
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: L0Mq3bb4VAA9uMS20oNLW97a8fQyCp16l1Y4n97KdJY=
Subject key identifier: FC:61:2D:4A:90:82:CD:7C:C7:B2:92:65:64:26:46:90:F9:C2:A1:E9
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 0878
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 0848
Signing time: Tue 08 Sep 2026 21:05:30 +0000
Manifest this update: Tue 08 Sep 2026 21:05:30 +0000
Manifest next update: Tue 15 Sep 2026 21:05:30 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: Xih11eFVGTU0vymV/T+18xA+UFIXN40tm50MfD+csqA=)
2: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: EoKuYumOB06CPMGY3MST022RtHbswAdFcoVeBMF2lCI=)
3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: 8aFNCW7bv8WDFcSYRJzRhcsYSlLn29H4vfS7MxdtY2s=)
4: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=)
5: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: grKrD3DF9eLFVxmrk87U8DF5YwJ9box6akwxpNoX3+w=)
6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 3YOlao7TbxBFLUwq9Pmsd7vhinqBlUuv3cRFNyrbWwE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 21:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Sep 8 21:05:30 2026 GMT
Not After : Sep 15 21:05:30 2026 GMT
Subject: CN=6aa0789a-f51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0d:fc:64:3e:a9:01:00:10:0d:e4:ed:14:d6:
3e:2a:bb:05:18:18:8c:26:cf:3e:9f:93:ba:de:84:
f9:02:7d:42:ff:3f:d4:8c:d8:27:f6:aa:32:b1:c8:
ea:fc:c5:6d:48:96:74:ef:34:05:44:f8:67:82:e0:
e8:5d:05:f0:93:5b:d9:29:c7:76:14:ac:fe:56:14:
c7:f4:98:93:f8:6a:eb:d3:19:c1:11:10:0f:ff:c4:
7f:b5:4a:3b:fd:ec:f0:6f:38:33:9b:a4:83:e5:75:
87:1c:48:6f:23:76:99:b6:0c:af:a1:6a:87:65:68:
f7:e7:5b:a8:eb:c7:05:31:f4:36:86:63:78:68:2a:
de:70:42:86:ef:51:6e:92:aa:42:b6:d5:d8:73:0d:
a8:17:8d:57:02:f0:3b:f4:6b:d7:ec:43:30:55:c9:
21:e7:04:74:23:1c:f2:05:5a:91:0d:97:52:6d:5e:
c7:fa:ab:c0:b3:18:64:c0:3e:95:b5:c0:56:7d:73:
ca:3d:dc:79:4d:3e:57:81:96:8d:0f:62:f8:93:c6:
6c:44:d6:4e:3f:47:f2:7c:eb:a0:fd:5b:dc:f0:e7:
52:e7:0f:d3:b4:9f:14:d1:86:2e:5f:da:31:2e:88:
ba:45:f8:40:32:23:0c:db:5f:5d:ac:b0:6a:2d:c9:
ec:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:61:2D:4A:90:82:CD:7C:C7:B2:92:65:64:26:46:90:F9:C2:A1:E9
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7b:a1:c4:c7:7e:2d:35:95:60:ac:2e:69:af:7f:2e:b0:3a:
d2:09:3e:30:6b:cb:7a:5d:ab:c9:69:ce:73:39:90:4d:71:24:
e9:e1:cf:3c:9c:4f:d0:a8:0f:4c:77:22:20:c4:25:1b:00:59:
eb:88:4e:bd:1a:39:48:0f:d4:c3:86:07:40:c4:c3:c8:29:b8:
77:69:52:4e:6e:80:a8:1e:25:61:0f:9f:b5:86:b0:78:6e:5e:
e1:d3:8e:5c:f4:1d:4b:6f:d8:28:81:33:01:e9:ac:5f:9c:cc:
d1:85:43:ef:60:8a:dd:b6:04:0e:e7:9d:fc:0a:25:82:57:ed:
ed:67:b4:ec:79:5d:0a:76:9f:46:79:52:30:38:89:ae:83:bc:
12:cf:5e:f6:7b:ad:3d:39:12:73:b9:90:8c:6a:b4:06:4b:a6:
28:6a:b3:ca:1d:15:04:73:ef:0b:83:cf:b0:b2:82:b4:02:9f:
e3:20:69:f5:a4:69:49:53:b8:cf:ee:5b:1e:9b:82:48:4f:ce:
a2:b2:c9:92:e8:cc:37:01:a6:57:59:03:9a:f5:ef:c2:0f:5d:
15:85:53:d7:96:6a:99:1c:46:3c:4b:62:5c:f8:12:93:3a:14:
34:d7:3f:1a:74:49:37:48:06:3a:98:2c:17:1b:8b:f3:1b:d4:
16:8d:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:45:49 2026 by rpki-client