
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
File: D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft (raw, json)
Hash identifier: hcee0XqD1dzy/NgS77N3f02g9QLLuPMLCmU35d/BHVs=
Subject key identifier: 82:21:80:D5:6D:E4:60:42:35:1D:69:85:C2:CA:6F:64:A6:9E:1E:50
Authority key identifier: 0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
Certificate issuer: /CN=A9185413/serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Certificate serial: 020A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
Manifest number: 0204
Signing time: Wed 23 Sep 2026 03:01:53 +0000
Manifest this update: Wed 23 Sep 2026 03:01:52 +0000
Manifest next update: Wed 30 Sep 2026 03:01:52 +0000
Files and hashes: 1: D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl (hash: 91iPXoCuObO+efDs5jZTZ3nG9i8/aj/MBAr1w4D5POQ=)
2: C1D49C12AEDF11EE96155C68C4F9AE02.roa (hash: oWL84TyZ/4qr1arE/Q8w/Mr6FtdTOaST7Iq5FUjAcrI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9185413, serialNumber=0F99B1FECFA57004F643D82BF511CDD474786DA0
Validity
Not Before: Sep 23 03:01:52 2026 GMT
Not After : Sep 30 03:01:52 2026 GMT
Subject: CN=6ab34120-8b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:6f:50:ec:23:ce:36:c4:c9:b6:67:e8:52:
c5:b7:f5:d3:ae:26:d1:08:a0:12:cf:3b:88:09:5e:
de:ef:36:e7:6f:7c:37:73:4f:89:3d:c0:b6:04:2f:
f8:67:f7:60:eb:7b:27:24:61:cf:42:06:14:84:0b:
7e:3a:3e:ca:c8:6f:8b:a7:20:1e:db:da:80:e0:82:
17:ac:59:62:c0:90:9e:6d:72:63:76:7d:3d:cc:e3:
71:e5:8d:d2:86:90:db:13:3a:2e:f3:3e:cf:67:58:
e1:b8:ee:b2:b2:50:95:b3:80:68:02:ac:9b:9d:d7:
82:bb:6f:27:ab:2e:ba:d6:a5:9a:3b:e2:84:be:5d:
2e:9e:48:ae:48:69:56:68:d4:72:2d:1b:d0:24:3a:
9e:34:d2:59:45:f5:7b:c1:13:c7:59:62:de:94:c8:
e8:6f:79:65:90:34:32:9b:9f:44:8c:de:86:2a:56:
e0:08:3f:84:48:a1:0d:f9:72:89:73:b0:ef:e3:ca:
ea:91:e6:b4:32:3f:0f:4b:58:30:8d:13:83:22:92:
1b:f2:04:dd:0e:be:96:28:e7:1b:f9:d8:d4:d6:2a:
31:72:cc:ed:5b:54:21:07:31:a1:06:36:83:5e:7d:
7e:7d:a0:06:de:8b:ab:ec:5b:e0:41:86:8c:9f:1e:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:21:80:D5:6D:E4:60:42:35:1D:69:85:C2:CA:6F:64:A6:9E:1E:50
X509v3 Authority Key Identifier:
keyid:0F:99:B1:FE:CF:A5:70:04:F6:43:D8:2B:F5:11:CD:D4:74:78:6D:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5mx_s-lcAT2Q9gr9RHN1HR4baA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185413/759AD24CAB9E11EE963D317DC4F9AE02/D5mx_s-lcAT2Q9gr9RHN1HR4baA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:5e:7f:e3:2f:2d:25:14:d9:04:d9:a2:0e:18:ab:38:c4:46:
fb:c9:23:6c:dd:9c:e6:79:1b:13:d8:ed:fb:20:65:25:3b:e0:
83:88:fe:6e:02:c9:73:73:01:f9:d3:d0:ca:14:82:1f:d6:22:
5d:3d:61:52:04:a9:f5:cf:1d:61:0e:cd:52:93:38:53:52:27:
0d:c1:69:90:17:6d:fa:de:d5:3c:f6:70:f0:5b:1c:25:21:1f:
01:16:95:ae:7b:18:f3:9e:4a:0e:80:84:60:2e:87:02:1e:40:
b1:23:c0:97:ef:43:4a:26:fd:60:dd:d3:bb:cd:d0:74:41:8a:
43:b3:fc:f3:d2:0a:dc:c9:e0:78:a5:cb:e1:9f:51:d5:6a:0d:
1e:37:60:59:35:01:d5:76:5e:f8:1d:5e:ea:29:ac:37:b2:f6:
ba:90:44:d8:00:6d:45:1b:20:3a:59:7c:b1:3d:da:e5:33:20:
fd:5f:b3:44:a1:1a:0e:bd:55:94:55:de:63:72:81:31:99:3f:
00:2d:84:d6:7c:06:b6:c4:65:a7:a1:9d:8e:00:7a:c2:3d:26:
1d:4c:ad:01:35:89:52:aa:1a:40:c8:f3:7e:bc:f3:b4:0c:5d:
38:8e:64:8a:f5:9e:2b:e5:43:9e:18:1e:c3:55:0c:c5:8e:d5:
fb:5d:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:57 2026 by rpki-client