
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier: Yot+exOUM4d3Ir0aIx2TJSX2/nDLYAMl7san/JyC5Q8=
Subject key identifier: 84:1C:91:FC:A1:D6:7D:6A:50:8D:3A:A5:19:6B:D2:C0:19:CA:4A:CB
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 01B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number: 01A8
Signing time: Mon 11 May 2026 04:11:41 +0000
Manifest this update: Mon 11 May 2026 04:11:40 +0000
Manifest next update: Mon 18 May 2026 04:11:40 +0000
Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: nXFkY/HK1R6AQmhYWiEFzCQwMy0HWCakKjMBLedrUC4=)
2: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
3: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
4: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 04:11:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436 (0x1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: May 11 04:11:40 2026 GMT
Not After : May 18 04:11:40 2026 GMT
Subject: CN=6a0156fd-f6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:78:c2:56:ba:24:90:65:e9:c2:00:0d:8f:68:
c6:8c:49:58:10:89:9b:67:87:12:34:f6:94:f3:c0:
e9:fb:53:06:41:53:46:b3:ed:f1:68:7b:6a:80:0c:
89:7a:f6:65:84:84:c4:88:63:58:79:e7:d6:67:e8:
73:5c:10:90:7b:d4:68:ad:77:1a:af:72:83:d2:b7:
44:73:90:e9:ed:41:25:28:02:55:e5:fc:64:34:1f:
65:f7:0c:3e:85:03:bc:d1:1d:63:71:91:06:be:90:
7b:89:05:a5:ee:71:89:30:aa:6e:d0:a4:41:65:78:
63:98:52:8d:1d:c2:d1:2c:f8:6e:d2:2e:8b:ca:c4:
31:ed:bf:7e:ed:77:08:27:1b:6e:15:c0:c4:1e:d0:
63:35:ca:87:03:41:16:9b:2e:f8:c9:71:82:45:53:
cb:39:16:f4:43:7c:db:c6:39:7f:c9:91:b3:0a:f8:
8c:ec:fe:2f:da:2a:c0:85:47:68:25:54:21:fe:56:
e6:dd:cd:2f:73:ec:91:52:a7:fd:8d:30:b8:c7:a2:
ca:2c:a7:6c:59:97:78:a3:1f:dd:43:d8:3e:34:7f:
07:1d:f1:22:c4:32:38:fa:43:3f:86:21:9c:f1:89:
5f:76:ae:ae:e0:7a:6d:75:39:29:47:e6:58:60:61:
e2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:91:FC:A1:D6:7D:6A:50:8D:3A:A5:19:6B:D2:C0:19:CA:4A:CB
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:6f:f3:d6:28:8d:bf:b9:1d:17:60:20:22:58:7a:30:70:05:
b8:33:d1:d2:ba:f7:34:27:9e:d5:f0:c6:24:c0:80:07:ab:25:
c3:8a:71:69:af:4f:34:8b:ac:a9:83:1b:92:11:b1:27:af:17:
67:8f:d6:ba:42:eb:b5:f7:24:f6:73:01:82:f4:74:af:cc:1e:
1c:42:f1:0a:5e:24:c4:64:60:ab:d7:ff:38:6c:92:82:e1:1d:
38:b3:c7:bd:e6:95:6b:1f:1f:ba:c2:17:d8:a5:6b:ac:e5:29:
7e:bb:70:10:c4:e0:9a:20:02:b4:32:ac:a8:b6:15:68:56:d2:
41:e4:0c:df:75:ad:a3:ac:27:49:1f:a8:d5:8e:33:47:2a:ef:
61:ff:51:41:ba:cc:8c:32:e7:76:7b:8e:c2:19:49:45:2f:05:
61:be:97:0e:54:18:ec:1f:74:2e:58:6b:34:37:5d:82:f9:6d:
8e:fc:38:96:ef:1c:d2:c7:e1:bd:67:6f:84:cf:53:c6:e9:c4:
fc:9f:a4:47:7e:6b:4c:45:6f:e8:96:d5:8f:07:19:c6:01:4d:
d1:7d:0a:c1:a1:e6:07:72:87:eb:34:2d:4b:d3:44:ed:7d:bd:
8e:e7:c6:bf:ec:99:44:88:35:92:f8:e6:77:93:4b:58:c1:45:
ff:64:5b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:23 2026 by rpki-client