
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier: zqhQNW9d+271+0PD84Z8VjGi56Axg116c8cymOxKgy4=
Subject key identifier: A9:5D:47:01:EF:32:09:E6:A3:19:2E:B5:23:54:54:56:05:AA:9E:4B
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 0252
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number: 023F
Signing time: Fri 21 Aug 2026 02:33:28 +0000
Manifest this update: Fri 21 Aug 2026 02:33:28 +0000
Manifest next update: Fri 28 Aug 2026 02:33:28 +0000
Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: k9n3RE0kt87KKuFGt2eTn8YEXiiAe91vEqxlOi5ilR8=)
2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 594 (0x252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Aug 21 02:33:28 2026 GMT
Not After : Aug 28 02:33:28 2026 GMT
Subject: CN=6a87b8f8-61b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:dd:ab:ce:09:54:c1:f6:b7:2e:a9:ab:29:
61:73:a8:c6:8c:dc:84:31:55:04:be:6e:64:15:01:
85:cb:5b:d4:2a:67:29:c4:fa:6e:63:7e:46:82:0c:
b9:85:15:ef:ef:cb:4e:d0:f9:c5:a5:a2:88:f9:96:
71:c0:71:c4:6f:f0:30:32:0c:e4:ea:96:d7:37:91:
90:a6:39:99:f2:e7:73:56:36:a8:4c:dd:10:d0:f7:
24:af:03:26:0e:1c:c3:e0:8b:43:ab:52:01:47:c7:
bf:25:b9:bf:b5:7d:ad:25:c1:4e:f0:7e:fd:5f:d1:
35:b3:7f:e4:32:dd:b6:66:cc:c0:90:28:1a:38:e9:
92:84:fa:cd:99:f9:82:fa:64:02:de:b0:2b:63:d3:
66:a0:eb:fc:57:e9:2d:40:21:48:47:5e:5a:6b:e5:
c3:b8:4b:bc:4c:98:1f:45:b5:7a:16:e2:40:fe:59:
bb:89:76:e5:7f:e2:67:27:88:b6:97:c5:aa:93:bc:
2b:0d:33:23:72:88:07:e8:c8:3b:d6:35:71:48:2c:
db:0b:fa:9a:2f:30:8f:6a:04:a4:11:de:99:54:b5:
69:f6:14:56:0d:c6:b6:f7:b8:cc:4a:99:19:c6:44:
d5:67:27:04:f2:12:97:33:b9:20:07:c3:d8:70:89:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5D:47:01:EF:32:09:E6:A3:19:2E:B5:23:54:54:56:05:AA:9E:4B
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:10:76:e6:ba:51:e9:0f:96:e6:f1:16:99:25:f5:cc:5c:20:
9f:e4:7c:b0:57:9f:58:6f:f8:24:01:e5:1f:c2:ab:11:87:1f:
1f:1e:6e:12:02:46:79:b0:f4:48:48:14:0e:e4:cb:1f:c9:7c:
40:5f:7f:bd:36:69:01:33:4a:c2:c5:a2:85:67:70:75:18:d6:
a6:b8:cb:ae:6f:6c:79:b1:fd:85:d1:64:fc:2a:fd:eb:f4:f6:
db:a1:61:90:4e:4b:46:49:59:da:e0:77:44:20:85:6f:80:24:
03:10:a7:62:a4:d2:5a:cd:95:c0:92:22:3c:ff:f0:ff:85:e1:
0f:0e:d6:5b:b6:10:da:82:30:95:b1:ec:86:33:9d:1c:36:59:
be:7e:d1:e6:d6:14:cf:05:5f:2d:fd:de:5a:26:ee:ff:47:f4:
85:36:b2:9a:83:c5:83:f6:3f:80:d6:d4:54:40:b8:f5:c0:11:
f8:d9:63:e1:e8:1d:32:dc:ec:e2:96:97:a0:52:75:3a:16:74:
cc:59:6a:b3:eb:bf:32:38:27:e7:97:72:cd:ca:ad:58:cf:0f:
6c:b7:5e:75:9a:a5:3e:73:6f:36:56:5a:4a:e1:84:e5:14:73:
b1:66:e4:70:10:85:9f:d8:63:68:ee:be:9c:96:17:0c:3a:da:
bb:5c:56:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:20:47 2026 by rpki-client