
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json)
Hash identifier: Brd9WfRRmQ55gun52nZc7JxS9ahF2PbCx1XlVUPNMxs=
Subject key identifier: 04:9D:D3:EF:9D:E1:AA:27:63:57:29:69:F5:D7:A8:84:88:BE:07:AA
Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Certificate serial: 1076
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
Manifest number: 104B
Signing time: Thu 28 May 2026 17:19:00 +0000
Manifest this update: Thu 28 May 2026 17:19:00 +0000
Manifest next update: Thu 04 Jun 2026 17:19:00 +0000
Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: 8RbNSlegZBLUABf2rU7Mp6i5ibfIKTccmfYeE+YgWQ8=)
2: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: URL1ReTticLSrWgLn6MiNA2clbnttkHn48DN8d9RREQ=)
3: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: lEGaA4sdvdJB9ZdOckx6GXw78zY9nH89g3CEg6GczLQ=)
4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: v5H4fJJFXDpxvnkvndLnuywB0eTLMDeUHDuPRNGLC1o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 17:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4214 (0x1076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F
Validity
Not Before: May 28 17:19:00 2026 GMT
Not After : Jun 4 17:19:00 2026 GMT
Subject: CN=6a187904-bc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7d:8d:f9:d2:4e:67:98:b4:02:cb:da:c0:93:
08:ec:b7:e2:c6:37:86:0e:17:f9:27:4e:84:0d:17:
44:ad:6f:78:f3:86:50:ac:83:9c:81:1a:1f:96:c3:
ed:07:4a:eb:c7:d6:6b:98:04:50:55:65:53:ab:03:
ae:84:76:6c:a4:12:66:ea:06:f1:6e:16:fe:19:c5:
9a:c5:fb:a9:51:3d:7b:40:7f:e8:1b:a6:a8:2a:93:
7a:8d:82:68:b6:34:ce:49:23:32:e6:51:1b:c4:6a:
7d:cf:36:9d:3d:0b:47:7c:b0:0d:28:e7:f2:b5:28:
db:33:6c:a3:21:4d:60:fa:5a:48:61:28:2f:bc:8d:
e6:39:45:af:b0:71:f1:ea:c1:a1:6c:34:ac:cf:df:
d5:f6:55:ce:98:46:e6:52:4e:48:54:cc:da:54:66:
9f:62:05:b1:5b:70:48:e6:10:3b:7b:8d:43:9c:d1:
0e:8b:76:fe:8f:4a:c5:7a:8a:83:e0:ba:30:f0:a6:
3d:0f:5d:0b:6d:4d:da:a5:e0:67:c8:7f:75:52:d3:
99:88:90:78:78:97:b2:3f:d4:53:54:68:65:8b:0a:
cd:2d:b0:67:53:f3:a6:bf:3b:2e:43:30:a5:a1:94:
ca:1a:93:c1:c4:c3:ac:9a:37:c4:1c:f4:9f:20:d8:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9D:D3:EF:9D:E1:AA:27:63:57:29:69:F5:D7:A8:84:88:BE:07:AA
X509v3 Authority Key Identifier:
keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ef:a9:eb:d7:ed:2a:5c:b4:fd:90:4a:21:ea:e9:70:7f:6d:
0c:75:b2:51:84:40:23:ed:08:9c:a5:d0:c2:19:a8:87:de:57:
bb:ab:dd:00:df:09:4d:b6:0d:64:a4:d7:9e:ed:62:c1:00:28:
ff:d2:f1:e3:94:d7:3c:37:c3:d4:9b:98:b4:cc:3b:7d:2e:20:
77:b2:bd:61:70:c2:6a:54:ff:21:5f:4e:8f:0d:f2:c0:e9:e6:
58:26:f1:70:e9:d5:c2:1c:58:58:54:e7:cb:ad:f6:06:ee:f1:
93:87:af:5c:48:e1:07:fe:0f:28:7c:59:a6:0d:11:a4:8e:de:
8a:7b:2f:ee:87:49:a3:b7:92:0a:96:26:f5:15:02:c3:fe:2d:
68:4e:66:65:b0:86:a4:41:c3:a1:d0:15:78:15:b4:fc:11:bb:
f4:f0:0a:03:31:d2:d7:4c:6d:92:a1:55:de:75:e9:29:2b:ad:
52:b2:42:67:50:7b:a9:14:4b:3c:93:79:ea:44:4a:0c:c9:e5:
86:2e:7d:2a:78:6a:b8:37:ed:25:83:f5:04:84:3c:87:fd:c0:
8b:ad:26:1e:0c:46:d3:3b:ac:67:52:35:dd:5f:d4:2a:56:5f:
3a:54:38:7d:a9:ab:01:34:72:18:26:11:ae:10:c5:35:b4:b7:
48:d8:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:38:02 2026 by rpki-client