
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier: V+aFQngdhCwgNwZH4frHpa5EuCGwjckkkiZxIbncVBQ=
Subject key identifier: 19:FB:14:2F:70:37:15:F1:73:19:5D:CE:98:27:45:A9:7F:07:82:D8
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number: 029E
Signing time: Wed 29 Jul 2026 02:37:49 +0000
Manifest this update: Wed 29 Jul 2026 02:37:49 +0000
Manifest next update: Wed 05 Aug 2026 02:37:49 +0000
Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: /8cJHYKcEj9Qx2Nwj9G3D5Ar3Ru5JNyw3asyKdIlujE=)
2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Validity
Not Before: Jul 29 02:37:49 2026 GMT
Not After : Aug 5 02:37:49 2026 GMT
Subject: CN=6a69677d-cbd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:71:5d:1c:52:45:8c:58:f3:2e:75:6d:60:15:
f3:38:da:ae:5a:60:51:74:af:08:5b:0d:68:80:e4:
c1:e1:53:5a:bd:da:2a:62:f9:af:8d:a7:81:9c:ff:
45:f2:4b:cc:87:de:e4:09:95:10:78:df:75:72:40:
05:61:64:e1:ac:fe:0f:12:c1:9a:a1:73:7e:b5:ec:
c4:17:1a:3c:a9:1b:79:19:07:c7:29:cb:57:a2:09:
35:5d:43:20:f4:99:27:80:be:8e:50:e8:b6:b7:16:
ff:b0:d4:cd:cf:33:82:0a:0e:26:f7:9d:00:77:25:
5e:e7:20:2a:5a:45:2f:75:08:06:44:7d:84:41:77:
49:f1:0f:cb:8c:56:34:c5:66:a2:1d:12:ce:a1:70:
99:ce:92:61:20:46:5c:9e:0c:60:25:78:24:37:e3:
14:63:7d:d5:0d:70:ca:32:9f:b7:aa:24:fa:f3:a4:
38:57:a2:f3:cf:54:b5:91:54:39:e7:f2:ab:75:04:
2d:fb:ad:c3:60:97:0f:a1:ea:98:15:27:19:02:00:
5c:88:43:5b:ed:de:42:82:2d:bc:ed:fc:b2:59:2f:
46:11:e6:47:9c:7f:2d:a9:2b:94:23:dd:87:05:8d:
96:bb:c2:95:bf:8d:59:2e:f5:50:b7:27:07:ed:89:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FB:14:2F:70:37:15:F1:73:19:5D:CE:98:27:45:A9:7F:07:82:D8
X509v3 Authority Key Identifier:
keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:69:6e:ad:a7:bf:c3:7c:b3:ab:dc:55:d8:dd:3d:59:06:74:
72:ea:b3:1b:9c:e4:6f:28:b3:e7:ec:da:39:14:2c:cb:14:bf:
e7:9d:76:e0:70:75:1a:3c:6b:9d:db:98:d0:16:59:a3:1b:70:
9f:09:f5:c3:54:8e:b4:6d:57:81:52:54:e4:2e:4b:8c:6c:18:
44:1f:a0:86:e1:38:68:43:e3:e0:6e:e6:42:b4:17:55:2b:f9:
00:0e:56:0e:a2:ad:fb:7c:df:17:76:24:82:b3:12:bc:79:7f:
a6:3d:62:f3:32:4f:02:b8:99:36:5c:24:8a:7b:c0:6b:86:08:
69:e2:7c:68:81:b3:18:d4:f0:5d:a0:fb:3a:31:26:92:c2:86:
d2:72:1d:0c:35:bd:65:32:78:5f:bc:76:4f:a2:cb:45:b9:b7:
e4:23:a9:c8:f4:2d:59:05:8a:02:d7:7e:c4:88:29:d0:d0:2b:
d8:64:5f:96:61:36:aa:c7:86:2c:c3:b5:cf:41:06:89:49:78:
c7:6f:cf:17:ea:6e:40:3f:28:3f:49:e0:64:a4:ec:37:1e:7d:
9a:57:df:8f:c9:bc:a6:0f:b1:7d:be:64:c8:93:0c:18:0b:00:
5c:87:6a:6f:78:e2:b5:54:8a:81:00:b9:1f:7f:4d:ab:be:dd:
7c:88:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:44:39 2026 by rpki-client