
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File: DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier: /xrBpfyFCAd62dmpv3BjVXWS/L5VVtnpr9C7B6Da34U=
Subject key identifier: 5C:7E:B5:FC:07:76:18:16:8F:EA:05:64:7B:24:75:7C:DA:B4:DC:7B
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer: /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial: D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number: CE
Signing time: Sun 05 Apr 2026 06:12:15 +0000
Manifest this update: Sun 05 Apr 2026 06:12:14 +0000
Manifest next update: Sun 12 Apr 2026 06:12:14 +0000
Files and hashes: 1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: FQ7KOjMWNnjnEdIQGmstXhoG+lbG5tFI6NKo9g3ZeUc=)
2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 06:12:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 210 (0xd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Validity
Not Before: Apr 5 06:12:14 2026 GMT
Not After : Apr 12 06:12:14 2026 GMT
Subject: CN=69d1fd3f-640f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:37:9c:7e:66:69:70:4f:23:e3:44:8d:98:
e1:7d:85:f9:91:a5:9b:12:12:eb:33:5f:30:5f:b4:
43:06:52:c1:17:54:d5:c5:f8:e7:df:a0:e6:ef:4a:
fe:c4:3b:3d:2f:c3:cb:e4:79:74:eb:1f:1c:71:08:
29:35:8b:0c:84:88:1b:09:03:f5:d6:ac:3c:eb:32:
b5:fc:64:d5:a6:49:67:8e:a0:95:a3:ce:f8:41:8c:
95:a9:80:00:38:d0:3a:9b:40:a8:b3:04:cd:d9:a6:
d2:d5:94:28:e9:45:40:31:e0:d6:9b:be:09:59:a1:
62:85:68:d0:d0:70:d3:44:34:df:b1:8f:39:fc:1e:
d0:bb:9c:ac:03:39:f7:e2:9f:60:a6:f4:27:d4:bb:
2c:f2:5e:e4:df:39:c5:b4:d9:ef:d0:81:70:cb:34:
17:2d:96:7c:37:9e:a2:9b:16:e7:6e:8d:be:0d:98:
af:73:60:77:47:fe:23:55:04:94:4d:e1:a0:c8:77:
9c:4c:33:ad:a9:51:3d:8a:a7:52:8a:d2:fe:83:a9:
72:51:c2:61:05:38:56:0b:c5:df:38:4a:dd:00:13:
e9:89:f1:6e:cd:be:3b:27:cf:a5:3c:39:2e:9c:eb:
38:07:b1:d9:a3:cf:cf:6c:d1:53:c8:d9:64:dc:55:
41:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7E:B5:FC:07:76:18:16:8F:EA:05:64:7B:24:75:7C:DA:B4:DC:7B
X509v3 Authority Key Identifier:
keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:8a:ae:ad:4b:15:18:7a:27:bc:7e:9b:55:75:9b:30:b1:1a:
42:2e:2c:3d:4e:15:2a:e4:f8:2f:ca:3a:ca:41:35:24:54:4c:
a4:9a:2c:23:84:cc:97:11:57:5e:10:ee:20:40:bd:5c:77:62:
79:a6:27:83:7a:07:98:3d:11:ce:71:1d:c3:40:6f:da:1b:cb:
b1:51:97:15:dd:f6:73:cb:f3:09:ec:90:0a:22:ff:8e:a3:63:
a6:a8:82:81:02:ff:02:ff:57:83:9e:04:b9:13:1c:e7:e6:f5:
0d:29:a8:fe:d1:48:ae:e2:a6:c5:81:a0:c1:50:a6:18:1d:1a:
ac:d0:dc:47:87:a0:4d:04:d2:c0:d9:06:1c:a6:f6:98:ad:ce:
63:40:f4:c5:3b:63:3f:1a:13:f7:0a:18:7a:02:81:ac:3c:b5:
73:6f:e0:c5:4f:cb:c9:46:d1:11:c8:13:8a:55:02:8b:9b:f7:
00:c7:32:47:9c:8c:d5:84:29:b4:76:37:5c:a9:e2:4b:fd:35:
00:a1:e9:2b:1d:a1:65:53:2d:de:f7:db:36:e7:4a:17:5e:a8:
aa:c3:b5:92:cc:3b:25:9e:01:a9:4a:18:e0:65:36:3c:ec:3f:
f0:52:31:ee:27:b4:10:9a:93:da:3f:72:c8:97:3e:e9:2c:8f:
ac:92:14:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:56:14 2026 by rpki-client