
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File: DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier: grGrlD3OLexAfs2raeJl+YaG7/ZmEU1fMshjwZnP2UU=
Subject key identifier: 23:1F:25:36:AE:A1:86:0A:B2:0C:3A:EF:66:3C:02:6E:76:F5:38:A9
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer: /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial: D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number: D4
Signing time: Fri 17 Apr 2026 06:26:27 +0000
Manifest this update: Fri 17 Apr 2026 06:26:27 +0000
Manifest next update: Fri 24 Apr 2026 06:26:27 +0000
Files and hashes: 1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: 2qhsXPim8ApZJT5paBVRi70kmHjWlbvIjMQXMU8TC3w=)
2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 06:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 216 (0xd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Validity
Not Before: Apr 17 06:26:27 2026 GMT
Not After : Apr 24 06:26:27 2026 GMT
Subject: CN=69e1d293-f237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:2e:8a:de:44:4c:4f:a6:5a:ec:74:f5:50:
ab:e0:da:3c:e4:27:72:b8:27:e9:28:31:b9:24:34:
5b:77:da:31:ff:e6:42:3c:40:15:36:8c:24:14:3d:
26:38:f2:c0:3c:b2:1c:99:21:63:c5:04:cc:ce:95:
39:c4:d5:56:14:f0:4c:de:88:cd:f7:d9:7c:8c:66:
e0:90:8a:56:72:5b:27:ed:2f:b8:e4:1a:1d:51:8d:
f9:64:c8:05:5c:a4:fe:10:d6:ca:42:b5:0b:43:67:
44:9e:5d:c6:40:e9:01:9e:25:7f:94:06:0a:7e:d1:
cc:47:2d:90:7b:52:4a:33:d4:fa:47:73:da:e6:d2:
19:2a:2b:68:27:c6:64:ca:6f:03:86:e3:02:2b:73:
43:9a:0e:9a:05:c4:e9:24:ee:cd:e0:f2:f0:5b:bb:
08:9c:e6:f6:19:9c:ed:65:55:f5:ad:ab:9c:42:f1:
16:ec:73:68:a4:d3:28:91:96:f9:db:28:15:ee:72:
19:50:3f:cc:89:6f:ee:e9:fb:ac:74:f9:98:db:6d:
0b:0f:17:d2:5f:e1:ff:38:5d:fc:71:5a:eb:69:55:
ba:5e:a6:54:1a:b1:66:b1:9e:e6:c6:02:23:40:e7:
af:47:56:78:03:12:89:24:d4:e7:d1:99:22:dd:5b:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:25:36:AE:A1:86:0A:B2:0C:3A:EF:66:3C:02:6E:76:F5:38:A9
X509v3 Authority Key Identifier:
keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d2:85:38:3b:3d:ee:4c:03:1a:76:2a:d7:15:ef:76:5f:5f:07:
9a:c1:5b:b1:22:4f:1b:e8:62:88:ef:b5:4c:d1:04:2b:39:2e:
2c:30:46:3a:41:e2:83:20:c1:35:62:a1:66:f7:58:6f:90:12:
5c:3f:c7:5a:3d:91:93:86:69:9c:29:6f:cf:b2:9b:c3:e4:74:
8f:02:f2:45:03:30:51:91:e1:75:84:fc:e8:88:a2:af:87:b7:
2c:b5:9d:1e:ae:8c:c1:1a:bb:64:17:2f:35:d1:5d:2c:60:1c:
40:77:72:e5:16:6d:c9:20:5c:70:87:3d:40:9c:b8:50:18:71:
a6:28:ec:0f:3d:62:54:f6:12:6a:06:0f:8f:44:4d:e4:18:94:
ba:56:e8:76:cf:98:22:4a:84:04:12:e1:ed:85:03:1a:d3:2c:
6c:72:b9:e3:13:66:f8:50:e0:bc:e5:2c:67:fd:63:d4:d7:ef:
3a:b8:9a:47:65:94:4d:33:74:1e:80:88:fb:06:85:55:b4:15:
7e:2f:9f:ca:3c:ad:88:84:50:93:fe:b3:b1:47:fb:dc:6d:80:
95:83:1f:b1:ca:d8:71:7b:d7:40:ad:79:f4:8a:d1:51:65:03:
a4:ec:82:c5:6f:32:28:07:12:de:96:7c:c0:cb:2b:68:36:ca:
ed:47:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:18 2026 by rpki-client