
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json)
Hash identifier: fPAkRaG7/xkhx4v5Hmkn1ORFlU7KXB3nNVvHff/qB1w=
Subject key identifier: 41:F2:F2:E6:54:BF:F8:FE:84:3E:05:40:E8:3B:0A:99:55:41:0F:4E
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial: 087E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
Manifest number: 084E
Signing time: Sun 20 Sep 2026 20:53:57 +0000
Manifest this update: Sun 20 Sep 2026 20:53:57 +0000
Manifest next update: Sun 27 Sep 2026 20:53:57 +0000
Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: JZmuY5UbNRit9txnaQswOcrZz/mf1qkL4R/8GAF/Cdg=)
2: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: yT4BJ95e6qnBoDFs5229dTzBYzYWGck8U6xqWbQJ7BU=)
3: FAA525207A4411EB804B7430C4F9AE02.roa (hash: 3YOlao7TbxBFLUwq9Pmsd7vhinqBlUuv3cRFNyrbWwE=)
4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: EoKuYumOB06CPMGY3MST022RtHbswAdFcoVeBMF2lCI=)
5: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: grKrD3DF9eLFVxmrk87U8DF5YwJ9box6akwxpNoX3+w=)
6: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: 8aFNCW7bv8WDFcSYRJzRhcsYSlLn29H4vfS7MxdtY2s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Validity
Not Before: Sep 20 20:53:57 2026 GMT
Not After : Sep 27 20:53:57 2026 GMT
Subject: CN=6ab047e5-57ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:b0:23:01:16:79:ff:88:4c:ce:1a:20:af:
9e:30:bc:8c:c6:c8:43:49:d6:54:4f:a0:4f:d2:70:
47:1c:8e:6d:9b:e4:49:bc:4e:a6:12:18:89:ba:42:
98:30:a3:c4:a2:65:90:70:0c:de:6d:b9:ae:b6:11:
b3:db:45:85:76:b1:a7:ac:5f:2b:4f:e8:a4:b2:45:
2d:b4:ea:06:c4:de:f8:29:96:30:a9:12:d3:e9:75:
b8:c2:84:ff:85:78:f8:c3:5b:a9:08:46:2f:b7:e1:
3a:7a:6a:a6:84:98:bb:4b:6e:1a:a8:77:b1:e9:bb:
63:06:c9:f4:b6:26:e5:d9:1b:12:e6:49:75:86:d4:
e0:7a:ec:bd:71:99:9f:90:c1:62:25:05:28:b5:28:
e2:15:c1:a2:0d:09:d6:6f:61:58:d2:9d:ff:4f:19:
0c:4c:7d:b9:72:60:51:07:5f:fe:d8:54:99:0c:35:
f2:22:70:75:dc:ba:48:3e:96:ed:df:1f:68:49:1b:
99:d1:0d:c6:eb:99:61:d8:c9:fb:f5:e9:72:e4:35:
8f:28:a9:25:74:cc:74:e7:07:5c:c8:55:b0:2b:c8:
7b:ac:2c:5e:87:16:e5:87:2e:45:57:3a:a9:f6:db:
97:57:6d:2d:f0:c2:01:e0:47:8a:d2:7a:1d:1d:03:
a0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F2:F2:E6:54:BF:F8:FE:84:3E:05:40:E8:3B:0A:99:55:41:0F:4E
X509v3 Authority Key Identifier:
keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9e:2a:1d:ec:75:37:14:95:27:b0:a7:fe:8c:31:a3:81:7a:
82:93:5f:53:77:6d:c5:7f:a8:b7:61:f7:9b:0c:43:ef:82:c4:
bc:88:59:28:8a:b2:cb:39:58:ca:9a:21:27:f6:bd:06:38:ea:
d8:5c:70:00:2e:52:82:2d:60:33:87:5d:5f:60:5e:70:75:c1:
ac:ce:72:15:58:70:a4:1f:bc:26:b2:26:83:85:4d:33:c7:e1:
1f:6f:03:40:18:e5:73:4f:79:9b:23:a2:de:1d:73:5f:8e:2e:
79:10:da:6f:f0:02:45:b0:f9:01:68:c6:1b:d8:05:4a:4a:0b:
a4:6a:19:45:a7:a0:ed:f6:6a:f3:0e:e0:ba:71:00:5c:c2:6f:
17:0d:e7:63:fb:cb:dd:3f:2d:6e:34:fe:32:00:b4:b4:20:c5:
f7:3a:8c:28:76:e7:d8:d9:a2:b3:7c:30:54:75:35:49:07:25:
25:39:54:1a:06:41:88:71:17:96:e2:09:c0:44:27:f2:7d:4d:
17:67:45:5e:f7:1d:46:ed:a3:7f:b6:22:35:86:c4:8a:90:2d:
81:a9:72:b0:4b:3c:01:48:a3:d0:da:90:43:bf:29:9a:86:39:
d1:04:f4:62:41:87:a7:e5:5f:bc:cd:34:a7:46:c0:ab:bc:82:
9e:7b:1b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:57:13 2026 by rpki-client