
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier: 8iX3B7/rZqqyYIrrSCUvVqJUh0F9Gg7b6CsDk6Kn05s=
Subject key identifier: E4:CD:18:34:50:47:AA:E3:48:54:04:F0:A3:C5:AB:47:29:43:72:95
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial: 0211
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number: 020B
Signing time: Wed 07 Oct 2026 03:33:32 +0000
Manifest this update: Wed 07 Oct 2026 03:33:31 +0000
Manifest next update: Wed 14 Oct 2026 03:33:31 +0000
Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: tUrHM7VySPI9Kb4h64vug8wOes6+ZzGsLAxHSq7TZv4=)
2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: oWL84TyZ/4qr1arE/Q8w/Mr6FtdTOaST7Iq5FUjAcrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 03:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 529 (0x211)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Validity
Not Before: Oct 7 03:33:31 2026 GMT
Not After : Oct 14 03:33:31 2026 GMT
Subject: CN=6ac5bd8c-ee2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:60:0c:61:22:6b:a8:66:0a:3c:20:11:12:
20:42:cf:4f:6c:38:b5:d1:82:d6:17:23:28:3b:68:
46:97:68:41:1e:c3:65:6e:19:59:fc:22:c0:4d:c8:
9f:fb:d9:3a:28:fc:33:39:81:68:7a:55:25:e2:07:
21:f1:a6:9a:5f:98:64:c2:81:bc:4d:fb:fc:a1:62:
bf:79:2e:76:4d:7e:eb:5a:af:78:cb:4b:88:4c:82:
ae:d1:9e:0a:cc:92:6b:03:53:f1:6b:1c:71:2a:11:
a7:10:df:1f:e1:aa:40:92:94:6f:53:52:2e:70:bb:
e1:9c:6f:5e:82:ec:8d:86:96:88:2b:32:52:61:d8:
8a:1b:65:81:63:da:7e:d1:e9:c7:45:29:f8:74:ae:
28:90:b9:c8:af:fe:1d:b1:8f:7c:4d:86:71:63:c7:
f1:c7:71:5a:24:c2:31:e2:7d:bd:41:8a:e5:81:47:
e8:ba:5a:20:a9:e5:08:b5:0f:6d:b5:c0:1e:a6:20:
34:e8:83:58:9d:cf:68:c9:c2:57:58:11:2b:a1:6f:
34:32:7f:93:57:38:4e:61:6d:03:15:48:cc:96:25:
08:80:83:5a:03:20:36:57:0a:23:59:f7:99:3d:52:
54:f9:6a:33:0a:97:94:d9:26:4e:21:7a:27:5a:0f:
a8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:18:34:50:47:AA:E3:48:54:04:F0:A3:C5:AB:47:29:43:72:95
X509v3 Authority Key Identifier:
keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:db:f3:61:b2:a9:25:e0:21:be:27:65:46:42:78:df:61:26:
37:07:fc:db:bb:f3:3b:2e:6f:29:02:50:19:69:0c:bd:ca:20:
9f:5a:eb:b8:97:03:db:73:a1:1c:79:81:89:95:10:6c:03:6f:
47:3f:42:24:b2:3f:b3:99:43:95:7a:3a:2d:15:e4:0d:c3:dd:
b5:1b:07:18:81:d9:f9:0e:e4:c5:94:70:ac:75:be:7e:f0:4e:
ef:c9:a2:71:e1:6d:cf:cd:f6:c9:d9:3e:2d:26:10:af:60:fa:
b9:be:44:96:6d:52:fa:d3:45:5e:1e:b1:0b:82:7c:bd:5a:69:
9f:0d:eb:ce:bf:b2:5f:41:17:8a:d7:aa:ae:d4:28:fe:a4:d1:
83:95:3f:46:31:19:fb:bc:3f:d1:4a:1a:6e:08:54:3f:48:f7:
19:49:04:a5:2c:8d:64:e6:26:1f:07:25:b3:34:28:5e:e0:5a:
a4:86:c4:fb:fc:b8:5b:1f:9a:b1:89:af:5b:58:b6:cf:64:7b:
10:29:88:76:2c:16:57:e2:c9:22:ce:90:38:7a:f3:24:dc:6d:
76:cd:c3:6d:ed:79:10:e6:14:11:58:46:13:26:1d:f4:de:a0:
bc:32:9c:e2:e6:aa:9e:ea:88:05:5d:ee:a2:eb:32:4b:82:b0:
c2:1b:b5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:27:40 2026 by rpki-client