
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier: 0+gkQ6QOK/JGoeD69BACNhIqBa34xyMtb8NjlHBM8Qo=
Subject key identifier: 7C:65:D1:5A:8E:0F:BE:E7:17:E9:79:F5:60:1F:74:3A:29:3E:5E:99
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number: 01EF
Signing time: Mon 21 Sep 2026 03:26:29 +0000
Manifest this update: Mon 21 Sep 2026 03:26:29 +0000
Manifest next update: Mon 28 Sep 2026 03:26:29 +0000
Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: F3K97bqF5EOfBeZzc1q/+N3uSpNqj6WVUa+Z2qMxCh4=)
2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
3: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
4: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 03:26:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Sep 21 03:26:29 2026 GMT
Not After : Sep 28 03:26:29 2026 GMT
Subject: CN=6ab0a3e5-b5ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:c5:ad:20:14:88:b7:73:b4:32:d6:de:90:
c1:2e:19:14:23:3d:80:f5:18:c0:49:1b:06:1a:14:
27:00:27:5e:e7:9f:f6:03:ee:bb:45:17:47:28:fd:
7b:f6:ba:48:8d:0d:0c:4d:ed:20:bb:36:22:69:f2:
53:b2:86:99:e4:6c:f7:5c:5e:c8:59:19:f3:14:f1:
1d:e1:73:be:47:17:23:b4:93:9a:e4:72:fe:08:b8:
41:d8:7f:2c:cd:f6:72:6e:d8:0e:ad:70:6a:d3:75:
53:b0:ec:e4:b5:5b:60:fa:f7:8f:2f:9d:0d:a7:7a:
d5:73:32:e2:b1:b7:31:c9:01:4f:a8:3b:93:81:5e:
5e:92:35:51:f2:e5:b7:13:92:92:e4:a4:b9:c9:1c:
d0:05:4b:1c:3e:29:a3:2a:b3:42:f1:81:74:dc:94:
ba:b9:ae:29:f8:49:f4:85:25:49:e6:86:9f:4c:9b:
43:c5:de:8c:05:5d:77:5e:a2:53:fe:3a:db:cc:f4:
e8:63:ea:e4:3a:c0:c5:61:49:25:55:b2:13:2a:d4:
b6:b7:1c:42:5b:eb:54:9d:2e:53:5c:a1:36:00:45:
24:b9:65:b4:21:96:02:23:88:81:e6:af:ed:ff:87:
be:7d:ec:d3:7c:b2:28:34:ec:e4:19:ea:ac:d8:fd:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:65:D1:5A:8E:0F:BE:E7:17:E9:79:F5:60:1F:74:3A:29:3E:5E:99
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f7:58:bc:0b:7c:bb:d0:8a:39:5c:41:b8:cf:34:01:ab:35:
9a:d5:04:b2:68:a6:5b:d5:ea:b8:20:c5:ef:35:e3:d1:25:ff:
96:59:1d:ad:21:8e:52:45:51:cd:4d:7f:76:72:80:94:4a:4f:
93:83:6f:53:b1:4b:61:da:73:0f:66:fd:40:fc:e9:0b:ef:ce:
43:8d:fa:88:8c:3a:6b:09:91:04:d5:08:c2:15:a4:b0:a0:60:
ae:32:ce:95:6b:63:1b:17:f3:e6:a4:70:de:11:cf:26:0a:cf:
fe:d5:6e:34:9b:3b:2b:34:30:4b:9f:0f:4f:70:7f:13:38:79:
99:6b:d5:08:ba:75:47:39:e1:09:27:3d:a3:35:09:82:90:5b:
bd:37:6a:59:f8:6e:57:7b:c7:ea:02:99:60:df:53:91:89:73:
0f:c9:5d:0e:c9:12:ee:98:2f:44:1c:b1:ea:50:e0:0e:91:91:
4e:8a:b8:92:9e:2d:40:00:db:96:b8:17:38:b3:b2:8d:4f:e6:
64:44:5e:02:57:f0:17:94:93:66:0c:25:f9:4a:e2:b3:58:67:
2c:ef:5b:f5:86:ea:0d:f0:12:65:f2:1a:2d:c5:30:31:23:f6:
db:cf:c8:6d:4c:c5:46:60:2e:91:99:7f:f1:ac:f8:e1:c6:54:
27:09:76:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:14:44 2026 by rpki-client