
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier: eWr7Cqwo9Mt2cWAqn15EnYDTz/CzB3wIU2TQ2NkXvlo=
Subject key identifier: FD:FA:55:68:D0:88:A9:0F:38:5F:FB:92:D7:99:25:49:6F:9C:04:D4
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 01CF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number: 01C3
Signing time: Sun 05 Jul 2026 04:26:50 +0000
Manifest this update: Sun 05 Jul 2026 04:26:49 +0000
Manifest next update: Sun 12 Jul 2026 04:26:49 +0000
Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: swTvlDMESD5ONg6oSLdH1AUUsP9aXUgCbqLuseWAidg=)
2: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
3: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
4: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Jul 2026 04:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463 (0x1cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Jul 5 04:26:49 2026 GMT
Not After : Jul 12 04:26:49 2026 GMT
Subject: CN=6a49dd0a-9b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:3e:fb:ab:63:9d:69:3e:00:12:7d:30:22:
ef:81:d7:82:73:b4:44:8e:67:4f:e0:04:af:d8:52:
38:ac:78:86:39:75:c9:6d:b0:f7:0d:5f:e1:6f:fb:
44:c6:1b:35:d7:53:48:8d:3c:b6:0f:c0:31:f6:7d:
53:f8:c4:1c:c3:c3:6f:ff:10:be:2d:48:8d:56:d4:
f5:0a:a4:a3:a4:2e:78:7f:1b:4e:49:11:12:de:95:
12:20:10:9f:fb:eb:ac:5a:29:82:50:a2:b6:13:94:
af:53:c1:03:7f:0f:d3:1b:52:eb:99:c1:71:76:94:
7f:0f:26:69:6a:67:70:7d:7a:aa:de:63:b7:8f:65:
a8:95:69:22:12:34:26:b9:e2:39:95:c2:e8:39:0b:
5f:b7:02:37:13:73:d5:6a:cf:ad:76:e7:02:be:1a:
07:ad:c5:ea:ea:09:4e:be:16:86:cb:4d:00:d2:c7:
d4:59:57:72:c6:a0:42:cd:ef:5a:44:a2:08:f1:c3:
b2:a3:a1:3c:ae:1a:78:04:8f:4a:bc:fe:b9:cd:30:
5e:d4:0c:1f:b1:f7:a5:41:80:d6:38:2e:52:8c:84:
f0:1d:fb:71:f8:a0:ee:38:69:e6:ef:6b:a0:96:39:
a8:f8:82:f3:5a:da:8b:26:7e:21:b4:a8:56:16:3d:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FA:55:68:D0:88:A9:0F:38:5F:FB:92:D7:99:25:49:6F:9C:04:D4
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:69:07:53:80:bb:b1:d7:e8:0a:1f:d8:67:b3:98:0a:48:
bf:bb:0c:ae:ab:4c:cf:10:c7:2a:b8:10:e0:79:04:15:29:aa:
fd:30:f8:cd:09:7e:54:ba:57:1f:05:34:f0:00:de:2f:99:49:
56:b9:2f:d2:17:27:af:96:32:55:60:e4:d9:53:5f:b8:c6:b8:
b3:6d:8d:2f:95:ca:ae:8c:6b:06:01:d6:e3:c5:00:75:a5:aa:
34:ea:47:95:48:22:23:b9:08:b9:fc:56:e1:e6:6e:75:04:ff:
7f:d3:c7:2e:26:41:19:ab:d5:09:c9:5f:44:96:24:f7:a6:0b:
0b:4d:08:9e:ce:a0:b9:06:de:d4:72:27:5b:85:ff:c5:10:eb:
33:67:95:16:06:1e:db:b4:89:fc:25:1b:4e:0f:be:39:0d:5f:
1d:1d:c9:91:ba:ad:29:42:22:da:f4:97:29:1b:5d:25:87:b3:
72:09:79:d1:b0:37:5e:34:e0:94:30:0c:ec:4f:0d:8a:ff:04:
0b:75:a7:d5:07:73:be:ab:ec:80:8d:7e:4b:98:f6:71:89:d1:
ae:6f:66:ff:f9:0e:7e:01:74:7c:e4:d3:6c:ea:57:58:0d:04:
3f:48:83:dd:bf:c9:b7:2d:2f:6f:27:fd:c0:a3:4b:3e:cc:84:
c1:ab:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:14:59 2026 by rpki-client