
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: fw1LDZlojxyPX6zyLxDDo2j6uYmQySaiMxe/pNGl75Y=
Subject key identifier: D0:16:B0:7E:4F:07:73:D0:7A:2E:3D:DC:7D:80:4A:CA:1E:E0:3E:96
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 0843
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 0818
Signing time: Wed 10 Jun 2026 21:09:48 +0000
Manifest this update: Wed 10 Jun 2026 21:09:48 +0000
Manifest next update: Wed 17 Jun 2026 21:09:48 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: gupfMGhxzdbJS9zRMgQ36qbkSzxkve5cQAWrINY3FMo=)
2: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: ckkrFHfHPvCjRaJjyuzP7GHAhWSZqQc+qwApdpLN6A8=)
3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: LHyE9JquxrZVA6+YxqyZyhj2fRXxq3kNX+szFQORjMs=)
4: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: m6XByjxJzDUTkNjuzEeyi14AtxJwJj6V0wXPEnnJGWs=)
5: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: zW47GWJIKBsxxAmlt2jzTuG4DK9SAdUIfdf1Khk40KQ=)
6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 7Dc/p26scQyExOCr6ls3XR465cvStZZWQekkba/lKsA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 21:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2115 (0x843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Jun 10 21:09:48 2026 GMT
Not After : Jun 17 21:09:48 2026 GMT
Subject: CN=6a29d29c-fe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:10:12:9c:a9:f2:1b:70:b8:4d:f3:e5:d8:1d:
1a:1c:88:b0:63:81:4a:6e:ea:c8:93:7b:bf:ac:cc:
92:38:fe:5d:8b:f2:7a:9d:26:c4:c0:96:ea:5e:17:
cc:47:a1:7d:e9:57:49:3a:8c:81:9b:16:5b:9d:fb:
fa:fb:5c:45:71:6c:71:6a:45:9f:dd:8e:30:7c:3a:
4b:e1:f8:05:42:f9:34:14:3d:93:34:45:a1:58:a0:
2b:69:83:27:aa:eb:66:1c:87:8a:4b:88:bf:dd:3d:
5e:c0:2c:27:fa:b7:22:fa:ea:f3:d6:00:c4:40:85:
36:60:91:a7:bf:df:42:1c:1e:51:e5:6d:02:4d:87:
fb:cf:7f:d7:10:d4:2f:7c:98:08:21:3f:d7:d9:ed:
63:d0:f9:e3:41:9a:56:a8:ea:c9:31:cc:a5:0a:c6:
90:2a:36:35:a0:9a:2e:eb:f4:14:5f:82:76:9d:0c:
7a:bb:1d:e4:3c:cf:bb:a8:2f:7a:19:5a:f8:8b:1f:
de:1e:d8:56:da:e8:68:71:fb:c0:bf:c5:c9:f4:34:
65:d4:0e:06:39:78:4f:18:d8:d7:85:b4:45:71:64:
db:a9:d6:47:55:4a:87:5f:de:7f:09:1a:66:88:0e:
00:b1:bf:3e:14:c1:58:00:be:45:9a:87:48:4f:76:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:16:B0:7E:4F:07:73:D0:7A:2E:3D:DC:7D:80:4A:CA:1E:E0:3E:96
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b5:87:e5:83:8a:80:ff:f5:e7:cc:48:5e:cc:e8:82:e8:af:
66:e3:93:82:a3:08:62:70:d8:d0:f4:72:7d:c8:73:0f:da:b0:
37:ef:8e:72:bc:9e:86:a6:ef:ec:ef:3d:69:fa:96:65:8e:b9:
40:8d:20:8e:85:c3:2e:77:95:9e:cc:b4:c6:c5:92:25:23:21:
2d:e6:b5:f7:a1:d8:75:9f:3e:eb:63:97:4f:92:79:e1:66:07:
a2:de:57:f9:1c:f6:b1:cd:ee:96:44:4e:05:8d:1e:97:e2:5c:
73:59:6d:fa:21:bc:64:aa:48:18:45:c1:dc:56:bc:67:f5:90:
17:f2:f1:e5:01:11:a7:03:84:0e:e8:a5:bd:7b:2e:5a:db:5d:
30:0e:a8:18:c7:52:1a:83:8b:4f:b9:00:84:6b:94:fc:46:09:
a7:ea:b8:b4:57:f9:0f:b3:18:ab:c4:53:f0:cc:b9:bf:31:1a:
9c:77:c5:13:db:6e:80:41:58:fd:4d:cc:07:95:50:e1:93:23:
9a:4b:42:1f:8c:2f:f0:df:f7:b6:e7:3d:1e:6f:a5:83:6d:36:
1f:2a:97:c0:11:1e:57:b9:40:ea:c7:8b:52:7d:79:4b:29:99:
4e:51:1b:39:e3:df:89:fc:0e:4e:8d:40:5f:f1:78:8e:85:4d:
d1:11:c3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:25 2026 by rpki-client