
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File: diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier: AJ2/JWo2YSvJ9rOXmSUNqchcLWCUyd/fJoAhIqSrcIE=
Subject key identifier: 92:46:C5:51:99:54:F4:02:61:6B:C9:96:74:8F:CD:5D:AE:9A:6C:50
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial: 014C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number: 0148
Signing time: Fri 09 Oct 2026 06:02:16 +0000
Manifest this update: Fri 09 Oct 2026 06:02:16 +0000
Manifest next update: Fri 16 Oct 2026 06:02:16 +0000
Files and hashes: 1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: c8QQqyDHKOc/1PySwJwjYiwOxrtQikk6kHTpL+UPB3s=)
2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 06:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 332 (0x14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Validity
Not Before: Oct 9 06:02:16 2026 GMT
Not After : Oct 16 06:02:16 2026 GMT
Subject: CN=6ac88368-dea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8c:ed:c4:b9:42:f9:34:78:3b:d5:63:4d:ca:
89:e1:37:6c:f3:89:ab:47:d4:8d:1f:5f:ee:78:e9:
76:f1:87:9f:9d:1a:12:66:83:17:ca:ac:44:b6:24:
8c:7e:0d:af:12:c4:2e:5b:82:11:e1:b8:61:1f:2c:
cf:62:5f:c9:1e:6a:bc:5e:ef:45:16:fb:fa:5a:59:
0e:13:93:01:ff:d0:6e:ca:84:d6:1b:94:71:ad:d8:
b6:66:7b:49:ab:d3:e9:ae:c0:fc:72:9c:bb:9d:fc:
b0:68:09:71:4d:8b:dd:df:61:12:44:6f:67:ff:42:
80:bf:6a:2a:d0:83:c0:30:52:1e:e9:32:b6:96:81:
a2:20:75:2f:78:c0:f0:da:57:ab:f3:b8:3b:eb:93:
47:26:84:0d:7a:61:32:42:9b:95:a3:2a:67:eb:42:
f3:5e:ab:04:7f:5b:fb:23:e4:95:ff:91:85:e3:91:
23:dc:f5:f3:ef:f1:ef:8a:e5:c0:59:39:98:6f:0b:
dc:89:b5:a6:6f:d1:e8:97:70:dd:a4:dd:35:53:08:
ab:01:8f:ba:59:42:cc:0a:95:c0:2a:a7:74:d5:25:
97:ef:47:c2:e0:8c:0a:f1:73:d7:8b:7e:bf:78:ba:
3f:3a:43:0a:1f:f7:23:3f:ce:6c:38:e6:43:e3:4a:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:46:C5:51:99:54:F4:02:61:6B:C9:96:74:8F:CD:5D:AE:9A:6C:50
X509v3 Authority Key Identifier:
keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:47:85:c4:87:96:99:54:60:9f:a6:a7:6b:ec:1f:0e:0f:cf:
12:f7:73:7d:14:88:cd:18:05:bb:f8:aa:4d:65:23:d4:c7:40:
91:5e:45:9b:55:91:45:3b:72:f5:c7:df:b4:14:68:12:74:b5:
8e:1d:41:ce:f5:da:16:c4:56:8a:de:67:19:e4:a4:b4:30:b7:
e6:d7:52:88:0a:73:8b:90:76:58:ea:a5:37:1c:c7:4b:67:37:
2a:78:32:a6:87:40:95:b7:5d:91:2e:3f:34:f5:fa:44:97:3c:
0e:82:53:c3:be:77:d9:93:3b:5b:3b:21:b7:38:11:9b:e2:03:
66:85:b8:d1:cf:e3:43:d8:24:a4:14:13:30:1e:65:92:08:4e:
83:b0:c6:79:1c:46:a1:8b:85:eb:ef:ac:0e:4b:f8:13:db:f5:
6c:f4:75:41:76:11:e1:dd:65:5b:17:c8:25:9b:6a:cf:ee:61:
30:d0:51:1f:42:48:d4:a1:99:6a:9e:91:64:62:f4:01:1f:d8:
f8:d8:a9:04:96:ab:6d:20:cb:e2:d5:64:d9:f6:8a:5e:d6:4f:
d9:50:49:81:7a:a5:c6:f7:c7:ea:cc:d1:d0:d8:02:46:b0:74:
7e:01:49:6e:10:9f:95:7b:af:20:21:03:63:a4:b1:bf:56:29:
4b:57:6b:85
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU2NjAxMTAvBgNVBAUTKDc2MjAyNjZCOTg5MUEyMThDMEU1RjJFRjI4OEY3ODJE
NTcxN0YyQkMwHhcNMjYxMDA5MDYwMjE2WhcNMjYxMDE2MDYwMjE2WjAYMRYwFAYD
VQQDEw02YWM4ODM2OC1kZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAioztxLlC+TR4O9VjTcqJ4Tds84mrR9SNH1/ueOl28YefnRoSZoMXyqxEtiSM
fg2vEsQuW4IR4bhhHyzPYl/JHmq8Xu9FFvv6WlkOE5MB/9BuyoTWG5Rxrdi2ZntJ
q9PprsD8cpy7nfywaAlxTYvd32ESRG9n/0KAv2oq0IPAMFIe6TK2loGiIHUveMDw
2ler87g765NHJoQNemEyQpuVoypn60LzXqsEf1v7I+SV/5GF45Ej3PXz7/HviuXA
WTmYbwvcibWmb9Hol3DdpN01UwirAY+6WULMCpXAKqd01SWX70fC4IwK8XPXi36/
eLo/OkMKH/cjP85sOOZD40qiIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJJGxVGZ
VPQCYWvJlnSPzV2ummxQMB8GA1UdIwQYMBaAFHYgJmuYkaIYwOXy7yiPeC1XF/K8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY2MC9GOTg3MTFEQUQy
NDIxMUVGODhDNUJDMTFDNEY5QUUwMi9kaUFtYTVpUm9oakE1Zkx2S0k5NExWY1g4
cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RpQW1hNWlSb2hqQTVmTHZLSTk0TFZjWDhydy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTY2MC9GOTg3MTFEQUQyNDIxMUVGODhDNUJDMTFDNEY5QUUwMi9kaUFtYTVpUm9o
akE1Zkx2S0k5NExWY1g4cncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMkeFxIeWmVRgn6ana+wfDg/PEvdzfRSIzRgFu/iqTWUj1MdAkV5Fm1WRRTty
9cfftBRoEnS1jh1BzvXaFsRWit5nGeSktDC35tdSiApzi5B2WOqlNxzHS2c3Kngy
podAlbddkS4/NPX6RJc8DoJTw7532ZM7WzshtzgRm+IDZoW40c/jQ9gkpBQTMB5l
kghOg7DGeRxGoYuF6++sDkv4E9v1bPR1QXYR4d1lWxfIJZtqz+5hMNBRH0JI1KGZ
ap6RZGL0AR/Y+NipBJarbSDL4tVk2faKXtZP2VBJgXqlxvfH6szR0NgCRrB0fgFJ
bhCflXuvICEDY6Sxv1YpS1drhQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 22:44:32 2026 by rpki-client