
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File: dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier: bS20KZILN2T6CYjy6Z76Yy9ChkOFUt8kNMsuygOCraM=
Subject key identifier: 1B:3A:F5:C6:C7:57:4F:58:D9:6B:12:8C:7D:58:33:37:78:B3:4B:99
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 03DA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number: 03BE
Signing time: Sun 01 Mar 2026 01:34:09 +0000
Manifest this update: Sun 01 Mar 2026 01:34:08 +0000
Manifest next update: Sun 08 Mar 2026 01:34:08 +0000
Files and hashes: 1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: /2FScFs16JKeg29SLO+baHb7eg29ofNdF8fnTEpx93Y=)
2: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: wpxndu3e3JLlbyaAJc8xMGR8CKGxyBNouBJsOCWSNis=)
3: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: DavRSCZXh0NjWkBtqCUm0P5Y6uJAvAoKRo/hi86WtUU=)
4: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: LzJH4FwSIzAHt5kndFRR1wqiyJf/0fMEKdNxi5QEKA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 01:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Mar 1 01:34:08 2026 GMT
Not After : Mar 8 01:34:08 2026 GMT
Subject: CN=69a39791-2629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:64:a0:e7:d6:e3:7d:44:7c:dc:11:a7:1f:
8a:26:09:c1:85:1f:ba:7e:8e:8f:ff:b5:0e:a4:89:
7b:0a:ff:b4:e6:45:79:06:7d:b9:62:2d:ba:37:af:
2d:5a:b7:b5:9c:67:72:81:47:18:eb:0c:f7:bd:a9:
b2:d8:c6:e4:b1:33:c5:4d:07:4a:c4:b3:fb:ab:dc:
20:8f:5b:fd:66:76:64:68:08:91:13:bd:56:48:76:
6d:4c:c2:98:7f:4b:04:b8:3d:52:18:6b:d0:2d:67:
fb:6d:8a:4f:5b:12:e9:7d:b0:c6:7a:09:92:c3:91:
46:3c:b7:14:fa:f3:a9:01:5a:02:47:f1:37:1b:82:
19:f4:78:62:aa:51:de:b4:af:3d:25:00:f9:8a:99:
c1:a6:47:43:1a:b0:04:f7:78:9e:f6:56:5d:95:66:
60:95:33:bc:83:6b:f6:93:ca:82:ea:45:25:a8:57:
55:a8:7c:82:46:a3:7e:51:e1:2b:02:31:da:bd:68:
b2:48:ae:cc:04:0c:34:30:ea:28:40:c0:31:ac:9b:
bc:6e:87:0a:a6:50:1f:5b:91:b8:a3:10:3d:a0:80:
3f:c7:c8:04:17:64:a9:63:96:93:b4:ac:2f:e0:9c:
0e:dd:13:63:27:3d:a9:ac:93:06:48:43:e1:9d:42:
e9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:F5:C6:C7:57:4F:58:D9:6B:12:8C:7D:58:33:37:78:B3:4B:99
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:ea:91:b0:f2:ed:f7:d1:32:0e:8e:f6:2a:76:6a:97:00:c6:
dd:f7:98:e9:40:35:50:f4:7c:2c:70:21:1c:d2:f9:3d:22:00:
fa:94:54:12:cf:79:c3:09:7a:c7:9a:c4:f7:80:6d:6d:92:9d:
c1:5e:4e:26:cd:e4:9c:8a:70:a5:04:d7:b6:ac:9f:9c:8f:ff:
5e:e9:b6:36:08:79:53:78:6b:03:7e:eb:67:00:19:f5:52:30:
5d:5c:b4:2f:d8:7c:0f:3a:23:b5:80:a3:1c:bd:b3:de:a5:3b:
ef:dc:3b:79:1f:a8:e6:29:e2:a4:88:60:4e:1b:51:65:a4:01:
ff:d8:d8:f8:54:92:c4:b6:9c:3e:32:8e:8d:b2:d3:09:2c:8e:
fe:53:c3:58:92:c6:b2:2f:77:22:5f:cb:29:35:f9:a7:98:cb:
e1:f6:4b:0e:f2:4d:74:dd:aa:24:9f:28:11:02:e0:63:99:73:
2c:72:2c:8f:73:8b:b7:72:a5:36:58:d4:68:0e:9f:31:80:3a:
38:58:cc:a4:3a:b8:80:20:40:a8:09:2e:3c:ea:98:46:6b:80:
30:7c:32:5d:f4:8e:04:cd:09:61:73:68:0c:ce:5a:89:4c:6e:
cf:98:19:52:93:95:2f:3c:da:ec:2e:14:cc:53:2c:49:1e:e9:
a6:63:b5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:19 2026 by rpki-client