
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
File: eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft (raw, json)
Hash identifier: 0bdFUizCsswV0GfDjqYfqAqB3OqoKPYY40G09m6jxBM=
Subject key identifier: 28:E4:6D:80:01:40:74:12:45:A0:F1:3E:E1:C6:60:DE:FC:9B:A3:50
Authority key identifier: 78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
Certificate issuer: /CN=A91A55C9/serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Certificate serial: 019D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
Manifest number: 0191
Signing time: Fri 27 Mar 2026 03:53:39 +0000
Manifest this update: Fri 27 Mar 2026 03:53:38 +0000
Manifest next update: Fri 03 Apr 2026 03:53:38 +0000
Files and hashes: 1: eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl (hash: OoRjOiyR7KY1LtNlo5Xu66wIO5sOI/nQccbnGs5GDgI=)
2: 91E9F5FCEB7211F0B89C2E104F6F56BC.roa (hash: 4kY1N0JmfJKxXFlgpxTMmZzLvUHE7guNh7KUYwhQfXQ=)
3: B9C587ACA61911EFAD319873C4F9AE02.roa (hash: zOcL6qgpIx7XnhqJzRS9iOlS0LPUx49sLB50ZIE0fC4=)
4: BA8A5FBEA61911EFAD319873C4F9AE02.roa (hash: bp5mQzRiYTmeFQtttC1ezIFAIONvQ1jkrTO5x8XI0Hw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Apr 2026 03:53:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 413 (0x19d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A55C9, serialNumber=7839A1FC0174024BCBA84D012D3EC4CA4679AC71
Validity
Not Before: Mar 27 03:53:38 2026 GMT
Not After : Apr 3 03:53:38 2026 GMT
Subject: CN=69c5ff43-ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:f2:fe:e4:b7:84:c4:25:b8:27:53:24:58:
bd:64:d4:02:24:9c:c3:78:e2:1a:2b:13:64:9e:b1:
b1:b6:79:2a:0f:ac:8c:cb:2f:0d:33:e9:23:09:51:
ca:07:76:31:28:16:cc:62:93:1d:6d:43:3b:6b:1e:
20:39:18:d1:c4:cd:08:24:6a:10:2f:a4:3c:dc:31:
7c:e8:a9:ae:fd:2b:94:f3:3e:d9:fe:af:6a:9d:71:
9a:d1:d7:50:4b:21:2c:69:7b:23:4e:c2:e8:bd:32:
cf:b8:23:9d:ca:33:41:cd:37:f5:f0:8c:8f:89:6d:
c9:f4:a4:2e:c1:8c:31:0d:9c:a7:24:cc:31:67:f9:
6a:d2:c6:f4:90:8a:f9:d8:a7:31:a6:56:fa:cd:9c:
bc:17:d9:ad:bb:b3:f5:d4:90:2b:e4:1a:58:57:a9:
db:b1:6d:a5:20:a8:8e:54:6c:2e:f4:e7:3c:23:47:
1c:96:93:fd:3c:75:aa:c9:76:03:c8:14:a4:c5:a0:
e9:d5:e6:c8:ce:9e:7a:0d:85:3d:95:12:be:c8:63:
e6:b9:52:26:0e:c2:e9:a4:d0:9f:54:55:82:89:7e:
a6:35:39:64:9d:50:bf:c6:4e:fe:a4:ac:0f:dc:e7:
8f:2f:5a:b0:4e:17:e2:d8:06:13:bf:6a:a7:58:e7:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E4:6D:80:01:40:74:12:45:A0:F1:3E:E1:C6:60:DE:FC:9B:A3:50
X509v3 Authority Key Identifier:
keyid:78:39:A1:FC:01:74:02:4B:CB:A8:4D:01:2D:3E:C4:CA:46:79:AC:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDmh_AF0AkvLqE0BLT7EykZ5rHE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/882F2320C9EB11EE8B857B0CC4F9AE02/eDmh_AF0AkvLqE0BLT7EykZ5rHE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:68:91:63:05:17:a8:a9:3b:9a:c6:34:e2:f6:09:16:a9:9e:
38:a9:e4:1b:62:6f:a0:80:98:1a:28:9e:55:1b:6a:2b:68:e8:
da:6e:0b:b9:b2:92:6d:66:21:d0:0b:dd:68:78:33:55:5b:66:
af:40:94:5f:7d:cf:f4:c7:58:b6:56:8e:ee:34:37:d5:38:52:
70:8b:bb:57:2f:d0:da:ec:d2:da:89:36:a9:32:68:34:aa:89:
87:5c:d2:05:5c:08:98:68:48:36:ae:2f:a4:20:57:3a:40:82:
17:77:bb:58:f3:e1:60:4b:b0:8c:a8:1a:12:8d:4c:61:4e:21:
63:86:b2:64:ff:54:36:2c:5b:2f:20:62:7c:df:6b:81:0b:85:
fb:31:93:0b:cd:a0:40:24:8b:56:ca:e2:27:ba:90:9c:81:2b:
05:61:04:c4:25:ed:f5:3a:9a:95:5c:38:c9:a0:a4:70:f2:a9:
25:9c:e1:8c:de:c1:e6:07:87:34:56:6a:f1:6c:a5:5d:e8:ab:
e0:47:d6:4d:dc:47:9f:5a:83:c6:cd:58:f2:56:88:91:62:6a:
63:32:13:10:3d:17:1e:ae:d1:64:ea:b3:0a:cb:7b:ed:4e:bf:
cd:b3:f6:49:67:ea:b1:f2:0b:90:a3:b3:8c:12:9d:e6:ec:12:
e4:92:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:41:56 2026 by rpki-client