
$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File: DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier: GIWcAFmXVMU9uwJFuMMYIGFLrZMbPNpX6jto3459Txo=
Subject key identifier: 6F:64:19:A8:42:1C:9A:DE:6E:42:6C:93:32:D6:6B:04:96:22:08:C1
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer: /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial: CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number: C8
Signing time: Wed 25 Mar 2026 06:05:23 +0000
Manifest this update: Wed 25 Mar 2026 06:05:22 +0000
Manifest next update: Wed 01 Apr 2026 06:05:22 +0000
Files and hashes: 1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: ZJmUyD0CU22RT+jvuDx0JddAmziEGr1gcI36qI61r14=)
2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: R8smImtHPkQX7G+nBf5PC7cAGT+ubkBObp2FM3F8pkE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 06:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Validity
Not Before: Mar 25 06:05:22 2026 GMT
Not After : Apr 1 06:05:22 2026 GMT
Subject: CN=69c37b23-df8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5f:c1:f5:54:79:6c:96:3f:19:3f:18:d8:75:
8f:9a:bd:f3:2b:f1:df:f0:25:fd:83:58:ca:5f:83:
03:cf:3a:3b:a5:f1:7e:9c:9c:79:03:46:98:ea:1e:
91:4a:8f:24:f9:12:32:bc:c7:8a:a2:20:ba:50:35:
60:8b:ba:50:8c:cc:90:22:d4:2e:89:26:26:ec:d0:
e3:92:51:86:46:3c:fb:f3:15:84:62:13:35:fe:be:
3c:dc:88:5f:f3:b6:28:23:c6:09:78:48:ac:d5:3a:
22:42:46:9d:d6:73:97:6f:d5:7d:11:43:c7:8c:23:
f3:54:56:7c:8d:86:db:9e:71:65:58:c2:7c:3a:0f:
c0:74:f1:ae:db:a6:db:73:15:00:37:0d:a7:38:f7:
48:ef:61:b6:b7:ee:bb:ea:8d:e8:44:e4:8e:31:fe:
14:b3:ae:22:b4:8b:6f:7b:53:8f:36:5c:d5:ea:e2:
e0:93:b8:44:c4:41:fd:76:d5:1c:9d:af:be:b3:f8:
db:05:af:f8:4a:03:ad:1a:ff:21:77:ec:cd:9b:70:
9c:17:b0:6f:01:4e:db:bf:19:39:79:57:54:5b:8b:
d8:7f:be:4b:4e:0a:0c:0d:b8:65:91:2b:df:69:29:
92:b7:e1:7c:0e:6c:69:84:10:ba:33:ac:57:a6:7f:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:19:A8:42:1C:9A:DE:6E:42:6C:93:32:D6:6B:04:96:22:08:C1
X509v3 Authority Key Identifier:
keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c3:cf:a9:8c:00:a9:59:4d:00:91:6f:b8:7b:eb:3d:76:a9:
80:c2:39:c9:46:3b:cc:fc:c8:32:12:99:1e:17:8e:d4:06:a6:
b4:c6:98:48:c7:01:7e:39:cd:f8:14:57:f4:3e:ae:ab:a9:48:
25:3b:89:04:05:8f:70:0c:a7:c5:3d:25:d0:1e:fb:be:58:d1:
f8:ff:80:82:88:93:dd:21:8f:2c:f8:30:4e:d0:c8:14:5f:00:
5c:d1:e4:7a:9c:61:7e:77:e8:93:fc:29:5c:d4:29:39:fc:ac:
80:c5:5b:af:47:02:7e:2e:d2:e9:8c:44:a3:cf:68:b0:73:12:
33:f6:3b:9e:36:76:dc:0f:bd:1a:36:cd:65:76:b7:74:7c:3e:
ec:93:62:89:93:64:db:5a:d5:c2:d2:44:4e:7d:f3:16:d8:7e:
ce:37:b4:b1:67:b9:c0:da:c8:cc:9d:18:53:67:7d:3a:78:0f:
04:ad:ed:19:35:e6:fd:11:c6:8e:4c:16:4f:5e:a4:05:e9:a0:
b2:cf:39:86:88:36:01:51:a3:17:e2:2d:a5:1e:dd:c9:14:72:
2d:0e:ca:7f:8d:79:51:f4:f3:2a:25:e2:45:11:c6:fa:fd:66:
a0:96:1a:14:b3:01:cb:69:db:e1:55:fc:4e:f9:05:ab:8e:e0:
8c:7e:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:42:33 2026 by rpki-client