
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
File: DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft (raw, json)
Hash identifier: QE5YOqUY8NqiwIAIKYolp1bT31f7pzAypIbWdsJ1myc=
Subject key identifier: 34:1C:1A:9C:4F:9C:85:57:D8:FB:81:72:CF:BF:FD:2B:CA:10:26:11
Authority key identifier: 0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
Certificate issuer: /CN=A91A6EA0/serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Certificate serial: 02C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
Manifest number: 02BF
Signing time: Thu 01 Oct 2026 02:05:45 +0000
Manifest this update: Thu 01 Oct 2026 02:05:45 +0000
Manifest next update: Thu 08 Oct 2026 02:05:45 +0000
Files and hashes: 1: DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl (hash: t8iRwgY2X9UV5x8+ot4NtVtbmZ3QZ2atI4bs0RDvmPk=)
2: 35CFAB068C4111ED8E01DF60C4F9AE02.roa (hash: 0qYn7E3SIHbzT9yJTx6pS9lXwvNIUC0KNk60lEWDjkU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 08 Oct 2026 02:05:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711 (0x2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6EA0, serialNumber=0CCAB9447A17AC3C8A787BE947EC5D6F4A895CE9
Validity
Not Before: Oct 1 02:05:45 2026 GMT
Not After : Oct 8 02:05:45 2026 GMT
Subject: CN=6abdbff9-8ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:6e:c2:62:4f:12:af:cf:37:60:ea:a8:e9:
0e:04:b4:27:23:d5:68:2f:42:a4:79:31:f9:91:54:
b1:87:ee:6b:05:97:fa:eb:81:a3:a7:7e:d8:67:fb:
b8:1e:f2:31:3c:ca:49:3a:99:13:7c:47:98:c2:24:
6c:ab:3a:ba:7f:86:87:b8:6a:71:94:6d:96:8e:df:
2a:06:67:31:5e:77:6e:f8:90:cc:0c:8a:ff:8e:ec:
cf:a5:25:85:72:3a:9c:44:af:c0:99:d8:ed:b2:03:
06:61:20:ed:48:03:ad:18:13:ad:a0:42:f3:4e:67:
f7:98:d7:bc:fb:6b:7a:70:93:32:ee:be:68:e9:2a:
03:78:5b:8f:12:7a:97:f9:59:34:b5:0e:8b:a1:f2:
2f:7e:1e:4c:f4:ff:f1:18:22:bb:e7:5a:6b:a8:8b:
c9:ad:40:69:fe:65:c5:01:0a:1b:ef:9c:75:dc:40:
34:2c:15:a5:f3:9d:96:98:a9:8f:14:46:00:63:1c:
8d:4c:25:ed:7a:e2:a4:fc:3e:7c:75:f8:13:c0:80:
94:bd:d5:b6:be:a6:33:df:e8:55:aa:e8:0c:b4:6a:
72:bf:b6:5b:1f:23:c4:52:3d:bc:88:c6:91:a5:42:
f5:49:ee:6a:d9:f9:35:cd:aa:44:1a:6f:cc:01:b8:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1C:1A:9C:4F:9C:85:57:D8:FB:81:72:CF:BF:FD:2B:CA:10:26:11
X509v3 Authority Key Identifier:
keyid:0C:CA:B9:44:7A:17:AC:3C:8A:78:7B:E9:47:EC:5D:6F:4A:89:5C:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DMq5RHoXrDyKeHvpR-xdb0qJXOk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6EA0/F91400C28C2C11ED9638E672C4F9AE02/DMq5RHoXrDyKeHvpR-xdb0qJXOk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:34:93:50:aa:3e:2d:fc:89:19:1c:18:a6:71:e2:37:f7:73:
25:2a:1c:1b:7f:aa:83:88:95:fb:9d:be:f1:c1:ad:11:fd:c7:
7e:20:58:5b:9d:4e:0e:18:aa:e4:d6:d5:23:fc:6e:7b:9d:4e:
67:8e:e3:93:08:b9:08:e5:f6:10:67:99:58:4c:47:ab:06:cf:
cd:82:0b:cc:40:80:91:79:00:4d:43:9b:72:6a:3c:f4:5b:38:
a5:aa:0b:e3:e0:56:52:1c:c5:d2:30:4c:2a:b7:d6:2a:db:9a:
70:75:c7:d3:d1:72:83:32:59:5e:3d:09:66:02:de:2a:cc:00:
52:e6:c8:ef:12:4a:ac:c2:a2:5f:cd:ab:a1:4e:08:61:f6:70:
02:0b:85:df:dc:94:6c:46:9e:c0:a7:1e:a2:83:c2:6d:6d:1b:
71:f9:87:b3:c9:e1:c9:cd:22:e1:64:d8:05:5b:93:c5:99:ad:
15:b0:3c:34:38:45:67:7e:69:75:70:4c:7c:e4:ce:20:a6:c4:
ff:9f:d9:d2:f3:f5:10:fd:16:4f:e8:3e:c3:72:09:7d:68:d5:
ee:fe:5e:71:1d:75:62:e2:e2:dd:6d:ab:98:95:d0:f5:50:56:
1c:bf:65:52:60:66:3a:b8:e1:c4:9d:79:b2:4b:de:e2:88:7f:
93:5f:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 12:12:55 2026 by rpki-client