
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier: s/2vANbuDQ+dV9nBMfX3e9ICpx1BK6Sa9G9SPH8o4J8=
Subject key identifier: 80:6B:05:AF:57:9E:02:D4:C7:6A:46:D4:A5:93:E0:4F:79:E0:E5:55
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: 0119
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number: F9
Signing time: Fri 17 Apr 2026 05:59:46 +0000
Manifest this update: Fri 17 Apr 2026 05:59:46 +0000
Manifest next update: Fri 24 Apr 2026 05:59:46 +0000
Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: S4Key7vMwlyl3JW1WmFdUXKFNupWnET58QFKekGxkXU=)
2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 281 (0x119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Apr 17 05:59:46 2026 GMT
Not After : Apr 24 05:59:46 2026 GMT
Subject: CN=69e1cc52-59d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:69:8f:41:9f:2c:62:6d:7c:97:39:29:ac:
ba:20:72:c3:a8:e8:bf:89:1d:40:5a:d7:69:f9:22:
c0:9d:fd:28:d4:0b:14:a6:da:97:2f:a0:9d:95:37:
b3:65:51:20:84:bb:9e:52:1b:c0:9f:71:d6:da:8f:
aa:72:e6:5f:52:b3:d3:bf:6d:ba:ec:8c:c0:76:03:
a3:47:41:1e:c3:91:df:04:c7:41:d2:da:09:85:7d:
a0:96:f4:b6:18:7f:16:0f:45:0a:de:bd:ba:6f:b6:
44:b3:c4:d8:5e:e0:d1:de:06:1b:a6:99:9e:02:97:
2c:df:3e:ee:ce:5d:47:bd:d6:d0:89:64:21:18:b9:
32:54:19:64:3d:23:af:9d:c9:a5:7e:ec:d7:ca:3f:
50:01:45:cd:f5:ff:fc:cc:61:99:af:a1:6d:11:82:
a5:61:dc:38:aa:99:6b:77:c8:e0:66:20:35:df:56:
d5:15:63:81:9a:b8:18:d8:b2:c2:67:c5:72:aa:c7:
9b:8a:b1:c6:fd:71:d6:53:23:94:a2:65:48:e4:a0:
b7:c7:40:f9:38:73:5a:3b:3c:e3:b8:1d:4e:1c:29:
8a:0f:d5:20:af:f5:92:82:9d:f6:ab:5d:34:b6:55:
48:9f:1c:f4:45:08:39:49:fd:55:92:fa:54:ab:da:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6B:05:AF:57:9E:02:D4:C7:6A:46:D4:A5:93:E0:4F:79:E0:E5:55
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:02:8e:e9:5f:b1:45:b3:c5:23:a2:55:cb:51:87:7b:39:f2:
7c:8f:6a:8e:41:e2:db:c6:1d:08:09:48:cf:29:ab:fd:ce:8a:
ca:4f:a6:57:89:5f:8c:43:d8:9e:e0:61:d8:aa:b9:64:4b:dc:
79:ab:46:e2:3d:0c:58:4b:e4:3d:bb:7a:4b:bb:69:32:1a:a1:
7c:9c:d8:b6:47:7a:cc:b2:68:73:7c:07:cc:2a:53:78:89:00:
1c:cd:d7:3b:7b:98:85:92:aa:a7:68:0a:bb:b7:9e:de:88:7e:
e0:9b:9e:98:c2:8b:ff:d0:f7:9a:f5:87:31:db:85:84:69:82:
55:0b:15:8a:72:2c:70:7b:83:c0:26:60:5b:24:3b:9d:b4:3c:
c3:cd:f5:b1:92:18:b2:d2:68:51:bf:ae:c9:ca:1f:73:fc:e9:
e2:30:25:84:5c:62:7d:7d:75:03:f3:99:67:75:94:99:b6:8e:
3d:fe:65:b9:98:ab:45:ad:5a:c9:8d:3c:01:fb:c0:f7:83:9b:
f7:d9:04:96:bf:18:0a:4e:b6:7b:f4:1d:dc:0c:86:ce:db:41:
a7:75:77:ea:2f:32:8d:d7:2e:9b:7e:15:57:36:d9:75:5a:07:
d0:4b:34:cf:bf:fa:8d:2b:18:de:23:db:74:fc:e9:d2:57:eb:
df:f8:82:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:47:13 2026 by rpki-client