
$ rpki-client -vvf rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
File: dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft (raw, json)
Hash identifier: Z4Uo4GP5uby0PgLGu8zS5QYdFiJT5ifHOurUBIWfSzY=
Subject key identifier: 33:5D:60:E5:78:BA:90:BB:AE:52:AD:B0:79:79:4E:9C:09:FA:23:2B
Authority key identifier: 75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
Certificate issuer: /CN=A91273B6/serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Certificate serial: B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
Manifest number: AC
Signing time: Thu 23 Jul 2026 09:00:54 +0000
Manifest this update: Thu 23 Jul 2026 09:00:54 +0000
Manifest next update: Thu 30 Jul 2026 09:00:54 +0000
Files and hashes: 1: dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl (hash: RByu8Mm1NPxAvmW6VVXWu0bRzXehAA5mNpGds0tyT0k=)
2: 90034B4C041F11F1953EEBDB1D3D8C67.roa (hash: O2t9f2ogcGV3x7WMv8XiYkP5DDfbHONXGddoSTXjm4Q=)
3: A7FC3D6C041F11F1A6FA4A091E3D8C67.roa (hash: zqRSIq7TQ9YhehrRszjYHmmXVsq7Z1RZBr7dzybRlhI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91273B6, serialNumber=7511CB313EB83F1C3902AA63C43B7A036ACC6317
Validity
Not Before: Jul 23 09:00:54 2026 GMT
Not After : Jul 30 09:00:54 2026 GMT
Subject: CN=6a61d846-fabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:9a:79:95:00:9e:95:f5:ca:e8:b6:ea:58:
d5:96:6a:9f:f0:5c:30:a7:68:72:e2:9c:27:dc:bb:
c3:db:00:a4:44:6a:17:77:ac:20:da:f0:a7:a6:73:
f8:33:64:b6:3c:0c:0a:8c:0f:5b:a1:93:55:f8:32:
67:7f:e8:59:e3:75:7a:84:a5:b9:33:f7:d3:c6:f5:
c7:09:9c:f2:36:eb:a6:fc:0d:7b:ae:be:fc:8a:e9:
4b:be:e3:e9:3d:00:c0:04:89:76:14:a6:88:76:a9:
a7:0e:cc:5f:50:04:8c:fc:97:17:31:6e:a8:04:ea:
a0:cd:c7:c5:2d:e7:aa:2b:c5:ce:e9:25:c1:37:de:
0f:66:dd:0c:91:bc:a8:a2:36:e9:2d:16:b9:ee:18:
1b:1b:8a:74:ae:1e:94:a0:62:1f:8a:68:fe:0a:a1:
28:88:fc:a8:7f:97:52:79:54:af:9c:bf:98:3f:38:
67:fe:9a:ae:cb:fd:86:20:37:ed:4e:52:7f:97:1c:
8a:8b:85:3e:3c:5d:51:99:69:c2:7a:88:57:d7:7f:
97:19:39:69:0b:55:b4:8c:5e:76:01:9e:0f:03:c9:
1e:9a:e2:d7:2a:c5:10:2e:2d:72:5e:19:3f:fa:75:
fa:28:f6:54:66:6f:64:17:aa:a4:32:5c:13:44:02:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:60:E5:78:BA:90:BB:AE:52:AD:B0:79:79:4E:9C:09:FA:23:2B
X509v3 Authority Key Identifier:
keyid:75:11:CB:31:3E:B8:3F:1C:39:02:AA:63:C4:3B:7A:03:6A:CC:63:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRHLMT64Pxw5AqpjxDt6A2rMYxc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273B6/5481AFC081AA11F0B4CDAD1CC4F9AE02/dRHLMT64Pxw5AqpjxDt6A2rMYxc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:7d:00:c6:16:cc:14:a7:18:ac:fc:ed:a5:15:02:0f:3f:0b:
98:d2:77:11:5c:4e:be:e6:8f:1b:3f:67:63:c6:2e:cd:d4:b0:
5e:39:fc:11:81:d0:6b:da:d3:12:3a:fc:42:a8:e5:53:86:12:
cb:09:93:9c:f6:22:35:8a:4e:cd:d8:56:17:61:33:e7:1a:8a:
6f:50:a3:57:b9:3b:a8:3c:64:71:74:03:73:fa:3e:0e:97:54:
54:92:67:98:ce:f7:c0:41:d1:cb:bc:37:da:cd:54:f9:1a:8f:
8b:e4:37:ca:a7:11:07:3d:77:db:46:99:28:b1:ab:5c:da:59:
df:82:72:7f:75:0f:9d:fb:5f:c3:4d:4a:3f:dc:cd:2a:a3:2f:
69:f4:1e:40:96:8e:1d:9d:9c:d6:28:2d:9d:3f:85:fe:f4:ce:
45:5a:b6:d0:62:3a:cb:63:49:fc:61:25:6e:18:71:47:5b:48:
d5:07:17:20:26:cf:3b:18:d6:5d:39:e6:fc:a2:50:79:ba:ce:
15:1a:23:c2:46:82:99:45:de:e4:e9:c0:2d:d1:f0:01:46:24:
c3:21:46:c2:26:0d:82:aa:e8:8e:cf:29:8e:44:2c:48:01:f1:
fe:c7:4f:81:0d:5a:c0:72:ec:74:6d:24:96:fa:68:8d:6e:1d:
d2:e1:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:01:48 2026 by rpki-client