
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier: hS+pzSn/pvHPpz4xI8PR5Tzja7ngOJeFwQvmK9fp2kA=
Subject key identifier: 69:F6:87:1E:F1:3C:0D:A3:1D:33:1D:DA:CC:BC:E4:43:57:BB:53:65
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial: D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number: CE
Signing time: Wed 23 Sep 2026 06:32:56 +0000
Manifest this update: Wed 23 Sep 2026 06:32:56 +0000
Manifest next update: Wed 30 Sep 2026 06:32:56 +0000
Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: 6p7QF0RNEQhsYUQ0nH7lHnuNQ90vl9McuQ8vWKFIbtY=)
2: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: ylWIppRfoSczR+iYCPUGFki8XOe7Epeyq7vnffvpZ6w=)
3: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: cGlSTDJBs7ggiw8P/P0gjYbp64oLSYqlIubdlATuF4s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Validity
Not Before: Sep 23 06:32:56 2026 GMT
Not After : Sep 30 06:32:56 2026 GMT
Subject: CN=6ab37298-bdb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:a1:33:8c:bb:85:16:e9:27:82:ee:fe:92:
e7:59:3e:81:92:55:f8:5e:19:49:76:74:09:02:b3:
de:83:df:f9:39:1a:74:9c:0d:ac:2e:b2:c1:d2:48:
87:c7:f9:ea:86:7f:83:b9:d2:0f:cf:37:4b:50:45:
79:bb:4e:ea:3a:34:f4:46:f3:af:3a:9e:51:1f:12:
e9:c4:33:e2:d4:67:bc:4c:3d:84:ee:44:03:63:34:
50:d9:96:12:e6:51:ab:5c:d9:b3:0b:c4:f6:a1:53:
97:d1:41:4a:a4:9e:06:40:d1:ef:8e:0a:06:57:91:
c0:35:aa:fc:ca:02:b0:bd:c6:d6:9b:57:48:fe:6e:
01:84:d4:f8:d6:63:c5:9f:49:74:12:7b:68:76:0a:
7e:c4:23:5b:89:f7:c8:21:cf:af:fc:14:fc:d3:16:
a0:f0:87:1b:16:67:e4:1e:50:c6:95:ab:35:ab:33:
15:99:98:ff:56:8b:e7:45:ae:d6:c7:16:5a:02:c9:
a2:34:81:5e:8e:6f:fe:81:7b:3c:0c:a4:14:f4:59:
b4:94:78:bf:0d:97:7d:66:fb:fb:9f:80:f9:c5:e6:
30:77:e7:a4:b9:21:e1:e2:2a:b3:c8:9b:8c:7b:23:
7d:9f:41:df:42:a3:1e:9b:c6:8d:cf:28:c1:6f:0f:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F6:87:1E:F1:3C:0D:A3:1D:33:1D:DA:CC:BC:E4:43:57:BB:53:65
X509v3 Authority Key Identifier:
keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:69:02:e3:c8:ed:dd:8f:17:f2:a8:a8:76:41:9b:9e:d4:
e0:e5:ee:d3:bc:49:50:0e:22:1e:9d:14:94:a8:c4:29:ef:b5:
5d:7f:e9:ca:e7:ef:62:6f:88:9b:dd:7b:eb:49:aa:73:95:9a:
3b:f3:6a:0e:4a:7b:bf:ad:56:7a:4e:d3:46:80:7a:7f:c8:1e:
95:46:c0:18:87:77:9e:b6:fe:9f:19:a6:d4:13:30:6e:bd:f3:
5b:99:0b:d6:46:9d:23:ec:7c:56:e6:67:f8:33:7a:7f:58:b1:
da:a6:f0:ce:f6:47:2d:d7:d6:b6:16:51:0d:57:77:c1:1c:86:
44:81:d4:99:b2:ee:2e:b1:0f:05:4f:d2:42:b9:db:6f:4e:83:
d1:43:c2:5f:1a:14:8b:de:03:15:84:83:d8:19:52:ef:9f:3f:
3e:86:c0:de:49:d8:d2:b8:91:82:e0:c2:72:39:99:cf:99:cc:
a5:93:79:0c:0f:c5:26:c2:85:c8:9c:d6:cd:e9:d3:c6:f9:ec:
31:6d:48:04:f7:0f:13:d6:2a:26:46:84:06:60:72:20:f1:16:
9e:af:4b:5f:88:08:7c:5a:f7:9f:17:a2:7d:51:5a:2c:a9:77:
7f:23:bd:31:e4:eb:37:5c:ca:4a:90:ed:fa:72:0b:ba:ac:f4:
ca:20:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:31:04 2026 by rpki-client