
$ rpki-client -vvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier: v3wE+tPadFwtcpwCJ08l4gwa9t/T2fp17Mxa+GK+FpM=
Subject key identifier: 28:BE:D0:2C:A0:D7:DF:F5:96:A9:36:4E:C6:8E:61:19:61:1C:F6:9B
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number: 01F2
Signing time: Wed 19 Aug 2026 03:56:08 +0000
Manifest this update: Wed 19 Aug 2026 03:56:08 +0000
Manifest next update: Wed 26 Aug 2026 03:56:08 +0000
Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: 4CepjowPqce3P0QZsiV41CiiJgReH12s27AT1DscfZ4=)
2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: oWL84TyZ/4qr1arE/Q8w/Mr6FtdTOaST7Iq5FUjAcrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Validity
Not Before: Aug 19 03:56:08 2026 GMT
Not After : Aug 26 03:56:08 2026 GMT
Subject: CN=6a852958-ebcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:53:f1:72:46:01:3f:81:c8:ea:f7:15:67:
9d:63:d6:c4:35:3d:1e:56:80:e7:4c:ed:9f:e9:56:
c4:6a:f4:c0:5d:99:77:85:37:de:21:28:b0:b4:e0:
90:18:68:dc:0d:1d:74:d6:69:38:cd:64:03:7b:76:
17:94:f0:c5:e3:d0:01:62:37:1f:79:d3:6f:af:ce:
c9:95:a5:6f:4c:52:04:e2:66:c2:e5:43:5c:3a:48:
50:ed:01:76:17:f6:31:7b:b9:f5:56:ea:eb:1c:2b:
5e:de:d5:5e:11:01:13:cc:16:b5:75:aa:71:80:c0:
b0:16:67:e5:88:fc:d0:ea:4a:c5:5e:1a:5b:d0:f3:
ad:1e:a0:19:53:71:10:52:51:c7:33:96:8d:27:ab:
e4:e9:ea:58:57:aa:d0:a6:9d:13:d2:bc:1f:81:5a:
8a:75:86:ec:bd:cb:15:cd:6e:94:87:a4:bc:be:45:
25:92:0d:0c:9c:b5:f0:13:1b:d0:00:5f:eb:7d:5f:
15:59:d9:ab:13:e3:ad:e6:3f:dc:c4:69:ff:55:6f:
d7:f1:4a:93:db:c3:26:f9:b2:09:ff:74:b7:31:51:
fe:f5:2f:ae:5f:01:ef:87:77:9a:20:ca:2b:91:c5:
8c:8b:0d:36:5c:74:f5:71:61:a7:5f:75:9d:64:5a:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BE:D0:2C:A0:D7:DF:F5:96:A9:36:4E:C6:8E:61:19:61:1C:F6:9B
X509v3 Authority Key Identifier:
keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:66:22:1f:db:24:20:20:04:4d:b7:23:25:db:85:8b:53:04:
46:b5:2f:69:e0:c5:e5:4a:e7:51:15:d3:ad:43:fc:0c:f6:5b:
24:e8:8b:a9:b8:2a:a0:4f:06:39:52:6a:86:e0:8a:91:d1:fb:
95:ab:02:e3:ba:d2:6c:59:35:2f:21:46:61:3f:1c:c9:75:51:
58:f6:6d:da:5d:d0:83:fd:b0:c6:3a:0d:64:c1:f3:36:80:13:
5a:d7:80:de:d7:52:87:15:a7:88:2a:21:a6:d0:1a:de:88:88:
b3:a6:a7:0d:88:53:7d:36:be:63:0f:7b:9d:1d:81:3e:cd:6f:
8f:7b:7a:db:99:03:b5:2f:29:d2:dd:75:f3:25:8a:63:b8:de:
af:0f:cd:9e:f9:85:7b:b6:59:e6:ea:dc:af:7b:05:4b:21:f2:
19:ed:5d:61:9c:55:b2:aa:ca:0f:c0:54:51:ce:fa:5d:d3:f9:
1f:97:1f:c2:1d:62:74:bb:ad:03:cf:0a:6b:5b:1b:26:90:cd:
20:4b:fd:8e:8e:32:68:d3:0e:42:80:a2:89:0a:b0:47:87:92:
f7:56:65:0a:0f:e5:78:95:8a:44:69:d9:fe:b7:8e:8c:11:5e:
3d:86:88:2f:88:48:2b:44:84:75:82:1d:36:36:f8:3b:7c:0d:
ef:47:5b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:44:36 2026 by rpki-client