
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier: EBwpGTdBuVWWYbEmBkG/PzL/eK1jM6Rv2uT0MIBNByM=
Subject key identifier: 54:F8:00:9E:8A:CD:01:E7:AF:00:AB:0C:F2:4F:89:E1:F9:0E:4A:8B
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial: 114D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number: 1134
Signing time: Sun 04 Oct 2026 17:18:07 +0000
Manifest this update: Sun 04 Oct 2026 17:18:06 +0000
Manifest next update: Sun 11 Oct 2026 17:18:06 +0000
Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: Ps491hQsgJ8J5tUQ+DzMNvr8JTclsiUnunAgQjM4xjE=)
2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=)
3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 17:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4429 (0x114d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Validity
Not Before: Oct 4 17:18:06 2026 GMT
Not After : Oct 11 17:18:06 2026 GMT
Subject: CN=6ac28a4f-8309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:21:d6:cc:c2:62:a7:25:2c:c3:4a:5d:9d:
f6:a4:60:fe:0c:2d:f2:4d:bf:9b:9a:d9:99:8d:03:
0e:bd:df:e0:01:96:13:a4:b3:4b:01:00:74:a9:82:
86:20:6e:63:b5:06:e4:02:d7:47:6e:ce:60:0d:13:
7c:6a:f7:df:31:08:d0:04:2d:6b:bd:c1:db:77:03:
ed:e9:e0:9e:66:ea:b6:6a:00:fa:56:b6:d7:a7:26:
7e:67:62:bd:7d:35:04:41:98:52:4d:c4:5b:e7:51:
ca:8a:10:d5:65:8b:61:ef:37:b9:d8:e0:ab:5b:fb:
b4:94:61:4e:01:3c:3a:d2:53:8b:79:cc:72:d4:33:
d4:62:21:4f:b7:7b:5e:b9:00:c8:7c:d3:d1:10:77:
3c:c8:c5:56:00:a6:d4:47:66:6d:c4:71:5b:8c:ff:
11:b9:61:60:e1:10:13:5f:a7:55:74:84:a3:90:90:
7b:cd:9b:a0:c7:18:f5:06:65:37:67:64:5a:c8:64:
8b:f5:82:c1:3a:96:83:a1:aa:be:dd:73:ec:d0:90:
93:11:7c:56:d6:a5:1a:e3:ce:73:c6:62:59:01:25:
4c:be:8c:44:39:0b:ef:ab:49:63:ff:36:08:a7:65:
59:90:5b:ed:71:8e:14:ab:dc:98:32:f4:e1:0b:4f:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:00:9E:8A:CD:01:E7:AF:00:AB:0C:F2:4F:89:E1:F9:0E:4A:8B
X509v3 Authority Key Identifier:
keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:22:f3:d8:c1:f3:6c:8f:d6:d6:7a:f7:dd:fb:3f:31:86:2f:
92:27:76:a1:3a:4f:36:e8:57:8e:4a:77:9d:8e:ef:74:b0:77:
c9:e5:aa:f7:40:29:f8:77:5c:c1:90:e8:14:d7:b9:95:52:77:
3d:0c:c1:79:cb:dd:78:a4:88:d3:d8:f4:d6:29:9b:67:d2:d2:
e2:df:85:0b:f4:ad:86:e8:5d:3d:b1:d6:51:b8:50:29:40:e3:
42:62:c7:f3:05:59:b4:e4:37:97:c3:07:d0:c0:3e:15:87:47:
b2:aa:41:ae:b8:f1:84:dc:ad:5b:71:7b:ad:09:0e:71:e7:e5:
09:9a:38:f8:42:b0:90:a8:13:2b:94:35:a0:86:97:34:28:11:
ee:45:5e:9a:12:d2:f6:e4:d3:09:dd:77:1d:d6:84:03:ae:ae:
ed:35:45:f2:62:f6:4d:cc:4d:91:cf:d2:6c:d3:98:66:6d:58:
1f:b2:18:74:76:70:86:3d:fb:ed:d9:b0:e0:f8:f1:f8:a2:4a:
17:d6:c1:e2:0f:05:6f:d7:44:88:fa:90:39:12:81:90:5b:00:
b3:e6:93:0e:d7:08:8e:e6:4b:02:7b:09:9e:ff:d1:63:0e:09:
2b:57:e9:75:d7:15:fd:a2:79:25:f4:95:8c:a7:db:a0:6d:94:
4a:4c:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:03:01 2026 by rpki-client