
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File: dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier: /Tik7Ig/X8HRNiVwuspHADgLwOWgBdMkRYP/nSZFCN4=
Subject key identifier: 72:53:04:66:D9:76:FE:29:54:ED:86:3A:43:9B:03:A2:DC:BC:FD:AE
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer: /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial: 0224
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number: 0211
Signing time: Thu 21 May 2026 03:01:06 +0000
Manifest this update: Thu 21 May 2026 03:01:06 +0000
Manifest next update: Thu 28 May 2026 03:01:06 +0000
Files and hashes: 1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: JA9Ubz8vnmkgrXkWsEVwb2PcDChtH2gtgF8Dq9wz5fM=)
2: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: mxJVviu3Hptch60PLa/XEKp8ctUzhsRUSvChZ9yr8zw=)
3: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: 0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=)
4: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: GGFJyDNXeKU9lT+bTxvAzkG1O7Dgf7yckhosYzf3b1Y=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 28 May 2026 03:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 548 (0x224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Validity
Not Before: May 21 03:01:06 2026 GMT
Not After : May 28 03:01:06 2026 GMT
Subject: CN=6a0e7572-da55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:b0:10:45:8e:5c:6f:d5:62:00:39:88:fc:
f8:1c:56:ee:62:ba:9e:cb:93:da:43:b4:33:8c:85:
26:07:54:5a:a3:e8:f7:49:b1:2e:66:25:3b:e5:dc:
8e:94:89:b7:b6:09:6d:cc:b0:de:a0:c5:ca:12:39:
fc:e7:b5:d5:0a:21:b1:37:90:db:86:47:1d:e5:b3:
ae:94:1d:48:7a:4d:15:15:c9:6c:3b:e2:31:98:c7:
95:81:51:e5:7d:44:f8:84:fe:71:3b:eb:b1:f9:0b:
5e:9c:e5:a5:6e:c8:34:23:70:44:14:ee:7f:f3:3b:
57:ad:c2:9f:39:8b:ab:f1:b5:7f:21:be:f4:46:14:
1c:e7:4c:6a:09:e3:ad:dd:b5:95:1b:f0:5e:83:12:
8f:fb:8b:73:e6:c6:16:35:9d:0c:b8:8b:15:ce:7a:
93:f4:1d:9d:fa:0a:75:45:66:ff:d6:e6:d8:39:a8:
d8:67:65:d2:3f:79:b7:38:fc:b3:2a:22:1b:44:a8:
d2:a4:16:fd:5e:f2:79:5e:4b:6f:f1:3e:d9:a5:a0:
48:79:96:e9:b0:98:55:a1:07:18:ef:ad:a7:4c:e1:
4d:28:2e:98:4c:b1:8f:57:42:49:1c:b2:86:53:b1:
8d:dc:fa:f2:d9:2d:e1:10:75:91:cb:f5:2f:d4:95:
79:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:53:04:66:D9:76:FE:29:54:ED:86:3A:43:9B:03:A2:DC:BC:FD:AE
X509v3 Authority Key Identifier:
keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:67:e2:91:30:66:34:4f:1a:33:b9:7a:72:e9:b0:22:86:35:
8d:1a:f2:fa:31:d9:71:34:a9:4a:a3:9d:22:28:74:6e:4c:95:
79:e2:ec:d3:f9:30:0f:6a:c8:b8:ab:be:50:8c:0e:f9:ff:17:
20:ab:fb:c5:33:3c:83:c7:07:42:4a:bf:30:83:96:d8:52:10:
7c:20:aa:97:03:7c:32:a6:01:2f:8c:22:0d:41:5c:04:13:4a:
cc:2d:40:4b:52:74:cd:79:e2:29:9f:c6:49:41:29:ca:dc:7f:
53:07:7a:e9:ec:22:04:f5:e3:05:b6:b8:12:0b:8a:43:60:c7:
c3:ce:18:f2:b5:88:d3:95:11:fc:98:f4:f4:9f:ee:1b:f0:2f:
3f:f5:e6:06:a9:4d:75:ea:56:6b:81:d9:f4:ed:96:d7:2c:7c:
49:c6:4c:83:81:a4:6a:70:2d:7a:59:be:41:04:06:66:cf:ff:
7b:b6:b6:20:c6:1f:e0:c1:3f:a5:56:8b:7d:1f:e3:a6:77:fa:
f6:9f:10:44:30:2d:63:81:06:a5:5a:35:ec:b6:4d:0c:a6:e6:
0c:f0:94:e1:f2:dd:be:56:d6:d6:ed:85:a5:3d:f6:1b:83:84:
f6:d1:bb:64:86:a8:c7:7f:87:a7:eb:4d:35:06:dd:cc:a7:cd:
ba:4b:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:53:15 2026 by rpki-client