
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
File: ddHHozMD2o3GQirjUXA_KlKN874.mft (raw, json)
Hash identifier: is9+Npjrq5OSYaFGNDGpMXTUr0cD+GB7c6rXq0ACC9g=
Subject key identifier: 39:05:78:03:78:91:41:87:05:AE:7D:3C:C5:FF:94:2C:2D:A2:31:2E
Authority key identifier: 75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
Certificate issuer: /CN=A91C5832/serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Certificate serial: 01E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
Manifest number: 01DA
Signing time: Mon 11 May 2026 03:39:50 +0000
Manifest this update: Mon 11 May 2026 03:39:50 +0000
Manifest next update: Mon 18 May 2026 03:39:50 +0000
Files and hashes: 1: ddHHozMD2o3GQirjUXA_KlKN874.crl (hash: /tf3yBPMEYySXFSs/WN5WB4XxGoS3MlMEUdXbORLbQc=)
2: 3E6CF84C883311EE8822D90BC4F9AE02.roa (hash: 21MbeL2c4YLwBExJY7PKPByiCkIBI9z7opJchOT4zUE=)
3: AC0E54A8C8E311EF98C2B365C4F9AE02.roa (hash: evBEm2b+wO5EWpkoyV0JMMubzQxUV9WEBqLzlOLXTBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 18 May 2026 03:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 488 (0x1e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C5832, serialNumber=75D1C7A33303DA8DC6422AE351703F2A528DF3BE
Validity
Not Before: May 11 03:39:50 2026 GMT
Not After : May 18 03:39:50 2026 GMT
Subject: CN=6a014f86-5b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:c6:66:74:95:3b:0d:70:f4:2c:39:74:b6:
50:f4:4a:fd:fc:bf:54:db:81:5a:fa:4e:c4:5d:9e:
d7:17:dd:8b:af:08:c9:3b:f7:2e:ac:41:ac:cb:6b:
8f:6d:fc:18:25:db:a8:6f:76:06:b7:b3:b5:21:34:
29:92:8e:c5:90:7c:2c:dc:ec:b8:ee:ed:9f:8b:a3:
a4:c2:4c:ab:77:51:0f:ad:9b:7e:b1:ed:74:b6:4b:
19:05:6f:57:b3:53:67:da:04:2c:58:7c:56:d2:10:
8a:36:0e:27:f8:40:7d:74:25:7f:0c:b1:e6:96:2c:
52:96:c0:eb:87:ed:26:9f:3b:f9:6f:cc:21:a9:2f:
fc:b6:53:9f:19:9f:07:52:ce:0a:bc:b2:dc:fe:ca:
91:fb:b4:98:74:0f:41:03:21:fd:36:f6:2a:bc:20:
95:19:83:a0:3e:8d:4e:f4:d1:3d:71:cf:55:1c:61:
1d:77:1b:18:2d:18:29:f2:d3:f8:59:3f:a4:0d:13:
8b:f3:4f:20:86:d4:a8:9b:db:14:56:a8:3a:01:9b:
b7:e0:90:a7:6d:44:af:21:d2:6e:7c:80:ab:ba:cc:
95:65:62:4e:f0:14:c3:dc:78:ef:c8:4a:90:a9:fd:
03:65:92:d0:45:62:bb:fe:b2:8b:45:e1:79:27:97:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:05:78:03:78:91:41:87:05:AE:7D:3C:C5:FF:94:2C:2D:A2:31:2E
X509v3 Authority Key Identifier:
keyid:75:D1:C7:A3:33:03:DA:8D:C6:42:2A:E3:51:70:3F:2A:52:8D:F3:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ddHHozMD2o3GQirjUXA_KlKN874.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5832/6D60F9D8879711EE9F3ED44FC4F9AE02/ddHHozMD2o3GQirjUXA_KlKN874.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ac:62:a4:22:75:ed:3b:a5:10:a9:c3:91:ee:53:a4:65:53:
6f:f7:55:18:48:a0:5f:34:fa:86:61:08:ec:40:df:af:90:04:
84:6a:db:e9:33:e0:8b:18:06:43:73:85:b9:6c:a2:b7:8a:8e:
89:bd:a1:9d:54:1f:41:f6:be:68:4b:a3:2c:47:e9:7e:e4:73:
6a:ff:10:c9:17:d0:ad:9b:a2:07:ef:b4:7a:a2:fb:d5:62:be:
3f:e6:91:ed:fc:b8:57:f2:c1:20:41:7b:23:3f:84:c6:76:81:
54:5b:4f:71:12:4f:7a:32:aa:76:e8:d6:17:b2:55:ed:e6:08:
af:ef:f1:04:87:74:ec:55:3b:94:10:5b:bd:ee:8d:90:4c:a8:
ae:a4:05:1c:b2:b2:59:bd:43:55:60:a5:1d:9c:8e:77:28:16:
85:32:64:c4:5b:55:cd:08:c7:91:97:81:dd:d0:e7:ab:ec:1d:
b9:37:cc:5a:20:94:53:7b:34:bf:8f:9f:52:c2:df:b6:f0:ae:
ab:bc:3a:0a:8e:83:b6:e0:af:94:3b:90:4d:87:db:64:0a:60:
6c:66:fd:59:9f:60:b6:35:a5:87:3d:54:f2:82:08:88:07:89:
21:cf:30:2b:11:c8:e1:9e:ad:14:35:b8:93:51:9d:02:d4:da:
5f:70:a6:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:50:48 2026 by rpki-client