
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier: +JeR4jzMNgz5l3ioGtx7o9rNgws5NmnKu6Y2EmQjbOs=
Subject key identifier: 95:F5:FF:30:03:FC:EC:9F:2D:C5:1F:EF:C6:93:3E:44:DB:F5:BF:0C
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 018B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number: 0182
Signing time: Sun 01 Mar 2026 23:56:16 +0000
Manifest this update: Sun 01 Mar 2026 23:56:14 +0000
Manifest next update: Sun 08 Mar 2026 23:56:14 +0000
Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: q6OKYDA0HkXc8La16mdd3i8C5DjrKXepDHnjNcuxF3g=)
2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: M6j0FOCZ0UTh7p8Ubxj28favFMaP9xEbVjr5DWXeHlk=)
3: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: ia7O02zpe6h1ZGb0Z0S/xCZS0kdwBJASJqPl0+cnpKw=)
4: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: VEHFIL+hcJEK3QNTlF8lEQzRTP0/e2Y3Of5xJtsfhRI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 18:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395 (0x18b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Mar 1 23:56:14 2026 GMT
Not After : Mar 8 23:56:14 2026 GMT
Subject: CN=69a4d21f-d8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:c9:2d:a1:7e:06:34:15:7d:50:d4:c5:5d:
f7:02:c8:99:a1:0a:31:ff:00:0a:12:91:ae:19:bd:
63:6c:0c:ff:cb:0a:a1:23:a8:03:9f:14:dc:38:23:
8b:ff:3d:1e:46:8d:57:ee:6c:b1:f4:5b:51:ac:94:
f0:73:b0:53:65:e1:60:c6:bd:09:46:ca:b2:49:49:
4c:eb:04:88:60:80:1f:ec:03:32:58:f3:06:4c:0a:
b1:93:1b:f1:16:ca:6a:88:53:30:74:bf:80:ca:0d:
32:fd:55:bc:31:86:11:46:f2:11:f7:0a:73:5e:46:
b4:1c:6d:93:3b:f6:55:d0:d1:69:5a:e8:1c:df:18:
40:4a:eb:f9:c4:c2:b9:44:a0:26:bc:f2:72:ae:d3:
81:9a:c5:74:29:14:0d:6b:05:b3:54:b3:49:f4:7f:
8f:ea:e3:c6:1b:aa:bc:01:c8:85:e4:5b:6e:6b:32:
65:c2:74:30:e1:68:72:1a:53:50:20:80:c4:07:ab:
71:56:2f:63:d3:5c:e0:35:9a:fb:d6:c7:ca:6c:b9:
8f:97:06:c5:1d:3b:4b:8b:14:b2:ac:0a:6c:1c:22:
9d:6e:50:36:b0:21:f4:4f:98:fc:d4:78:a0:25:78:
e8:71:ca:d1:8b:f8:d7:2d:3a:8c:99:25:52:48:d7:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F5:FF:30:03:FC:EC:9F:2D:C5:1F:EF:C6:93:3E:44:DB:F5:BF:0C
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:16:7c:d2:67:c5:4d:50:4e:1d:0c:52:79:a9:30:a5:09:6c:
50:14:5c:fc:8d:fc:c0:0b:49:9b:a4:c2:e2:00:aa:d8:ff:43:
11:9f:60:a2:83:26:69:9c:29:d7:b2:4f:2f:fe:78:b8:e4:7e:
f0:b1:3e:9c:f6:b2:51:76:8e:bb:bb:c3:2a:09:3e:40:33:a6:
8f:0c:02:1a:58:16:c1:0b:3f:cf:04:b6:e5:f0:e0:da:4e:ff:
32:f0:fd:2c:ea:06:2e:07:5a:f1:1d:9a:7f:b8:56:ac:54:7c:
39:50:06:82:56:28:9b:6a:19:7d:d9:17:da:d3:da:3f:82:8a:
fd:28:13:d6:c0:8e:55:21:c6:8f:00:9f:f4:c3:c5:e0:40:b0:
6d:14:26:c3:59:08:b5:d4:db:aa:1b:ec:41:04:c0:38:17:27:
d8:13:bb:6c:a0:06:e2:f5:a5:78:52:d5:82:25:bc:f8:18:ea:
c9:e8:61:61:91:4d:a5:f2:01:75:65:05:f9:82:54:15:e2:11:
d9:67:05:a9:b5:82:ec:ef:53:ca:95:8a:59:bf:7e:03:50:da:
02:ef:55:f8:35:96:f0:bc:14:26:f2:aa:f4:2f:83:83:09:37:
98:49:a1:1b:65:9f:50:ac:fc:e7:d6:ec:db:68:1b:ec:39:61:
7f:9b:6c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:39 2026 by rpki-client