
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
File: dyhBomMmMU6i5Dg0dd4xttzn26U.mft (raw, json)
Hash identifier: M+2Zch2qkSP/JcLJH3d5c1qajHWumpj8RqoDfOLdgXQ=
Subject key identifier: D5:64:28:05:0C:13:16:68:50:D7:33:6D:7B:4E:75:BE:87:08:B2:1D
Authority key identifier: 77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
Certificate issuer: /CN=A91C9324/serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Certificate serial: 045C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
Manifest number: 0436
Signing time: Sun 11 Oct 2026 00:24:03 +0000
Manifest this update: Sun 11 Oct 2026 00:24:02 +0000
Manifest next update: Sun 18 Oct 2026 00:24:02 +0000
Files and hashes: 1: dyhBomMmMU6i5Dg0dd4xttzn26U.crl (hash: 908wJmIgGy2uQt/UXIkN7haJg52Uc0V4PBTkggbAyKg=)
2: A869DCA2C13211F1BDE27CC84711F970.roa (hash: sLchLQDa3PARcBgWU6m2EFP9GjKXKlttV2J1ZEmh/94=)
3: 73E82004BCA111ED914D176DC4F9AE02.roa (hash: T+dFvi2GR1y0VbmfBh2DST8Ey8SHcUJKlSrtkpwhtKY=)
4: 81F21152D1BD11EC9D8FBC52C4F9AE02.roa (hash: m+vdOwrtwKi1GMRF658jPTxcB17Zu3JbKOZzGBJtn+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 18 Oct 2026 00:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9324, serialNumber=772841A26326314EA2E4383475DE31B6DCE7DBA5
Validity
Not Before: Oct 11 00:24:02 2026 GMT
Not After : Oct 18 00:24:02 2026 GMT
Subject: CN=6acad722-8042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:96:1d:b4:85:5b:2d:8b:7b:7c:ad:f2:54:
fb:59:b9:33:44:f3:10:0a:a5:44:72:1c:3e:aa:3d:
e4:47:fd:c6:ac:a9:9e:e5:ba:0e:58:c6:d3:4e:5c:
5e:66:65:19:57:80:e3:f3:84:66:67:61:a6:95:0c:
d1:e9:30:6f:5c:f7:73:a0:9b:77:55:c3:69:25:12:
0c:b5:c6:d0:99:40:d0:1d:e5:a3:4f:86:b0:18:84:
90:e6:e7:91:fc:c5:53:6f:ea:92:e1:37:a7:55:34:
e0:6f:af:10:24:bc:f2:03:61:03:02:34:3f:7d:c6:
a8:60:12:4c:12:98:e0:bc:d4:d2:10:7c:a0:4b:de:
5d:c4:2d:39:37:c0:6d:95:8e:b7:5d:fe:06:29:94:
f2:ee:e0:28:66:e1:ff:95:5d:9f:8e:2c:9f:c1:ba:
0f:71:ca:ee:e5:f4:f8:e3:4a:df:a0:12:f9:53:fe:
fa:c7:68:83:66:68:14:9b:46:84:ea:f4:80:76:51:
17:37:3c:7e:10:82:89:d2:1e:c9:f6:bb:df:a1:5c:
2f:c1:c2:9d:06:e8:f4:12:dc:c4:65:fb:9a:6f:41:
df:7f:22:e2:ab:d9:d4:33:5b:28:e8:d9:9f:b8:88:
f9:70:c7:7d:b6:52:1d:ef:b4:79:b9:e0:67:99:c1:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:64:28:05:0C:13:16:68:50:D7:33:6D:7B:4E:75:BE:87:08:B2:1D
X509v3 Authority Key Identifier:
keyid:77:28:41:A2:63:26:31:4E:A2:E4:38:34:75:DE:31:B6:DC:E7:DB:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dyhBomMmMU6i5Dg0dd4xttzn26U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/EF83E30ED00911EC92A16A3CC4F9AE02/dyhBomMmMU6i5Dg0dd4xttzn26U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:03:3a:ad:9d:a3:90:10:d1:49:97:f5:f1:c8:d0:3b:83:ce:
7c:6e:bf:9c:fc:ea:29:88:9a:47:5c:4c:35:e1:94:81:51:b7:
66:bd:72:7f:ab:89:08:98:55:a5:22:b8:af:58:7a:4d:26:5d:
3b:04:ff:27:60:11:26:66:d5:fa:51:17:d7:f5:29:4e:cb:33:
42:12:83:fc:bc:09:45:08:3b:1d:01:2e:62:58:b2:3a:11:2b:
27:f9:1f:1d:75:f2:36:af:24:72:c3:e9:fb:02:4a:a0:33:e1:
92:93:bb:e0:80:30:b5:7b:d8:1d:d4:c7:8f:74:70:53:54:d0:
22:8a:60:88:2a:c2:8d:25:5a:7a:80:b3:a7:e3:c8:b0:5f:ab:
8d:01:6b:1b:6a:11:2e:26:61:e7:2c:a0:25:89:ef:96:f1:c8:
74:38:86:f5:1c:6c:d4:ed:52:de:56:ba:ea:6d:b5:f6:a7:c0:
6a:e4:05:1f:8c:45:2a:db:8c:9f:2b:f3:bb:76:55:79:1f:36:
78:96:bf:97:0e:1f:f0:6e:b9:d3:27:cf:c9:93:52:6c:c1:64:
c7:f0:56:73:a8:7f:6c:63:86:a6:0e:93:36:8f:ae:9f:f7:3d:
9d:50:10:18:f6:fc:fd:8a:83:56:5a:a3:f3:25:e9:67:1e:a9:
d4:c4:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:51:57 2026 by rpki-client