
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
File: dnhlUDUAgI7kc70jMQ2VNOjeysU.mft (raw, json)
Hash identifier: jb5CehvlLUdCJlaN1H22/VwDNgQPNgHk5UU0Rqcu604=
Subject key identifier: 2C:2C:3F:55:8D:53:1B:6B:53:76:D4:19:A5:AF:01:BB:08:26:8C:9D
Authority key identifier: 76:78:65:50:35:00:80:8E:E4:73:BD:23:31:0D:95:34:E8:DE:CA:C5
Certificate issuer: /CN=A91A4BD5/serialNumber=767865503500808EE473BD23310D9534E8DECAC5
Certificate serial: 09
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
Manifest number: 08
Signing time: Fri 25 Sep 2026 09:25:22 +0000
Manifest this update: Fri 25 Sep 2026 09:25:22 +0000
Manifest next update: Fri 02 Oct 2026 09:25:22 +0000
Files and hashes: 1: dnhlUDUAgI7kc70jMQ2VNOjeysU.crl (hash: Vkw3ln7GtsyU5WkEiLycAY1sJg4YyI8Tqf6w2ixHwis=)
2: 6B512CACB0DF11F1A7F8AD013211F970.roa (hash: kBpDJXxsccHCgHrGQT/RhGYrU0riC9QlFLsRl7lYj74=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.crl
rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 09:25:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4BD5, serialNumber=767865503500808EE473BD23310D9534E8DECAC5
Validity
Not Before: Sep 25 09:25:22 2026 GMT
Not After : Oct 2 09:25:22 2026 GMT
Subject: CN=6ab63e02-0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:f7:fd:b6:58:3b:27:e2:b2:f8:4d:d9:4a:
f3:85:9a:a1:ba:d7:d5:8a:f2:66:b5:8b:6c:ec:fc:
95:0f:0f:8b:6d:5d:ec:9e:52:6f:3c:74:5b:4e:08:
19:4c:a2:46:57:cf:36:61:be:7e:2c:db:21:77:af:
75:35:cc:88:c9:48:7a:e0:cb:75:02:19:b9:f2:9f:
74:9b:f4:81:b7:4b:d3:f9:e9:5e:25:85:58:5b:2d:
1f:c8:a8:cc:1a:12:21:b1:31:c9:ce:ad:1e:bf:e7:
de:ca:5f:65:1f:18:cb:de:e0:f1:20:24:23:7f:64:
7d:74:82:54:2c:6d:6c:69:bc:0f:46:fd:dd:d8:9a:
d6:bb:fe:b7:e5:ca:28:87:35:a2:f7:45:59:19:aa:
16:2e:0c:55:9d:82:45:d9:f9:35:c5:be:77:42:05:
b6:ae:6b:e3:58:52:2a:00:a9:c9:44:8a:99:3b:ff:
b4:1c:8f:b3:ba:12:51:16:39:bd:20:0e:71:84:54:
70:7c:c7:72:d6:9b:41:c6:51:e1:1e:9a:75:e2:89:
bd:70:f0:51:b7:94:0c:37:97:59:25:ac:91:39:33:
fc:d8:f7:4c:ac:d7:86:7f:50:cc:4c:d2:8f:96:47:
f6:57:04:cc:ea:c1:e2:72:1a:36:1a:4e:4b:7e:0c:
07:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2C:3F:55:8D:53:1B:6B:53:76:D4:19:A5:AF:01:BB:08:26:8C:9D
X509v3 Authority Key Identifier:
keyid:76:78:65:50:35:00:80:8E:E4:73:BD:23:31:0D:95:34:E8:DE:CA:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dnhlUDUAgI7kc70jMQ2VNOjeysU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD5/E6724350B0C411F1B94FF2076A11F970/dnhlUDUAgI7kc70jMQ2VNOjeysU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b8:95:be:4e:4f:8d:b9:75:e8:86:e0:19:e7:c4:7b:41:78:
c8:86:97:e7:b3:03:ae:8a:f2:02:6a:30:82:c3:48:1b:32:ae:
c6:f0:90:07:2e:47:56:6c:e5:c0:e3:20:6f:fb:31:ea:d3:76:
17:e5:ae:6b:8f:dd:56:4c:fd:0c:b6:d6:72:8a:a6:e0:af:5c:
94:b8:66:de:99:20:11:b1:f6:b7:bf:73:20:9e:f5:b4:52:a2:
41:90:c0:1c:36:b9:64:c9:bf:e8:6e:9d:30:af:fe:41:a7:cc:
85:5d:7c:cc:d6:3b:bc:e0:c6:a9:08:81:3f:14:f4:73:cc:99:
ea:81:6e:9d:7d:3e:2b:97:48:8e:3a:60:73:b3:ae:ce:e2:39:
ad:57:84:8f:87:24:b9:b2:74:dd:97:84:f0:ac:e6:29:9a:aa:
ca:f4:f9:04:31:94:a2:89:66:a3:40:ff:58:b6:97:77:50:ac:
83:f5:8e:cd:14:ea:cd:ea:ba:c5:84:8e:1f:5e:0a:6a:65:df:
08:d1:9c:da:b1:68:af:ed:25:16:fc:78:5d:7c:cc:c0:4a:64:
60:7b:1e:9f:0c:40:4f:4d:23:b9:c5:c0:16:e4:2f:a4:c6:95:
96:83:97:79:61:c1:e1:c4:73:77:99:cb:b6:ea:98:bd:cc:21:
06:96:7c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:02:22 2026 by rpki-client