
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json)
Hash identifier: Q8dIVIzUSBTsTrNpew1WTg+0+ny02s+aBB9udCcFMxY=
Subject key identifier: AD:5B:CC:97:24:2B:EC:E7:06:37:F9:66:74:4B:4C:30:F9:E0:E2:EC
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial: 1049
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
Manifest number: 101E
Signing time: Mon 02 Mar 2026 01:10:44 +0000
Manifest this update: Mon 02 Mar 2026 01:10:42 +0000
Manifest next update: Mon 09 Mar 2026 01:10:42 +0000
Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: SaAm95o3KOcm1yR0lk9hMKnIM5CFoEwtjV1VptE7LL4=)
2: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: lEGaA4sdvdJB9ZdOckx6GXw78zY9nH89g3CEg6GczLQ=)
3: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: v5H4fJJFXDpxvnkvndLnuywB0eTLMDeUHDuPRNGLC1o=)
4: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: URL1ReTticLSrWgLn6MiNA2clbnttkHn48DN8d9RREQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:10:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4169 (0x1049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Validity
Not Before: Mar 2 01:10:42 2026 GMT
Not After : Mar 9 01:10:42 2026 GMT
Subject: CN=69a4e394-7acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:57:95:8b:01:3f:24:b5:eb:95:91:e6:f5:0c:
25:ca:e6:35:04:77:0c:25:31:1a:61:21:89:ee:5b:
8a:b1:50:bc:bf:2b:76:8a:94:98:4c:ad:23:2c:72:
3d:88:14:0d:66:63:f9:7f:fa:68:34:cf:41:e9:0c:
32:55:3d:54:48:1a:15:4c:e4:78:2d:5c:9b:e4:f1:
26:97:40:77:f1:c8:c3:cf:e6:91:d2:92:4d:28:a2:
76:1c:cb:82:73:71:d4:5e:09:3d:04:07:34:70:7c:
cc:f8:25:ec:7c:15:bf:d5:eb:8d:ae:5b:9e:ae:1f:
f5:a1:ed:4d:a0:79:54:5b:88:60:cf:3f:de:02:50:
82:ac:2b:d3:95:4d:51:bb:3c:28:48:ba:b2:8f:bb:
88:aa:15:ff:66:33:b2:1f:35:25:28:87:e7:55:60:
40:60:54:a2:de:bb:5e:88:c3:24:86:8d:d4:b0:7d:
72:14:b6:2c:ec:4a:a0:42:1e:8b:3a:99:eb:e9:74:
fe:df:4f:58:ef:f1:5a:01:a7:60:2d:5e:63:c4:51:
cc:00:7e:64:8a:7a:79:37:7c:7b:b3:a1:e5:c0:92:
0b:91:33:87:33:12:e9:c4:1e:14:88:e2:f7:dd:e4:
e2:a2:cd:b2:20:88:90:06:51:b2:dc:d2:1f:61:81:
15:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:CC:97:24:2B:EC:E7:06:37:F9:66:74:4B:4C:30:F9:E0:E2:EC
X509v3 Authority Key Identifier:
keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:45:ec:be:5d:43:86:ed:09:9b:e4:fe:6c:05:df:1c:ee:4d:
ae:f6:33:b0:d9:b5:ca:3b:0c:34:23:27:0b:5b:35:bc:0f:8b:
1c:37:87:b5:66:1d:e7:b2:3b:65:3c:d3:88:bb:fe:d9:20:5e:
58:95:64:ec:21:76:33:4c:66:54:75:d7:c2:5a:4a:ec:7f:6a:
78:c2:d7:0b:dd:a7:84:8f:b3:15:d0:15:cb:5d:7d:a7:21:cf:
d1:a0:53:5a:96:55:bb:68:53:ea:cd:d6:da:36:32:bb:47:db:
ce:e0:ea:74:d3:e5:13:1b:9f:0d:39:34:2a:da:0c:1d:71:55:
a2:08:4e:a0:a6:08:72:eb:3a:1c:1e:4a:7b:83:24:bf:61:85:
ce:4f:48:20:c0:bb:1a:12:cf:70:b7:5c:39:eb:45:1d:8d:05:
38:39:7d:d2:91:eb:28:24:51:d8:7e:02:79:25:d9:01:c4:ac:
29:05:3f:4b:11:01:9b:8a:49:aa:5f:70:6b:c6:3f:bf:b3:aa:
4f:d2:06:b8:dd:ed:6c:7f:0b:57:90:cf:74:dc:aa:ae:4c:23:
a5:cf:a5:0f:ae:27:d7:72:f1:9f:97:c2:6c:3f:26:a7:e7:91:
08:3f:b6:37:12:86:ea:70:95:95:04:21:c3:94:f7:33:03:fe:
6b:23:fb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:07 2026 by rpki-client