
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier: eZwDPc6Phrrcalu9hrY1/hrFspCfqChW1SxccJHKUMs=
Subject key identifier: E9:D3:67:46:B0:28:2A:0A:AC:B5:EC:24:C6:56:CF:3C:0C:AC:DF:D5
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial: 92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number: 8D
Signing time: Thu 21 May 2026 07:37:48 +0000
Manifest this update: Thu 21 May 2026 07:37:48 +0000
Manifest next update: Thu 28 May 2026 07:37:48 +0000
Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: LdfYDwxbMtaMpYNdY0GJznUuAn1Pq6FZ+16JtsjE/U4=)
2: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=)
3: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 07:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Validity
Not Before: May 21 07:37:48 2026 GMT
Not After : May 28 07:37:48 2026 GMT
Subject: CN=6a0eb64c-0e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:93:1a:31:a1:7a:1c:c4:57:57:77:8b:e5:d6:
ef:ab:a7:c0:16:68:9f:a2:e1:fa:9d:6a:28:06:9b:
0f:21:5d:3b:2d:c5:2c:a3:80:f4:d7:c1:8d:8e:07:
56:a6:e1:a2:96:83:c7:70:0b:f1:60:f5:38:0e:5e:
6b:03:a0:8a:fe:60:ba:ab:ef:0d:e2:87:f7:70:d3:
ea:58:3f:04:45:58:e3:c1:14:20:05:5b:34:a8:da:
d6:c0:51:cc:e3:9b:40:f1:2a:a9:47:bd:a6:b5:fc:
e7:ee:c3:f0:6d:43:62:cc:91:d1:10:f4:80:63:0e:
95:55:98:44:17:d9:a1:b9:cc:69:95:46:e8:40:51:
4c:f2:92:21:fc:ca:9a:0b:50:57:6e:f8:10:02:6a:
e6:5f:bd:2b:27:e4:59:87:28:85:29:89:8a:46:fe:
5b:fa:6d:17:8a:c1:cc:97:fb:6e:2c:19:9f:e7:bd:
07:d7:8d:d8:a4:65:ea:3a:23:61:44:f6:44:6c:96:
a9:4c:c6:50:a7:d9:54:ab:3f:e7:1a:f8:1a:ad:b9:
5c:f6:02:a3:75:a9:87:74:93:d8:26:3b:16:bd:b3:
bd:85:b9:52:62:d7:34:60:09:8f:f5:b5:35:df:ee:
77:56:8c:17:98:ec:2c:15:b2:89:f6:ab:e2:78:eb:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D3:67:46:B0:28:2A:0A:AC:B5:EC:24:C6:56:CF:3C:0C:AC:DF:D5
X509v3 Authority Key Identifier:
keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d1:15:ce:68:b6:44:0a:5c:fe:ae:c2:53:91:0d:e3:c2:48:
0f:51:49:9e:e1:87:97:97:70:14:5f:1c:25:f0:60:78:40:8e:
16:ce:85:9a:bd:a0:11:1d:7e:4f:7c:e5:af:2e:bd:82:7e:29:
38:47:75:15:d5:25:de:a9:90:2a:6e:bd:98:b0:40:f1:34:7b:
7d:c9:16:57:9d:44:0c:41:b3:e3:db:e6:27:0e:30:57:33:5c:
6c:d7:ab:d3:da:ce:11:63:c4:c0:c4:ea:ca:4c:9f:08:b1:af:
2a:9e:3e:9a:7a:15:b5:0d:99:a7:9a:3c:9b:49:0a:e1:7e:e6:
c8:23:d2:69:c9:7e:e3:71:27:d6:6b:8f:50:65:da:bb:f2:6b:
70:b6:12:2a:54:e4:1a:2c:bd:a5:3e:5f:ae:46:6f:8f:8f:49:
23:27:51:93:cd:c1:b7:51:2e:2e:69:41:bd:01:b7:87:27:1f:
50:d6:18:a2:71:ec:69:c4:8b:38:3b:44:08:c6:f4:ab:c8:b1:
bb:41:93:ba:f1:92:6c:e0:18:38:e0:8c:1f:bf:5b:61:eb:92:
e1:0a:11:21:7d:40:fe:53:ab:05:3f:ac:8f:74:00:8a:eb:a9:
68:b2:f7:e5:15:88:a8:ce:2e:27:93:10:8c:b5:be:1f:f0:8d:
df:e7:7d:50
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczQjYxMTAvBgNVBAUTKDc1MTFDQjMxM0VCODNGMUMzOTAyQUE2M0M0M0I3QTAz
NkFDQzYzMTcwHhcNMjYwNTIxMDczNzQ4WhcNMjYwNTI4MDczNzQ4WjAYMRYwFAYD
VQQDEw02YTBlYjY0Yy0wZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyJMaMaF6HMRXV3eL5dbvq6fAFmifouH6nWooBpsPIV07LcUso4D018GNjgdW
puGiloPHcAvxYPU4Dl5rA6CK/mC6q+8N4of3cNPqWD8ERVjjwRQgBVs0qNrWwFHM
45tA8SqpR72mtfzn7sPwbUNizJHREPSAYw6VVZhEF9mhucxplUboQFFM8pIh/Mqa
C1BXbvgQAmrmX70rJ+RZhyiFKYmKRv5b+m0XisHMl/tuLBmf570H143YpGXqOiNh
RPZEbJapTMZQp9lUqz/nGvgarblc9gKjdamHdJPYJjsWvbO9hblSYtc0YAmP9bU1
3+53VowXmOwsFbKJ9qvieOt6rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOnTZ0aw
KCoKrLXsJMZWzzwMrN/VMB8GA1UdIwQYMBaAFHURyzE+uD8cOQKqY8Q7egNqzGMX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNCNi81NDgxQUZDMDgx
QUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4dzVBcXBqeER0NkEyck1Z
eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RSSExNVDY0UHh3NUFxcGp4RHQ2QTJyTVl4Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzNCNi81NDgxQUZDMDgxQUExMUYwQjRDREFEMUNDNEY5QUUwMi9kUkhMTVQ2NFB4
dzVBcXBqeER0NkEyck1ZeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAStEVzmi2RApc/q7CU5EN48JID1FJnuGHl5dwFF8cJfBgeECOFs6Fmr2gER1+
T3zlry69gn4pOEd1FdUl3qmQKm69mLBA8TR7fckWV51EDEGz49vmJw4wVzNcbNer
09rOEWPEwMTqykyfCLGvKp4+mnoVtQ2Zp5o8m0kK4X7myCPSacl+43En1muPUGXa
u/JrcLYSKlTkGiy9pT5frkZvj49JIydRk83Bt1EuLmlBvQG3hycfUNYYonHsacSL
ODtECMb0q8ixu0GTuvGSbOAYOOCMH79bYeuS4QoRIX1A/lOrBT+sj3QAiuupaLL3
5RWIqM4uJ5MQjLW+H/CN3+d9UA==
-----END CERTIFICATE-----
Generated at Thu May 21 11:07:14 2026 by rpki-client