
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
File: dmH1l-po7_TJKXNjm7Z11_A5CXE.mft (raw, json)
Hash identifier: BSU/kgGQP5acVYbJjhgjquYkIgTCirYWrTFruwCgshI=
Subject key identifier: C9:05:6C:AC:8E:CB:74:B0:A5:84:6E:68:14:4D:CD:B2:F9:4B:26:EE
Authority key identifier: 76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
Certificate issuer: /CN=A91EA176/serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Certificate serial: 0708
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
Manifest number: 06F3
Signing time: Mon 28 Sep 2026 22:23:10 +0000
Manifest this update: Mon 28 Sep 2026 22:23:09 +0000
Manifest next update: Mon 05 Oct 2026 22:23:09 +0000
Files and hashes: 1: dmH1l-po7_TJKXNjm7Z11_A5CXE.crl (hash: UfNiamy8qwcxW5moq54fzjw7o4dT9KocXRctG6n2gTU=)
2: 6595CE9CB29011EBBBF4F548C4F9AE02.roa (hash: qSB4ftjX3kA4tLaGQ98+0+IxSSCm+dtpWVZIBrMu7h8=)
3: 10123D12E34E11ECB9CB283EC4F9AE02.roa (hash: 8aY/L8nAVzgyjTW/6jXj10GkNKuhhpPDhGncvfwb/Bc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 22:23:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1800 (0x708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EA176, serialNumber=7661F597EA68EFF4C92973639BB675D7F0390971
Validity
Not Before: Sep 28 22:23:09 2026 GMT
Not After : Oct 5 22:23:09 2026 GMT
Subject: CN=6abae8ce-ec19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:94:17:33:bc:51:4c:7d:dd:eb:68:ea:61:
cb:16:48:47:a1:06:88:40:6c:0f:f7:bd:0b:bb:d1:
a2:78:74:30:56:5f:ed:1d:84:60:dc:ca:9e:02:ed:
86:d3:3b:72:e3:7f:7c:fb:18:03:09:89:8e:e7:bf:
a8:a2:2c:5e:68:f7:25:de:1d:22:a8:84:9d:55:0a:
47:3b:37:89:2f:b0:63:77:4d:6e:12:48:3a:63:48:
b1:f9:93:21:32:6b:56:d8:f4:c2:e2:28:30:61:80:
52:f1:62:0a:9a:c5:60:97:93:40:6b:11:07:0e:9c:
f9:5a:17:5b:4f:f0:87:96:05:03:f0:73:86:2b:ae:
a8:83:7b:6d:0e:14:8a:db:bd:56:47:cd:04:92:4b:
11:a3:51:08:6d:b8:46:07:3c:cf:a2:55:52:c1:59:
dd:39:f0:93:f4:01:2e:04:06:8b:ed:34:19:12:a0:
bf:d7:60:e3:84:32:48:d5:40:12:e8:29:7d:23:2d:
5e:45:07:e1:75:9a:d0:48:24:a6:d9:f8:95:3d:0f:
f8:d9:e6:4e:e4:71:31:22:28:e6:38:d9:03:cc:00:
9a:61:ac:a5:9e:18:5c:39:64:8a:ae:96:0a:7e:15:
fb:86:3a:98:24:9b:6e:fb:80:54:0b:2e:e8:60:99:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:05:6C:AC:8E:CB:74:B0:A5:84:6E:68:14:4D:CD:B2:F9:4B:26:EE
X509v3 Authority Key Identifier:
keyid:76:61:F5:97:EA:68:EF:F4:C9:29:73:63:9B:B6:75:D7:F0:39:09:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmH1l-po7_TJKXNjm7Z11_A5CXE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA176/ADD3AECEB28E11EB94D21847C4F9AE02/dmH1l-po7_TJKXNjm7Z11_A5CXE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:bb:c3:51:fd:2a:e3:e5:13:56:6f:4b:f3:8d:e3:8c:b9:cc:
f9:3d:ff:43:57:f2:91:65:37:f8:e9:95:e0:ab:ed:a0:64:92:
96:23:73:14:36:d6:6b:f5:de:ad:a1:84:9b:37:02:4f:b7:3c:
85:98:07:1c:58:05:3b:63:be:93:8e:ef:94:a8:78:31:28:ac:
b4:0e:57:2b:5b:c0:8a:88:3c:71:04:71:1a:a3:58:09:53:de:
66:e4:41:03:3c:4b:66:2c:55:15:db:87:f9:53:ea:2c:1f:36:
11:b7:eb:68:8e:5f:13:23:b1:98:a3:30:94:8b:53:7b:de:fa:
e0:cd:20:f9:28:9f:1d:9c:24:20:56:85:e0:61:5c:93:c2:a9:
09:10:47:da:a0:7a:96:f1:af:a4:0a:6f:ac:67:6f:52:db:43:
16:e0:8a:e7:ea:00:49:97:9e:90:3e:f0:5c:9e:68:58:09:c6:
24:1d:72:02:27:00:52:af:e9:00:34:4d:71:8c:ce:27:fc:20:
40:ce:27:25:ae:ba:87:59:26:30:97:a7:fa:40:e3:3d:88:69:
90:fc:49:f2:1a:7c:ca:9f:86:72:ee:fa:b8:eb:6e:1c:3c:f8:
b5:27:70:ae:3b:78:86:f9:e7:d2:c5:8d:c9:96:c7:73:e6:8c:
78:fb:87:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:07:18 2026 by rpki-client