
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
File: dLH8bMwnd13tH1lSWyh2Yci_6ig.mft (raw, json)
Hash identifier: //cI3JM2M5xAg8j04app46ub6FVwMaYqWjv6jMg8buk=
Subject key identifier: 4D:2B:D0:F1:F7:AE:A5:47:A8:A6:E1:D0:4B:D4:18:63:9D:49:1D:A3
Authority key identifier: 74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
Certificate issuer: /CN=A91278AF/serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Certificate serial: 06E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
Manifest number: 06E1
Signing time: Thu 26 Mar 2026 21:59:31 +0000
Manifest this update: Thu 26 Mar 2026 21:59:30 +0000
Manifest next update: Thu 02 Apr 2026 21:59:30 +0000
Files and hashes: 1: dLH8bMwnd13tH1lSWyh2Yci_6ig.crl (hash: mabjgKQhMgwgfbt7WcGnHXnIFweG4qWowx6KhaQWA2U=)
2: 6DB2ADE48D1411EB8DBF4B0CC4F9AE02.roa (hash: i4FVSmJpnZhw4sFX7OQvDlYbncKwDpFbIR+KRcYNlfs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 21:59:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278AF, serialNumber=74B1FC6CCC27775DED1F59525B287661C8BFEA28
Validity
Not Before: Mar 26 21:59:30 2026 GMT
Not After : Apr 2 21:59:30 2026 GMT
Subject: CN=69c5ac43-7f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c5:92:33:d9:7a:dd:74:81:f4:54:1b:cf:59:
d1:cf:84:69:07:a9:fe:61:a6:47:f0:8e:df:f9:93:
5f:8b:a7:0f:a9:df:e8:23:50:9f:9d:32:4a:9e:29:
a9:49:12:f5:df:7f:18:7f:72:6f:01:44:80:aa:fc:
30:db:c7:cc:7c:93:ca:ef:19:5f:df:75:e7:01:71:
3a:99:d0:ce:1b:1b:5a:03:cb:48:76:c0:64:67:3a:
b5:86:d3:70:9c:75:14:27:cd:42:d0:ef:11:a3:8b:
09:f5:b5:d5:c0:ff:82:bb:5c:05:0a:3e:93:55:cd:
65:9b:61:b1:53:da:8c:0f:d7:61:a2:9b:55:2c:b6:
15:d2:da:56:66:d9:2c:b0:7c:15:f4:1f:6a:d0:8b:
0e:5a:d3:44:b8:12:63:37:6b:67:08:84:82:1e:8c:
bc:3c:79:3c:05:9f:be:5f:49:93:f6:5c:27:b5:eb:
b4:cf:68:0c:8a:5b:53:be:7d:f2:fd:ef:e9:9b:7a:
3c:40:ee:a1:05:9e:e5:7b:fe:59:21:db:3e:3e:74:
82:ec:2d:35:97:85:d9:29:a4:35:1f:d3:0e:32:0a:
c0:d7:71:c4:77:96:0e:05:3a:bf:03:82:42:c3:20:
61:c1:26:1b:b5:cd:ab:47:92:14:2f:8c:68:e2:56:
2a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:D0:F1:F7:AE:A5:47:A8:A6:E1:D0:4B:D4:18:63:9D:49:1D:A3
X509v3 Authority Key Identifier:
keyid:74:B1:FC:6C:CC:27:77:5D:ED:1F:59:52:5B:28:76:61:C8:BF:EA:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dLH8bMwnd13tH1lSWyh2Yci_6ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278AF/16BBD7B48D1311EBA5183D0BC4F9AE02/dLH8bMwnd13tH1lSWyh2Yci_6ig.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e4:70:03:7e:84:ec:f9:46:10:82:aa:06:8e:86:1b:a2:f3:f6:
33:28:a1:6d:65:28:e1:4d:90:c4:3d:d3:67:87:59:e7:c6:f7:
39:44:d4:b2:59:19:4d:d6:89:b4:4a:f1:d1:44:b0:81:5f:8a:
16:49:6f:f6:3a:43:87:4d:b3:dc:bb:ef:c0:be:b1:d4:05:11:
41:5e:42:4e:13:02:ad:e9:10:4e:61:f2:bd:bc:86:50:3f:73:
f7:5c:c1:ee:53:7b:42:0f:91:01:50:f3:ec:c9:2f:16:a3:c2:
85:38:af:a2:8d:18:01:74:af:83:d1:4a:80:84:41:6a:0c:ab:
fe:22:b7:9e:1c:dd:7d:22:37:20:92:74:01:4a:16:28:a8:9d:
5a:aa:43:d1:ff:d6:e7:2d:95:7b:e1:ce:0a:c7:e6:ac:ed:d8:
b6:fd:4a:b4:12:64:2f:67:87:9f:13:35:2d:3a:58:66:43:43:
ef:2b:b4:22:ea:71:4d:2b:05:37:92:11:45:fb:52:a5:56:48:
4f:79:4f:3c:8b:43:bb:4d:cc:d7:12:11:5a:15:cc:fe:47:5d:
d8:5a:52:4e:76:81:b4:87:65:1e:b0:5f:d2:83:e7:dd:78:fa:
6f:4c:8e:17:db:23:d2:ea:30:1c:45:0b:84:bc:cd:3e:45:02:
f9:a3:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:18:16 2026 by rpki-client