e:8d:a9:e0:d6:a0:c3:52:59:09:e6:98:54:53:b9:8a:e8:57:
b8:d6:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:39:25 2026 by rpki-client