
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier: Z600oJfraOGtCa7wyASpY77uFjoMA+VwR7XAS4148WI=
Subject key identifier: BE:BF:A8:68:ED:66:01:21:6E:FE:FA:3D:6F:7A:0A:57:64:0C:A5:0E
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: 0176
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number: 0156
Signing time: Mon 19 Oct 2026 05:52:00 +0000
Manifest this update: Mon 19 Oct 2026 05:52:00 +0000
Manifest next update: Mon 26 Oct 2026 05:52:00 +0000
Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: itquzwqQeE4U2Cr8OCh0q/Dvu3v90cspuTmsZsbN1rM=)
2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 05:51:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 374 (0x176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Oct 19 05:52:00 2026 GMT
Not After : Oct 26 05:52:00 2026 GMT
Subject: CN=6ad5b000-03c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:35:c6:77:dc:ec:59:98:26:2e:31:05:e5:
e8:cd:89:79:3c:1f:97:25:9d:df:cb:9c:dc:8c:d5:
36:36:c2:a3:4e:1e:f2:bc:86:e1:1d:06:0b:0d:96:
a9:e5:06:27:71:2c:77:5d:28:8a:28:ea:e6:b9:4d:
d3:89:62:0d:3e:84:4a:a6:0c:e5:a4:7f:95:37:11:
1e:04:63:ef:5c:40:7f:78:11:e5:ea:87:9f:53:2d:
e4:0a:b6:05:cc:3d:68:95:a1:01:e2:ee:3c:55:6b:
32:ff:8e:31:d0:e5:53:78:01:fa:63:e4:ed:5d:34:
c3:f5:dd:3c:4f:b2:39:f4:3a:d4:af:39:e3:01:8e:
58:f6:05:a2:f1:d9:62:39:9d:7f:58:5c:c1:0c:cb:
0c:ab:0c:41:5f:dc:bc:f7:24:0e:1a:a2:d3:b7:55:
de:57:88:7f:d9:9c:25:42:3f:e3:b3:47:08:a4:76:
a1:20:14:e8:7d:a5:b1:72:94:ca:de:58:88:41:3e:
5b:cf:0d:e6:64:d6:98:15:9c:3d:a1:5e:de:80:e5:
fb:e4:55:50:d6:99:ca:fb:86:d4:c5:9e:18:60:36:
50:2c:e2:80:fd:18:ed:58:5b:fc:18:5a:7e:58:bd:
d3:ad:a8:8c:13:8c:e0:55:cb:a6:bc:54:f0:0d:c7:
fb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:A8:68:ED:66:01:21:6E:FE:FA:3D:6F:7A:0A:57:64:0C:A5:0E
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:fd:f9:32:1d:c7:6f:43:28:43:4d:93:bc:f6:05:36:a9:e2:
c6:0d:60:f7:8a:40:dc:67:fd:05:84:d4:2f:69:50:73:a5:e6:
b5:05:03:4c:f7:51:34:d4:c7:7f:36:38:ad:d3:8d:cc:ed:f9:
55:c1:4c:25:b4:f9:a0:fe:05:85:16:14:79:59:71:c3:c2:80:
2e:b1:ec:82:a5:6f:7e:9f:00:05:14:af:62:fd:05:cb:03:74:
86:eb:a0:a8:73:5c:1f:de:18:46:75:4a:f4:d9:32:be:84:8a:
74:a6:0b:d2:93:5f:68:85:c7:b4:96:61:b0:ab:db:5d:47:0c:
bd:2a:68:a8:58:5d:06:92:a7:b8:d2:74:1c:b6:d3:ed:f9:81:
61:ed:61:85:22:0c:19:cf:b3:e3:c3:12:d9:59:75:55:47:ee:
e0:6a:78:9b:f4:a0:28:3e:6d:58:69:6f:b4:85:1d:95:19:cf:
9a:dc:1f:f2:a4:ab:6b:96:b1:ce:1d:f5:ac:a2:97:cd:11:20:
99:98:e9:be:44:5e:88:75:43:c7:a0:ce:68:ef:dc:f5:e9:f7:
b4:52:4b:89:de:de:3b:39:e1:1b:5c:f8:b5:b4:7e:5f:1f:2a:
26:96:b7:01:78:ec:8f:88:ba:13:01:e9:ee:d2:c5:f0:b4:55:
5e:50:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:21:38 2026 by rpki-client