
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier: cvyBjKresGFEji1kGjAdX+5s3eTYK2wXd1zaKdqddFo=
Subject key identifier: C2:1A:2D:B5:5E:B2:31:ED:8B:C5:C4:54:DE:3E:CE:12:F9:14:62:08
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial: 1126
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number: 110D
Signing time: Mon 20 Jul 2026 17:27:09 +0000
Manifest this update: Mon 20 Jul 2026 17:27:09 +0000
Manifest next update: Mon 27 Jul 2026 17:27:09 +0000
Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: m9oh6Z+KptlA038hrdM/H0W09h+l6pfw9X/8EE0RtSg=)
2: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=)
3: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4390 (0x1126)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Validity
Not Before: Jul 20 17:27:09 2026 GMT
Not After : Jul 27 17:27:09 2026 GMT
Subject: CN=6a5e5a6d-6e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:0a:32:9a:35:07:71:c6:98:b3:72:b1:d0:
03:34:12:4f:13:70:42:0e:16:2d:aa:71:9a:c5:af:
c0:fc:b6:27:86:75:e1:35:49:35:b8:83:cd:8c:fa:
cb:96:7b:b7:c2:62:93:1c:14:5d:94:b2:2c:5c:7b:
63:dd:96:de:3e:92:2d:4c:4c:ec:7e:22:02:ee:71:
f2:c6:4b:a7:3a:d8:fc:93:be:fb:e2:06:27:4c:56:
08:56:da:a5:bf:b6:f0:5d:05:dd:55:65:20:ef:78:
81:96:de:0e:2f:45:c4:dd:16:25:8e:00:c6:9c:cd:
a2:13:3f:9d:df:1b:d8:bc:13:e1:c0:19:1b:c6:88:
65:45:0a:d2:dc:f7:6f:b7:23:ba:82:1d:12:f4:be:
60:93:90:29:6c:45:42:05:3f:b5:c6:c1:39:71:c4:
7d:89:62:93:ff:47:40:9f:2a:48:69:b8:1d:e4:f9:
84:65:30:22:52:fb:2b:3b:43:64:80:ff:b8:78:80:
50:f8:c3:26:e3:bf:51:7f:da:0f:97:b0:f9:8d:92:
b4:0e:94:1f:ae:fb:d4:f4:2d:55:72:0f:24:36:37:
13:20:2c:ac:5e:a8:7a:14:40:69:e4:4c:cd:f5:5d:
c2:12:7c:02:29:8f:30:a3:d1:03:ac:21:6e:4a:72:
86:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1A:2D:B5:5E:B2:31:ED:8B:C5:C4:54:DE:3E:CE:12:F9:14:62:08
X509v3 Authority Key Identifier:
keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:74:0e:bf:3d:e0:ae:f7:a2:cc:fb:af:60:95:59:1e:e3:13:
31:b4:4c:ca:43:64:63:b9:6a:66:a5:af:75:f0:f2:72:d5:5e:
91:68:90:f6:c3:19:dd:8a:6c:8e:ed:56:20:2e:cb:90:9d:b3:
41:91:79:e9:a7:8d:cd:f5:b6:c4:69:01:fb:5c:bf:c6:2d:5a:
10:ed:a9:f8:c1:75:c1:b3:91:00:3d:95:4c:8d:65:0a:ed:26:
f0:c4:32:db:b3:99:b1:88:11:b7:06:11:1e:fe:70:92:ca:ae:
15:eb:21:fe:f6:29:96:90:49:c7:06:c0:1a:f5:98:23:b7:19:
5a:9b:90:7c:4d:3e:12:39:ac:7b:83:ea:6c:4b:1b:3b:99:8f:
47:43:27:f3:52:93:0b:88:c7:1f:1d:ab:62:89:0f:6b:32:34:
85:8d:16:8e:5e:67:32:97:2e:f2:60:75:97:0f:d9:3f:40:1e:
e8:8e:02:d7:9e:72:f3:be:3b:bc:2b:f4:62:93:7e:3f:f2:d7:
75:93:3d:6d:a6:ab:76:2d:59:d7:3a:2b:83:59:1d:1c:53:10:
78:e2:b1:4b:db:54:3b:ec:12:b5:ab:d6:bf:83:04:17:d4:0d:
bf:91:b6:ca:28:03:38:e9:00:2a:49:f0:66:87:2d:38:61:9d:
32:40:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:35 2026 by rpki-client