
$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File: DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier: WjMNyOZAu/0ZbmicU9RGeNw8uo+VVVn5fdcAU2DbOi4=
Subject key identifier: 49:87:84:3F:4A:54:20:FB:B1:4A:9D:E8:E7:C2:B8:24:2C:28:F6:95
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer: /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial: 01C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number: 01A4
Signing time: Mon 27 Apr 2026 04:05:11 +0000
Manifest this update: Mon 27 Apr 2026 04:05:10 +0000
Manifest next update: Mon 04 May 2026 04:05:10 +0000
Files and hashes: 1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: e54ALXwXrP27A455OXI8AcjaWSj/fQtdRLjBBlGbbcc=)
2: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: yiiAX2llQ6hAEkQaEwfWJJMvBw/dD+dotQQ+ZmoUPZY=)
3: 79F7221E892911EF896D1145C4F9AE02.roa (hash: OR8jcGTbV0bFVy9IlsqFXRkqlclLb5Iptk5F3JoFORI=)
4: F278C026892911EFB08D7746C4F9AE02.roa (hash: ZftiYzw5tdEy9qN1zhkdC2fMmi3Kd8fsFrQThDbtqRU=)
5: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: Cl805i3E5GJ+Cs1OYWxNaJV0eF8zWSROQ+2LfJR2iGA=)
6: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 4DtJGQsQOtWQEaIVm9e3mKJdmYWMS51213hhqRFkVZg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 04 May 2026 04:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 449 (0x1c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Validity
Not Before: Apr 27 04:05:10 2026 GMT
Not After : May 4 04:05:10 2026 GMT
Subject: CN=69eee077-a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:a1:92:39:82:44:be:c2:93:af:5b:24:e6:
59:18:96:e0:be:28:40:55:09:26:2c:36:e5:05:a1:
ad:8b:c2:78:96:7d:54:0a:52:74:68:dc:c9:b9:50:
4f:ea:f3:18:28:2f:ab:a9:76:13:0a:6a:5d:f8:4e:
7c:f3:a9:0f:67:84:e1:0d:1b:86:3a:e6:ac:09:f6:
33:64:ef:53:86:b1:3f:19:2b:4a:2a:1f:ad:14:b3:
00:68:54:13:d9:b2:e0:50:ae:a4:12:1c:5b:09:87:
a0:50:55:dd:d9:d3:be:5d:8c:5b:55:b9:83:07:79:
b0:c8:40:49:f6:6a:bb:bd:98:cc:67:ea:6d:31:58:
3b:79:98:10:0b:7a:e4:38:5c:1f:04:25:f1:76:44:
72:10:d2:de:81:fc:00:d5:22:07:57:f2:98:ea:7a:
ce:12:bf:fa:a8:e8:b4:92:65:ce:82:c9:95:23:80:
e0:01:19:45:4c:6c:31:67:dd:65:94:66:67:b3:70:
da:d8:26:6c:b7:47:a4:6d:7b:9c:e6:67:eb:27:97:
3b:5c:fb:06:35:94:1b:37:37:d1:f1:32:00:29:f4:
41:de:9e:5c:d4:6f:eb:58:f2:8d:ae:ba:2a:b3:ca:
2e:e4:92:74:ef:5d:07:ff:2a:96:e9:61:17:2c:97:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:87:84:3F:4A:54:20:FB:B1:4A:9D:E8:E7:C2:B8:24:2C:28:F6:95
X509v3 Authority Key Identifier:
keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:b1:4f:ce:ca:ab:63:ac:d5:2e:17:e4:5c:6c:f3:ab:72:54:
5a:e6:a2:44:04:1e:dc:7a:f3:e5:a4:b5:f3:de:58:a4:25:47:
6c:0d:ef:0d:0f:96:ec:dd:d6:4c:85:2c:dc:51:29:33:cc:2d:
9c:40:55:95:cb:94:4a:a2:e4:a8:63:d7:27:6e:ff:76:f3:ea:
5e:f8:11:cc:52:81:a0:71:9d:57:f7:32:3b:f4:8f:36:89:a5:
1b:b7:f4:57:eb:19:d2:4d:5b:1c:65:16:8e:51:08:dd:84:05:
26:82:c5:7e:32:66:f0:1c:be:15:c9:1e:d6:1c:b5:de:fb:85:
de:9b:df:05:db:a6:92:3e:c7:f6:15:31:25:d0:20:72:03:24:
7e:24:ec:f9:e3:30:94:6f:e9:b0:4d:46:4f:66:6d:14:b7:3b:
57:93:2e:be:b6:48:20:3d:b4:86:c6:77:89:31:7c:97:32:70:
ac:d9:d0:81:6b:5b:da:cc:e8:ab:f9:1e:93:a9:5e:85:4b:4d:
27:fb:d9:72:4c:c3:2a:09:73:b1:97:ec:48:49:6c:3e:ec:28:
a7:f5:ee:df:59:72:77:9a:03:a4:37:67:bd:42:c8:b1:aa:87:
ee:e9:2c:6b:e8:82:6c:4a:78:3d:18:58:a5:7b:06:35:e6:83:
8e:e4:90:f3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB
RTdEQzRBRUIwHhcNMjYwNDI3MDQwNTEwWhcNMjYwNTA0MDQwNTEwWjAYMRYwFAYD
VQQDEw02OWVlZTA3Ny1hNDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtzehkjmCRL7Ck69bJOZZGJbgvihAVQkmLDblBaGti8J4ln1UClJ0aNzJuVBP
6vMYKC+rqXYTCmpd+E5886kPZ4ThDRuGOuasCfYzZO9ThrE/GStKKh+tFLMAaFQT
2bLgUK6kEhxbCYegUFXd2dO+XYxbVbmDB3mwyEBJ9mq7vZjMZ+ptMVg7eZgQC3rk
OFwfBCXxdkRyENLegfwA1SIHV/KY6nrOEr/6qOi0kmXOgsmVI4DgARlFTGwxZ91l
lGZns3Da2CZst0ekbXuc5mfrJ5c7XPsGNZQbNzfR8TIAKfRB3p5c1G/rWPKNrroq
s8ou5JJ0710H/yqW6WEXLJe1ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEmHhD9K
VCD7sUqd6OfCuCQsKPaVMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF
OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw
eVloSUx4MXgxMG11ZmNTdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAebFPzsqrY6zVLhfkXGzzq3JUWuaiRAQe3Hrz5aS1895YpCVHbA3vDQ+W7N3W
TIUs3FEpM8wtnEBVlcuUSqLkqGPXJ27/dvPqXvgRzFKBoHGdV/cyO/SPNomlG7f0
V+sZ0k1bHGUWjlEI3YQFJoLFfjJm8By+Fcke1hy13vuF3pvfBdumkj7H9hUxJdAg
cgMkfiTs+eMwlG/psE1GT2ZtFLc7V5MuvrZIID20hsZ3iTF8lzJwrNnQgWtb2szo
q/kek6lehUtNJ/vZckzDKglzsZfsSElsPuwop/Xu31lyd5oDpDdnvULIsaqH7uks
a+iCbEp4PRhYpXsGNeaDjuSQ8w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:19 2026 by rpki-client