
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File: DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier: nO99ILRw+tWSe/sPA2cQUO8fi/xrlTBigwkh5inoFZI=
Subject key identifier: B1:75:E0:3F:63:F5:81:56:E7:A1:EC:18:C4:E3:26:AB:89:7B:84:0D
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer: /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number: E0
Signing time: Mon 11 May 2026 06:41:33 +0000
Manifest this update: Mon 11 May 2026 06:41:32 +0000
Manifest next update: Mon 18 May 2026 06:41:32 +0000
Files and hashes: 1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: hCdQ0DyFD2SS++ZnS25OdGeW/SS/0XnQGdZZgbNK6zs=)
2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 06:41:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Validity
Not Before: May 11 06:41:32 2026 GMT
Not After : May 18 06:41:32 2026 GMT
Subject: CN=6a017a1c-a1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:ed:0f:84:5c:24:85:48:07:2e:a0:75:1f:
9c:5c:89:2c:f4:a2:f8:9e:d8:3a:4d:51:94:33:6f:
08:e4:98:c4:1c:4e:7d:5e:34:e9:dc:6c:f2:f6:f6:
be:61:3b:95:28:d2:07:31:74:a8:79:d8:8e:c0:fb:
5f:44:d2:e4:61:ec:a8:8e:84:0e:34:0f:1a:d2:4e:
9d:29:cf:14:1b:17:3e:8d:f1:18:58:fe:41:18:04:
3f:2a:12:dd:23:8d:91:00:64:7c:44:36:90:89:27:
6d:22:c0:07:22:30:67:57:8d:5f:5a:da:0d:86:fa:
a6:85:1a:22:cd:c8:1e:06:e7:50:a7:d9:c8:d2:de:
98:c6:2c:20:ee:fa:a0:1c:04:9d:10:a4:f4:6e:26:
f6:83:99:27:a2:73:41:16:fa:fa:c0:91:31:2b:c7:
4e:5e:d9:80:00:8f:53:e0:bc:1b:a2:ec:cc:96:37:
8e:fa:8f:29:1f:5a:ff:1d:08:dd:71:e1:e2:9f:aa:
d1:6d:dc:c3:21:a1:b2:ea:39:92:bc:99:be:be:4e:
8a:40:26:fe:c1:ee:f6:03:03:2d:3b:fb:d3:f2:65:
6f:27:ca:fb:f1:2c:af:82:ac:d1:4b:b5:11:0f:07:
ac:f8:95:b0:98:37:23:17:b8:0b:58:02:ca:11:ba:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:E0:3F:63:F5:81:56:E7:A1:EC:18:C4:E3:26:AB:89:7B:84:0D
X509v3 Authority Key Identifier:
keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e6:40:22:ca:db:7f:69:1d:95:b9:48:24:26:d9:20:d1:d5:
d7:18:2f:dc:65:f5:1d:e5:3b:d7:45:1c:d8:46:d6:90:80:32:
ff:8e:8c:10:06:3b:a3:ec:6a:49:ba:19:dc:de:71:52:37:15:
97:94:f9:68:60:97:67:ab:8f:6e:4b:e4:b1:be:b6:22:1b:77:
0a:49:e3:89:8b:d3:58:1a:2a:a6:84:48:1b:3c:e2:9d:a5:c6:
42:fb:46:a1:5a:38:40:0a:53:d6:9b:67:5b:36:09:5f:b8:9e:
f9:f9:a7:57:90:2e:94:23:84:7e:da:94:3b:e3:5e:5a:c0:8c:
a2:9a:41:23:3d:2f:cb:fb:f7:da:60:36:92:3d:9a:13:a4:35:
cf:4f:45:bf:63:f3:4d:01:49:72:fd:ac:5d:a8:3c:0d:02:dd:
e9:bd:0f:a5:61:48:fc:3b:7c:26:b4:b0:bf:97:a9:cc:8c:77:
c7:07:b9:a5:ec:cc:19:a6:3c:8e:21:ad:a3:12:93:f4:33:ab:
f8:fa:16:f3:93:ed:8f:cd:06:87:d2:64:cd:7c:a3:60:35:3e:
72:e2:eb:55:05:05:39:ff:fa:a4:d8:f9:ae:dd:c1:af:64:4f:
77:6d:6d:07:73:58:95:55:a1:8e:72:68:70:d7:b3:c6:48:c0:
cd:80:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:23 2026 by rpki-client