
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json)
Hash identifier: 0fsY6gIvgL4W8i6wQvNCo4XiidTz9sUo9zWB5ZBuHv0=
Subject key identifier: B3:30:27:FE:0A:09:DA:E6:0A:D9:85:5F:5C:F5:0F:D0:53:C4:28:F3
Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Certificate serial: 0113
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
Manifest number: F3
Signing time: Sun 05 Apr 2026 05:45:59 +0000
Manifest this update: Sun 05 Apr 2026 05:45:59 +0000
Manifest next update: Sun 12 Apr 2026 05:45:59 +0000
Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: jWDfu9WQOolVAwtCOLsTLOMnAjs1SdIOLQdpNHfncso=)
2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: c4VFZAceUdJlng/FeQRaHeNTf/QP511PnqvINvkog+A=)
3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: gOLrlN2EfbwTp4zsFTkIHkRkrBvQ0xLDRVKKWvZfbic=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 12 Apr 2026 05:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 275 (0x113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1
Validity
Not Before: Apr 5 05:45:59 2026 GMT
Not After : Apr 12 05:45:59 2026 GMT
Subject: CN=69d1f717-235b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2c:d5:11:8a:4e:a1:8b:45:67:e9:8f:6f:4c:
f2:07:c5:94:65:4d:1b:9f:21:9f:4e:2a:8f:e5:5f:
63:7d:ce:36:61:11:55:1f:00:88:13:70:1a:cf:15:
a7:70:37:08:0a:03:d5:19:18:4c:b6:04:dd:51:80:
7e:04:f6:cc:39:90:15:a1:fa:66:91:d1:51:6b:11:
b3:09:7a:4e:94:c5:8c:7c:66:2a:46:ae:4b:10:4c:
76:d6:a9:ef:d3:bd:1b:39:08:7c:a1:89:92:d0:4a:
df:b6:09:1f:91:0c:e6:32:fe:0e:ba:e2:4d:36:ce:
f1:47:a1:11:41:87:d5:53:4b:43:7c:71:a1:b5:bd:
8e:d6:60:a6:1f:3e:23:3d:de:46:12:56:19:d5:29:
86:a8:cd:b9:59:ab:9a:10:2e:69:d8:a5:23:2a:4e:
fa:6e:44:f7:df:b3:f0:8a:0d:7b:c6:38:51:8f:49:
75:3a:d8:9e:81:c3:4a:ef:ee:b2:d0:0a:c9:90:38:
30:d2:d2:9c:26:9d:ce:1c:65:c4:86:a0:ee:0e:62:
eb:89:e0:ba:71:a0:24:39:d7:16:d1:c9:75:10:a8:
8f:e4:5d:d7:40:2e:39:2a:72:5e:a6:8a:51:c4:fa:
14:da:18:2a:ae:1f:e8:05:35:b1:eb:81:17:5c:e8:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:30:27:FE:0A:09:DA:E6:0A:D9:85:5F:5C:F5:0F:D0:53:C4:28:F3
X509v3 Authority Key Identifier:
keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b9:95:8a:0f:00:12:52:b3:c6:44:35:a4:82:86:0c:59:e0:
06:78:25:03:aa:8e:c5:51:67:45:16:e5:ee:87:4e:bb:90:cf:
ce:1f:8c:2e:b9:2d:4c:c4:a2:ab:b3:49:84:ea:ee:5a:01:13:
2a:22:66:49:dd:fc:12:6e:41:5a:fc:dd:fc:ef:e8:ff:1b:03:
b1:62:67:00:62:6a:a1:04:58:89:41:91:3e:48:12:54:5b:07:
af:45:26:41:76:f9:d0:68:a1:bc:a5:51:fc:d0:4d:fe:13:2c:
65:f9:8d:90:13:e6:54:6e:65:8a:96:90:e6:cd:d4:91:8c:82:
6f:83:c7:cb:72:98:bb:4d:34:c6:9f:ec:bb:08:ed:e9:0f:70:
06:1a:c4:12:9a:17:dc:38:2b:f3:82:7e:79:44:ca:ba:39:01:
6f:75:25:32:81:af:db:fb:4f:3a:5e:8f:d6:8a:a5:03:cb:cc:
60:e3:37:a7:e9:53:bf:d0:3d:42:7f:0d:a6:e1:1e:09:ec:e6:
59:38:4c:c9:b4:0a:aa:f9:fe:6e:95:a9:80:be:a1:11:04:b7:
14:8f:01:b4:3b:54:d8:73:c6:7a:f5:25:73:25:ed:43:9b:44:
e7:39:d5:ea:a7:79:a1:ea:03:69:5b:86:da:9f:09:92:44:fe:
b8:eb:97:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:19:33 2026 by rpki-client