
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File: dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier: DeZFTunANmOD235Jz3eSeXMx1ca1VKJ+WXqEQ1xnSiA=
Subject key identifier: 9F:24:37:E7:6D:89:F9:1A:18:7F:03:EA:EB:8A:84:49:C3:66:E5:07
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 044D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number: 042B
Signing time: Sun 27 Sep 2026 00:24:33 +0000
Manifest this update: Sun 27 Sep 2026 00:24:33 +0000
Manifest next update: Sun 04 Oct 2026 00:24:33 +0000
Files and hashes: 1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: LMa3gIjdZ7vIuJDWvgoEwAZJQoLaRLCeOmWZ6jjApK0=)
2: B5A58DFAA1DB11EDA7229653C4F9AE02.roa (hash: UkES/CxICv09d0uGUMz/gs2WBJwtenSFnqdcWW4puhI=)
3: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: T+dFvi2GR1y0VbmfBh2DST8Ey8SHcUJKlSrtkpwhtKY=)
4: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: IRdNJjTPwpC5362Cgsln4BPVYZtI5Af6DonyUMaqG9I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 00:24:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1101 (0x44d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Sep 27 00:24:33 2026 GMT
Not After : Oct 4 00:24:33 2026 GMT
Subject: CN=6ab86241-9c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c3:f3:bf:4a:d6:8e:e6:3d:46:05:4c:b7:db:
58:da:58:39:bd:01:7a:51:b7:af:9e:e1:b9:b8:1a:
09:67:aa:f9:ff:2d:91:85:14:f3:e7:9d:86:a6:2b:
55:74:69:c3:a0:ef:5c:fd:8b:8f:ce:ad:6b:27:6d:
cb:64:5d:2c:66:83:7c:81:1d:3d:d2:1c:f6:e2:3b:
50:4a:46:25:2f:c8:f4:02:ea:c2:b4:31:1d:32:e5:
8b:c8:a0:f7:86:32:fb:90:29:5c:59:23:2c:d4:4f:
9a:02:a3:ab:fb:0b:0e:ac:18:0a:9d:84:dc:fb:c8:
f2:7d:f2:80:01:9c:3f:7c:4a:4d:6c:a2:16:7b:91:
d7:c1:09:1d:a6:0a:1f:13:81:74:22:ca:cc:0d:eb:
3c:56:36:78:b1:4c:22:31:89:dd:7f:9f:e6:e6:b2:
67:92:ab:86:34:40:80:1a:1f:26:f5:16:03:7f:77:
c7:24:98:be:da:52:95:ec:99:54:ca:19:5c:23:6f:
dc:94:4b:da:af:07:4b:de:7b:cc:de:8f:17:b5:25:
0a:97:8e:c4:78:f8:60:95:4f:ed:01:c9:a9:ef:3f:
1b:6c:b9:82:81:e3:99:c4:fa:48:c2:39:08:37:97:
e3:66:df:cf:14:f7:c0:65:ba:f1:55:f6:7e:d1:3c:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:24:37:E7:6D:89:F9:1A:18:7F:03:EA:EB:8A:84:49:C3:66:E5:07
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:77:a3:ca:3d:0f:3e:68:fe:d1:4a:65:a2:01:21:13:56:
6c:3f:3e:27:6d:af:4f:07:d2:56:8d:9d:e1:04:f9:c8:5f:02:
17:ea:33:2e:4b:01:8a:47:08:06:e3:00:eb:49:2f:1d:c3:74:
15:81:28:8e:4f:0a:13:ca:71:d2:2f:64:a3:8b:64:8a:e7:02:
ec:73:fd:b3:c7:08:fe:18:94:2d:95:0a:24:e7:59:1d:57:97:
09:f1:18:47:2c:14:3e:f4:d0:75:21:c1:8e:c9:f1:e4:18:04:
48:54:3b:91:18:35:48:e8:40:87:90:38:a5:86:cb:54:2e:06:
2a:56:de:74:d1:b9:54:63:cb:2c:fd:90:9b:29:6c:e1:42:ae:
4d:ad:9b:cf:75:23:4a:c2:f8:c4:89:41:26:ae:f5:e7:2b:ec:
fe:cf:cd:7d:c2:f5:c9:cf:81:52:29:df:42:d1:32:24:0e:6e:
37:22:69:1e:ac:83:3a:59:7a:4c:a7:e5:eb:a2:31:76:1f:b1:
38:c4:93:42:21:31:d0:77:05:99:cd:bb:3b:a0:59:34:d1:6a:
d3:82:7b:b8:36:83:1b:a4:56:db:3e:fe:db:9f:b8:37:c1:e2:
fd:31:de:0a:c9:2b:f7:29:cb:01:65:80:13:81:8e:c3:e6:30:
64:91:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:29:58 2026 by rpki-client