
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier: 82SO8Tp5j2+r1IirwY8N4vTpJ5XC/voTxOEo1RfN7B4=
Subject key identifier: 3C:61:65:99:0A:C7:AC:5E:0C:0D:FE:F2:EF:2A:2B:AA:B6:6A:BD:54
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial: 02A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number: 029B
Signing time: Thu 23 Jul 2026 02:46:24 +0000
Manifest this update: Thu 23 Jul 2026 02:46:24 +0000
Manifest next update: Thu 30 Jul 2026 02:46:24 +0000
Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: WzeYezoqkSWdAk9iJPWW7dz2a2W241sWOkLfcp9TSgg=)
2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 02:46:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675 (0x2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Validity
Not Before: Jul 23 02:46:24 2026 GMT
Not After : Jul 30 02:46:24 2026 GMT
Subject: CN=6a618080-17a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:ee:16:7f:67:7c:ec:d5:c3:cb:1f:db:3d:
ab:59:59:02:43:97:19:91:3a:9e:57:e7:ba:86:4f:
85:b5:17:57:be:c6:d6:d6:e9:ef:9f:44:01:1e:6b:
94:4a:ac:17:a3:85:05:97:ea:49:ce:02:a1:25:eb:
72:11:38:90:53:53:bc:68:9d:0a:5c:27:95:78:96:
bd:06:4c:b0:62:9b:9c:1b:e1:69:65:dd:ce:ad:99:
a5:19:6d:f8:46:12:71:6b:37:15:a1:55:c5:44:bc:
3c:57:a4:43:00:e6:4f:92:73:f1:dc:93:e1:cf:b3:
9d:a8:f3:02:bc:4a:a2:3b:50:89:7b:0e:d0:e2:95:
40:41:47:22:7d:1a:53:7a:1a:1d:db:81:cc:77:ff:
53:bc:8b:a2:09:97:20:a2:bc:b7:c0:6a:17:12:ed:
31:ce:dd:ce:57:9d:31:18:f1:95:5c:cf:d4:e2:2c:
15:e4:23:48:5e:8b:60:b4:98:be:79:09:73:fe:c9:
1f:a0:19:5e:fc:6a:01:3e:05:0d:04:0d:fe:f3:21:
4b:6f:92:08:b8:cf:6c:4e:f7:bd:bf:59:1e:36:da:
ae:55:a3:6c:c3:b9:78:74:2a:4f:75:a3:2b:78:1f:
21:73:04:c5:15:ee:e2:3b:31:98:d1:59:ee:6e:b7:
ba:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:61:65:99:0A:C7:AC:5E:0C:0D:FE:F2:EF:2A:2B:AA:B6:6A:BD:54
X509v3 Authority Key Identifier:
keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0e:4d:13:e8:76:ff:05:97:89:ad:8d:4d:73:28:a1:81:4e:
32:ad:77:28:60:2a:1b:93:a1:f5:53:54:19:58:bd:59:07:c5:
50:4a:09:38:9f:74:b0:5c:ac:1e:9f:c0:4b:f1:48:68:41:03:
5d:2d:d9:2f:2a:19:27:4e:2c:9d:db:6b:5b:a2:3f:81:ad:c7:
e3:ed:87:41:91:f6:0a:fc:a0:4c:da:23:b0:9b:04:e6:f8:bb:
e0:70:97:d7:74:e5:fe:e2:1e:ed:cc:ae:a0:34:46:ed:d6:b0:
f3:6e:ba:aa:81:89:f1:88:69:8a:22:cb:27:35:9e:48:e2:91:
b7:dc:30:eb:f4:6b:c9:23:b3:45:6d:52:fd:7f:90:b8:f9:ad:
2f:78:c9:d1:06:7f:f9:d1:b5:d1:60:81:7d:48:85:6e:ad:25:
56:81:4a:63:59:66:de:cd:c1:71:3d:ca:a2:82:31:5a:47:d5:
22:de:91:be:17:d7:9b:84:66:53:ea:3d:2d:a4:79:84:45:04:
bb:61:51:3a:ad:0d:7e:c7:04:d3:56:13:2d:15:e3:43:d4:d7:
bc:32:5e:13:2c:97:fd:a5:b0:10:a7:2c:8b:8d:b2:58:e5:66:
3c:7d:8d:8a:05:d1:48:c0:f3:0e:81:1c:72:4e:87:59:d7:0f:
27:7b:66:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZFQTAxMTAvBgNVBAUTKDBDQ0FCOTQ0N0ExN0FDM0M4QTc4N0JFOTQ3RUM1RDZG
NEE4OTVDRTkwHhcNMjYwNzIzMDI0NjI0WhcNMjYwNzMwMDI0NjI0WjAYMRYwFAYD
VQQDEw02YTYxODA4MC0xN2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlKbuFn9nfOzVw8sf2z2rWVkCQ5cZkTqeV+e6hk+FtRdXvsbW1unvn0QBHmuU
SqwXo4UFl+pJzgKhJetyETiQU1O8aJ0KXCeVeJa9BkywYpucG+FpZd3OrZmlGW34
RhJxazcVoVXFRLw8V6RDAOZPknPx3JPhz7OdqPMCvEqiO1CJew7Q4pVAQUcifRpT
ehod24HMd/9TvIuiCZcgory3wGoXEu0xzt3OV50xGPGVXM/U4iwV5CNIXotgtJi+
eQlz/skfoBle/GoBPgUNBA3+8yFLb5IIuM9sTve9v1keNtquVaNsw7l4dCpPdaMr
eB8hcwTFFe7iOzGY0Vnubre67wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxhZZkK
x6xeDA3+8u8qK6q2ar1UMB8GA1UdIwQYMBaAFAzKuUR6F6w8inh76UfsXW9KiVzp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkVBMC9GOTE0MDBDMjhD
MkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJEeUtlSHZwUi14ZGIwcUpY
T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RNcTVSSG9YckR5S2VIdnBSLXhkYjBxSlhPay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkVBMC9GOTE0MDBDMjhDMkMxMUVEOTYzOEU2NzJDNEY5QUUwMi9ETXE1UkhvWHJE
eUtlSHZwUi14ZGIwcUpYT2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuQ5NE+h2/wWXia2NTXMooYFOMq13KGAqG5Oh9VNUGVi9WQfFUEoJOJ90sFys
Hp/AS/FIaEEDXS3ZLyoZJ04sndtrW6I/ga3H4+2HQZH2CvygTNojsJsE5vi74HCX
13Tl/uIe7cyuoDRG7daw8266qoGJ8YhpiiLLJzWeSOKRt9ww6/RrySOzRW1S/X+Q
uPmtL3jJ0QZ/+dG10WCBfUiFbq0lVoFKY1lm3s3BcT3KooIxWkfVIt6RvhfXm4Rm
U+o9LaR5hEUEu2FROq0NfscE01YTLRXjQ9TXvDJeEyyX/aWwEKcsi42yWOVmPH2N
igXRSMDzDoEcck6HWdcPJ3tmjQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:05:50 2026 by rpki-client