
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
File: diAma5iRohjA5fLvKI94LVcX8rw.mft (raw, json)
Hash identifier: eOA9cMnU0VLXUKxdAKB8HWWO4maSTxFLdcEPS3nEw1I=
Subject key identifier: 60:FF:9B:95:9A:C3:CD:29:DE:BE:81:A0:6D:00:52:96:EB:A3:1B:8B
Authority key identifier: 76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
Certificate issuer: /CN=A911E660/serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
Manifest number: FD
Signing time: Wed 13 May 2026 06:22:26 +0000
Manifest this update: Wed 13 May 2026 06:22:26 +0000
Manifest next update: Wed 20 May 2026 06:22:26 +0000
Files and hashes: 1: diAma5iRohjA5fLvKI94LVcX8rw.crl (hash: RruuWeWd4ktcnV0vGa4cR5XmWA/CpyN4/MTyAqzvSJk=)
2: 4ECE44B0D24311EF919B6D12C4F9AE02.roa (hash: Duer1WVGQHeYZI/Azd1wOhsGz2PF1wG4VU8KdNzFWQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 06:14:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E660, serialNumber=7620266B9891A218C0E5F2EF288F782D5717F2BC
Validity
Not Before: May 13 06:22:26 2026 GMT
Not After : May 20 06:22:26 2026 GMT
Subject: CN=6a0418a2-35e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:bb:74:83:03:85:bd:d3:41:99:cc:3a:b8:
1f:b0:1f:f7:2d:d8:28:f3:1b:70:9f:05:b1:c9:1f:
96:bf:fa:d6:98:7d:08:12:c6:c3:c8:e3:25:88:c4:
0e:b3:ca:2d:26:1d:91:35:a7:d6:69:72:df:1b:8b:
4d:da:f0:d1:34:50:af:ec:95:c3:63:91:be:fc:8a:
d5:d4:45:b5:27:74:64:76:df:38:26:f4:48:b0:cf:
45:e7:31:97:28:8e:71:1b:6f:52:75:47:51:8d:8f:
f0:69:95:3f:d7:cb:ae:5a:a6:92:bd:62:30:6d:ec:
99:f9:d0:62:2f:30:a8:0e:79:44:35:fb:05:e3:ca:
49:d1:74:50:c1:5c:94:93:fd:15:05:4c:5c:ae:79:
91:51:41:22:bd:80:2e:fe:17:8c:1d:95:4a:e3:7d:
48:80:6c:a4:15:4d:62:fc:bc:31:e6:56:45:45:d8:
d5:a4:01:17:72:ca:c0:0c:f2:83:3b:9a:1b:9f:95:
cd:31:29:cf:10:c0:7f:9a:81:16:f6:ec:a4:31:c6:
28:ca:fd:e8:ec:90:59:b6:18:0c:eb:6d:2e:8d:21:
b7:b3:5a:66:de:b3:42:c3:e8:58:5a:0f:9a:0f:8c:
10:f2:12:be:d0:da:60:f9:29:0c:0b:05:2e:e2:3c:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FF:9B:95:9A:C3:CD:29:DE:BE:81:A0:6D:00:52:96:EB:A3:1B:8B
X509v3 Authority Key Identifier:
keyid:76:20:26:6B:98:91:A2:18:C0:E5:F2:EF:28:8F:78:2D:57:17:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/diAma5iRohjA5fLvKI94LVcX8rw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E660/F98711DAD24211EF88C5BC11C4F9AE02/diAma5iRohjA5fLvKI94LVcX8rw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:89:c1:bf:53:53:5b:59:05:d9:42:1d:e2:3b:4f:b5:4c:e7:
ee:da:f4:8e:6a:d2:1f:1c:25:84:98:58:1d:fb:8a:9a:cd:49:
92:a5:41:0d:6c:51:d7:9a:bc:51:a8:60:07:1a:18:89:91:e9:
16:96:6d:cb:b2:88:64:f5:b7:95:48:37:a8:95:5f:49:9e:6a:
54:3a:b9:df:10:e0:2e:b6:9d:67:f6:bf:d2:31:96:43:b7:e5:
8c:b4:f2:9d:72:fc:45:67:8b:97:e6:d1:02:1a:16:ab:57:bc:
61:52:aa:64:f8:73:9b:84:74:3d:a3:2e:ef:ff:67:9d:c4:22:
6d:77:14:dc:ab:fa:e8:fe:da:8f:79:27:61:bc:68:d1:ca:c7:
5c:d7:52:7c:ed:47:97:f7:66:1a:8b:dc:92:e6:c2:30:21:1d:
bb:86:df:34:50:18:ef:ff:5d:32:b0:67:b6:8b:b3:1a:31:e5:
8d:2c:50:a5:b9:9c:80:c7:2a:6b:be:6c:8f:7c:51:f2:de:55:
71:cf:0f:8d:a4:d8:2b:f5:fb:cd:ad:54:3c:ed:cd:72:79:3c:
3e:01:69:75:35:33:7e:6f:6f:8f:89:08:8f:40:2a:19:4c:68:
86:1b:75:be:88:79:bd:60:83:6d:9f:8a:b8:be:ea:0a:24:5b:
1a:fc:fc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:27:58 2026 by rpki-client