
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier: itTrqXUSzObBs6nW+5+Rv4kBq+L6Lm+3sY5WQXAxoyw=
Subject key identifier: 34:94:AF:CD:BF:FF:24:00:5A:47:FD:7A:15:7B:6D:10:40:E9:4A:78
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 01DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number: 01CE
Signing time: Mon 27 Jul 2026 05:24:58 +0000
Manifest this update: Mon 27 Jul 2026 05:24:57 +0000
Manifest next update: Mon 03 Aug 2026 05:24:57 +0000
Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: pZxbPqRtfSSxZIU7eBEApjxhb7W1YXMQ8Tl8r7GFUdc=)
2: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
3: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
4: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 05:24:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Jul 27 05:24:57 2026 GMT
Not After : Aug 3 05:24:57 2026 GMT
Subject: CN=6a66ebaa-c619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:e5:d0:5c:d1:99:75:b4:95:7e:1c:9b:43:
b8:e7:51:09:32:a0:d4:44:93:4d:6c:8b:96:05:6d:
65:a0:9e:04:1f:32:64:6a:08:43:02:6f:96:05:4c:
5a:aa:bc:7b:8d:4f:c6:e8:a9:e1:1b:4e:12:0b:1b:
57:62:eb:71:a2:ef:8a:3b:84:93:72:ae:dd:cd:e6:
62:c9:8f:82:dd:c3:eb:5b:b7:1f:3f:6d:c3:06:b7:
a8:ea:28:3c:06:36:05:9c:e5:cf:1d:36:c5:3b:e9:
7a:35:2f:6c:0e:b4:22:42:27:8e:b8:b3:a4:ec:04:
4f:04:c2:6e:19:56:1e:b1:5c:bf:ab:37:37:b9:50:
bc:e4:62:16:b3:34:f6:9a:67:24:2e:b9:8a:bb:4e:
41:fe:67:0e:63:21:62:9e:e8:e9:22:9f:5b:32:bf:
a4:50:6f:b3:69:86:5f:d2:f1:8b:97:8c:09:09:31:
47:0c:b4:e4:29:13:6e:ee:37:ea:9c:ce:11:62:9e:
4f:de:19:ab:39:da:3f:db:dc:34:c5:ab:5e:1e:51:
db:d4:53:46:9b:a1:1b:a0:a2:32:2c:9a:95:48:f8:
69:12:bd:16:1b:08:47:21:c8:78:44:c5:22:59:b6:
ab:fa:cd:cb:4b:d4:68:ba:5a:eb:b7:e5:ab:c9:99:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:94:AF:CD:BF:FF:24:00:5A:47:FD:7A:15:7B:6D:10:40:E9:4A:78
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:0f:73:5a:67:f5:3b:63:19:90:ff:db:37:64:53:80:a7:42:
a7:07:8f:23:6d:ac:7f:f3:3f:c5:13:d9:9f:fa:a5:59:97:a6:
1d:93:b1:0b:a5:c7:77:18:8e:6d:1d:75:ee:81:bb:9e:eb:5a:
8a:c3:30:41:b3:9e:16:6c:a3:a8:89:48:b2:9b:dd:cb:3d:58:
69:5e:2a:a9:1e:7f:95:5f:0e:50:25:dd:68:fc:d6:56:2b:62:
b9:a1:8e:1a:ec:ed:45:2c:40:8d:85:59:cc:94:55:ac:ff:dc:
c7:ff:a6:31:15:b1:af:f7:98:a8:17:06:84:e6:21:70:dd:8e:
1e:8f:1e:98:2d:96:a3:7d:75:bf:68:62:6c:af:4c:71:e3:98:
6b:07:e0:ed:7e:f9:f3:ed:f0:bd:76:34:30:70:0f:07:cd:07:
b9:73:3e:07:6f:42:99:63:db:64:04:f9:a8:58:43:37:22:4d:
d3:8d:72:ec:96:59:a2:a6:a8:20:4d:a7:f2:8a:50:73:af:24:
b8:ab:5e:d4:0b:02:a6:a1:6c:d9:3c:f3:98:2d:aa:e2:bd:6c:
c0:b6:01:fb:8e:22:de:a8:f8:97:e5:67:32:12:48:d7:99:13:
e0:80:85:5d:ca:bc:b3:a0:75:f5:d3:f9:d3:9e:9d:34:bd:30:
3d:e3:c5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:30 2026 by rpki-client