
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier: L352857I5llbrvpxfXEtZnmmkxa+xYuFRcv4JhsgYkc=
Subject key identifier: D7:70:21:2C:F0:AF:87:B0:CC:C0:5C:A7:EF:20:DE:47:74:9A:DD:6D
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 026A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number: 0257
Signing time: Wed 07 Oct 2026 02:43:46 +0000
Manifest this update: Wed 07 Oct 2026 02:43:45 +0000
Manifest next update: Wed 14 Oct 2026 02:43:45 +0000
Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: HD9mNvlciANHjYW/ZXaIM+EnX0eBJmW8CN2DwUO6xCw=)
2: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
4: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 02:43:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 618 (0x26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: Oct 7 02:43:45 2026 GMT
Not After : Oct 14 02:43:45 2026 GMT
Subject: CN=6ac5b1e2-56d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:dd:9b:b1:49:b0:b6:6c:47:0d:97:59:0f:
12:0f:f7:3e:72:be:23:6f:b6:ca:d3:67:73:d4:2d:
ed:c8:ec:6b:04:7f:b0:2d:b3:ba:e6:56:47:7f:3e:
7c:ff:a5:78:a2:86:55:be:d6:89:72:32:31:49:d8:
ae:fa:11:6a:22:79:1f:92:21:91:49:b8:97:1e:58:
4d:fd:cc:47:6e:8a:a0:a0:3e:e9:20:76:3e:59:1d:
8c:fc:72:7e:ee:17:94:20:b7:b9:69:cc:9f:7b:5b:
ab:c6:98:d6:5f:c9:17:44:af:94:f0:44:87:91:76:
71:b3:df:cb:44:d8:52:97:4a:6d:2a:3c:fd:78:d3:
7f:cf:ce:39:2a:88:ff:b1:12:16:b2:00:17:e7:fe:
05:5c:ba:75:44:28:47:d1:4f:a0:56:48:98:8c:98:
6b:94:69:c1:e5:f8:87:d1:cd:14:53:e9:11:ff:1e:
21:8b:97:b8:d3:53:ba:11:be:c4:8a:3c:51:0d:3a:
db:70:7b:ae:a4:4b:b6:c8:72:91:54:b2:05:29:26:
0f:3d:bc:02:d5:e0:4a:80:ac:ee:5f:24:e5:82:48:
e0:e6:70:ed:e1:d3:58:47:a5:75:0d:f9:16:32:43:
a7:b4:32:cf:87:a4:8d:e4:77:5d:a5:f7:4e:73:5c:
27:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:21:2C:F0:AF:87:B0:CC:C0:5C:A7:EF:20:DE:47:74:9A:DD:6D
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:ca:00:38:d2:e5:0f:e3:4a:2a:90:1f:0d:e0:b7:6b:27:31:
78:1f:2d:ba:71:cb:08:1f:b9:ec:4d:6b:d6:2d:3e:24:1d:5e:
54:2d:b3:5c:50:cb:1e:50:a3:13:1b:b3:80:03:67:ec:e5:e1:
10:10:37:60:2b:0b:19:c6:0a:3b:dc:64:56:db:98:73:87:78:
a4:ec:c1:f1:46:31:6a:18:40:75:b7:a3:88:00:cf:ad:8c:d2:
31:32:11:1d:fd:2b:98:18:c6:33:86:cc:a9:b9:35:60:18:5f:
92:cc:4d:ea:30:ef:f2:b3:86:9b:36:e1:0d:75:c1:84:ea:e6:
49:4f:94:2f:92:54:e8:a7:ca:fe:65:8b:1f:14:aa:44:7b:4d:
1a:78:f2:72:5f:5a:db:24:78:d3:df:80:34:32:27:30:1c:38:
09:0b:6f:64:37:99:1d:99:ab:32:13:d4:4c:1e:7a:51:8e:d2:
c0:5e:85:0d:01:df:12:70:e0:80:64:8f:7d:6a:64:c7:10:0c:
b1:56:7c:de:db:a7:07:ca:7d:7a:68:53:57:66:1d:e7:47:71:
dd:15:36:5b:74:a9:99:e4:44:31:7e:00:25:86:e9:13:c9:5d:
b4:92:99:45:d3:c0:fe:ff:2e:db:eb:f1:e2:a4:cc:2a:56:95:
9d:47:c0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:18:52 2026 by rpki-client