
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier: S/Ouu8h00ipk6O3RMD1eGY1suozxG26ACNNchW63YQ4=
Subject key identifier: DB:D0:E8:05:A5:41:50:72:42:92:5C:67:B0:A1:BA:AA:44:FB:E1:43
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial: 113E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number: 1125
Signing time: Fri 04 Sep 2026 17:14:03 +0000
Manifest this update: Fri 04 Sep 2026 17:14:03 +0000
Manifest next update: Fri 11 Sep 2026 17:14:03 +0000
Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: jjlXgoQhW5yqR2fjBOD/lPCfbgONQQ6TlBdj0AXbQ2c=)
2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=)
3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4414 (0x113e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Validity
Not Before: Sep 4 17:14:03 2026 GMT
Not After : Sep 11 17:14:03 2026 GMT
Subject: CN=6a9afc5b-0730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:ae:9f:24:25:35:1a:4d:32:27:3e:b9:68:
4e:3f:6f:de:92:cf:c8:ee:f9:c7:ee:b5:70:72:b5:
fd:a6:c4:40:d8:e5:b4:b0:af:a0:dd:26:95:50:41:
29:0c:aa:6a:32:08:28:8c:61:14:25:67:fd:2f:49:
32:90:03:c0:56:a8:49:ce:a1:d0:2c:33:91:dd:8d:
24:23:f0:23:0a:b0:46:2d:ef:cd:65:15:19:2d:df:
d8:20:84:c4:5f:c1:6c:0b:b2:cc:05:db:82:1e:a9:
09:96:28:bd:b6:d0:e4:f0:7a:52:fd:bf:85:a9:a0:
8d:08:6e:80:3c:2d:32:b6:8b:70:dd:4f:36:39:35:
0d:01:b5:53:d9:21:8e:04:b5:45:f7:50:22:9d:8a:
7d:1c:48:fd:50:2a:c2:0e:7c:e1:59:b5:cf:1b:48:
a2:c1:aa:c6:21:c0:46:25:96:70:21:5a:40:2e:fa:
b8:87:15:4f:55:d8:d8:89:ff:01:59:d8:34:27:e4:
06:1c:8f:c0:c4:6f:77:92:f1:f1:15:b2:16:a5:0d:
5c:40:fa:45:c8:ef:9f:be:06:12:37:bf:fa:ae:b1:
e0:4e:32:b0:0d:aa:42:69:a7:b8:b4:71:0b:74:6f:
d0:f3:ff:46:6b:79:03:01:fa:ae:99:f1:ea:e7:ef:
43:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:E8:05:A5:41:50:72:42:92:5C:67:B0:A1:BA:AA:44:FB:E1:43
X509v3 Authority Key Identifier:
keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:64:71:3c:24:8f:27:54:51:52:a9:47:3d:bf:5f:b1:09:
5a:f3:f8:d2:24:bb:9f:6b:ea:82:cc:66:d1:0e:8e:ce:4c:fe:
d3:7c:6b:ca:bc:d5:3d:12:a4:34:c5:28:5a:d9:26:bd:1f:ec:
d8:37:15:52:11:0d:a1:72:81:7f:37:8d:ac:fd:58:bd:b4:9a:
1d:a9:9f:dd:5d:26:2d:49:d9:8a:9e:8b:04:d6:73:be:fb:fb:
4a:10:46:f2:f1:48:77:a9:27:c2:59:2e:13:c5:3b:98:36:d3:
cb:ff:68:72:d3:55:30:92:c3:73:0f:1d:6c:d0:40:be:9c:6e:
58:54:a1:8b:31:2e:af:e1:48:52:c7:78:9b:29:b2:64:7a:a2:
82:58:dc:00:66:45:ea:ce:aa:e0:f4:10:48:ce:ef:8d:f0:3c:
ce:c7:d3:a4:19:dd:58:07:83:8c:d0:42:a7:48:46:f4:12:7f:
eb:51:b0:30:b7:2f:8a:5d:99:2c:30:b0:3d:04:3b:d2:65:26:
73:91:29:eb:88:3e:68:42:f7:51:fc:a7:e4:03:dd:59:7d:08:
36:da:bc:70:c7:d0:f5:75:c2:26:0a:1f:6d:e1:e4:51:95:97:
5f:21:dc:94:4b:00:5a:22:ed:99:f6:33:cd:b9:86:7d:2b:e3:
f9:a7:a2:73
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICET4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjJERDYxMTAvBgNVBAUTKDBFMjg3MDYzMUZBMEVGRUFFOTQ1MzFEQjBFMjYwNDVD
QTNCQzgxOUIwHhcNMjYwOTA0MTcxNDAzWhcNMjYwOTExMTcxNDAzWjAYMRYwFAYD
VQQDEw02YTlhZmM1Yi0wNzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxnqunyQlNRpNMic+uWhOP2/eks/I7vnH7rVwcrX9psRA2OW0sK+g3SaVUEEp
DKpqMggojGEUJWf9L0kykAPAVqhJzqHQLDOR3Y0kI/AjCrBGLe/NZRUZLd/YIITE
X8FsC7LMBduCHqkJlii9ttDk8HpS/b+FqaCNCG6APC0ytotw3U82OTUNAbVT2SGO
BLVF91AinYp9HEj9UCrCDnzhWbXPG0iiwarGIcBGJZZwIVpALvq4hxVPVdjYif8B
Wdg0J+QGHI/AxG93kvHxFbIWpQ1cQPpFyO+fvgYSN7/6rrHgTjKwDapCaae4tHEL
dG/Q8/9Ga3kDAfqumfHq5+9DewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNvQ6AWl
QVByQpJcZ7ChuqpE++FDMB8GA1UdIwQYMBaAFA4ocGMfoO/q6UUx2w4mBFyjvIGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkRENi85Q0Q3Q0IwQTNG
RUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzctcnBSVEhiRGlZRVhLTzhn
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RpaHdZeC1nNy1ycFJUSGJEaVlFWEtPOGdacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MkRENi85Q0Q3Q0IwQTNGRUExMUU5OTE4MzlEMERDNEY5QUUwMi9EaWh3WXgtZzct
cnBSVEhiRGlZRVhLTzhnWnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARvJkcTwkjydUUVKpRz2/X7EJWvP40iS7n2vqgsxm0Q6Ozkz+03xryrzVPRKk
NMUoWtkmvR/s2DcVUhENoXKBfzeNrP1YvbSaHamf3V0mLUnZip6LBNZzvvv7ShBG
8vFId6knwlkuE8U7mDbTy/9octNVMJLDcw8dbNBAvpxuWFShizEur+FIUsd4mymy
ZHqigljcAGZF6s6q4PQQSM7vjfA8zsfTpBndWAeDjNBCp0hG9BJ/61GwMLcvil2Z
LDCwPQQ70mUmc5Ep64g+aEL3Ufyn5APdWX0INtq8cMfQ9XXCJgofbeHkUZWXXyHc
lEsAWiLtmfYzzbmGfSvj+aeicw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:33:05 2026 by rpki-client