
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
File: DihwYx-g7-rpRTHbDiYEXKO8gZs.mft (raw, json)
Hash identifier: vO9DQqBO6QvOlYb24mph75qwUwiIeN9+GKZzehiNyRE=
Subject key identifier: 8D:C0:7E:EF:81:48:A6:17:F8:C7:F2:05:30:7B:AB:92:16:00:81:13
Authority key identifier: 0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
Certificate issuer: /CN=A9162DD6/serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Certificate serial: 1127
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
Manifest number: 110E
Signing time: Wed 22 Jul 2026 17:25:25 +0000
Manifest this update: Wed 22 Jul 2026 17:25:24 +0000
Manifest next update: Wed 29 Jul 2026 17:25:24 +0000
Files and hashes: 1: DihwYx-g7-rpRTHbDiYEXKO8gZs.crl (hash: 9K8LhYNLy3xICQcbMuz8IgR35zXHVnrlmAYvKh04oMw=)
2: DA3261943FEB11E9882E830FC4F9AE02.roa (hash: mkc5tQXX6CS1iIsQT2pt5gTX2uoC5kqfFh3pHjgWeEk=)
3: D97D5F6A3FEB11E9882E830FC4F9AE02.roa (hash: YTLM/IZw3IIR4MorBonKso+E+SL2P2Fu9vwyg8zdQ0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4391 (0x1127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162DD6, serialNumber=0E2870631FA0EFEAE94531DB0E26045CA3BC819B
Validity
Not Before: Jul 22 17:25:24 2026 GMT
Not After : Jul 29 17:25:24 2026 GMT
Subject: CN=6a60fd05-2d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e6:32:51:28:76:99:ec:65:c7:f3:ed:99:bd:
ea:9b:ae:0d:dc:ce:3a:72:57:db:cd:02:2d:c4:74:
d7:91:39:cc:56:78:0c:fe:e9:5e:44:19:cf:9b:a3:
df:c1:7d:40:09:da:2b:5e:ec:53:16:f3:9c:6a:73:
ec:29:34:24:96:0f:fc:8f:58:69:71:8d:b6:df:19:
27:24:f9:59:96:68:38:6a:4c:56:ce:17:5a:d7:54:
16:0f:47:5c:f8:14:a2:b4:4b:6a:6d:79:f9:43:8b:
b2:22:45:cb:b7:d6:61:87:0f:2f:b8:04:41:ef:4a:
21:ed:98:5c:cc:e0:72:79:b6:20:60:af:a2:0f:6e:
de:d0:2b:4c:64:70:df:21:60:1a:83:df:31:dd:80:
02:74:6b:61:a5:4d:d4:91:f3:18:fa:b9:46:c8:fd:
b4:fe:9c:36:4e:d8:03:94:e3:3e:ea:53:ac:a1:d1:
c6:8b:e4:dc:5a:dd:7d:21:b8:d3:1c:9c:74:98:a6:
11:31:dd:50:5a:4c:ec:5b:ca:6d:d0:c1:c3:45:a6:
53:f6:9f:29:c4:5e:5f:4d:8f:69:6a:cc:a6:b3:da:
34:16:40:c9:df:e9:d9:e0:3d:98:8c:d8:99:80:88:
0f:d5:b5:3b:98:e5:2e:82:16:50:60:a0:ab:7c:e4:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:7E:EF:81:48:A6:17:F8:C7:F2:05:30:7B:AB:92:16:00:81:13
X509v3 Authority Key Identifier:
keyid:0E:28:70:63:1F:A0:EF:EA:E9:45:31:DB:0E:26:04:5C:A3:BC:81:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DihwYx-g7-rpRTHbDiYEXKO8gZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162DD6/9CD7CB0A3FEA11E991839D0DC4F9AE02/DihwYx-g7-rpRTHbDiYEXKO8gZs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:74:ae:6f:34:43:4f:02:f8:9f:10:b2:be:78:16:18:d3:9c:
8b:a2:99:c3:c6:db:3f:1f:69:b7:63:fc:65:0d:8d:c4:fd:3f:
b7:a4:12:3c:ce:54:c9:af:69:d2:39:36:34:5f:c8:ca:c6:50:
b7:90:4b:55:7a:e9:78:3a:82:45:e7:f4:a9:b9:1a:21:49:d1:
0b:99:a8:54:3c:23:70:93:60:7d:5c:81:1e:04:12:2d:1b:a7:
f0:3a:d1:f3:89:be:6d:fa:6c:f7:67:ce:ad:aa:64:c5:28:f5:
b0:ce:b3:a9:05:e9:f4:b1:87:28:55:fc:2d:4e:25:1a:72:25:
2c:68:69:8d:74:eb:06:33:bf:81:52:4b:b6:80:26:51:ca:c5:
32:d0:29:72:87:8f:73:59:13:d0:3c:5f:79:92:ac:a5:d7:44:
b2:a2:05:b4:5f:17:9d:c7:bc:50:10:2d:09:fd:76:5d:00:a8:
b7:f8:2a:4e:d7:c5:05:ae:aa:6f:77:a6:38:c1:e5:a0:9d:92:
89:6b:9a:f0:1a:a1:80:52:37:93:53:1d:3d:ec:1b:1c:b7:be:
42:79:d9:00:82:b4:26:80:70:7f:9c:cb:16:2c:48:94:09:10:
e5:94:ba:b3:ef:aa:fa:93:2a:fc:d7:04:67:cc:7b:c2:8b:43:
b8:f1:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:55 2026 by rpki-client