
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
File: dTtODkQmioFmFCG306CSJ-Xi3K4.mft (raw, json)
Hash identifier: sOTzekJEB2SiZM7wWaNbd2NlmzYmrVc5c3uyWbTBtgs=
Subject key identifier: DB:BF:58:53:DE:1D:F2:32:9C:2F:B6:A7:37:E0:70:B0:B1:FA:14:CA
Authority key identifier: 75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE
Certificate issuer: /CN=A911170F/serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
Certificate serial: 12
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
Manifest number: 12
Signing time: Wed 23 Sep 2026 08:49:37 +0000
Manifest this update: Wed 23 Sep 2026 08:49:36 +0000
Manifest next update: Wed 30 Sep 2026 08:49:36 +0000
Files and hashes: 1: dTtODkQmioFmFCG306CSJ-Xi3K4.crl (hash: sark/yNQPJQJYraeKTISbbLjSpuG8lFb12/PS6qKLU4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.crl
rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 08:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911170F, serialNumber=753B4E0E44268A81661421B7D3A09227E5E2DCAE
Validity
Not Before: Sep 23 08:49:36 2026 GMT
Not After : Sep 30 08:49:36 2026 GMT
Subject: CN=6ab392a1-8758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:33:02:c3:6a:b1:2a:d1:c7:ff:af:2a:3d:
5c:5e:4a:5f:f3:5c:03:dc:3a:15:a0:c9:0e:72:0c:
fe:ab:e7:28:54:61:da:54:e2:66:f1:7c:b8:f0:8c:
ec:da:58:f2:1b:21:07:ab:7b:e2:43:e4:76:61:ce:
23:e5:ef:6b:7f:c9:2c:50:01:3e:4b:ba:36:36:49:
3a:b3:53:0d:27:05:d8:61:f1:41:52:9b:a9:85:82:
55:2e:dd:d4:97:98:91:59:5e:2e:da:08:68:5f:d0:
bd:e6:83:1e:58:53:9d:57:2b:33:dc:6b:a7:3c:24:
50:46:11:b5:49:0e:15:9e:d6:bf:18:c0:a8:6b:a1:
de:38:e3:9a:07:be:88:7a:73:d9:2c:6a:51:ce:8a:
ab:46:ec:d7:9c:cd:5a:07:49:ca:7f:de:74:8a:db:
ce:62:fc:bb:e5:19:18:d4:c0:2e:ab:bc:7a:56:3f:
63:51:7f:11:c8:58:3f:22:6d:00:d8:db:46:ab:e9:
c6:47:86:1c:81:a8:18:e0:a3:77:d7:a1:71:37:05:
3d:f3:bf:71:1a:c0:c4:c2:d7:89:49:17:95:48:ae:
05:e5:c8:84:94:ab:89:e3:8d:d2:ac:4e:bd:ee:f8:
66:a1:81:c1:27:b6:78:a2:e8:de:ea:4b:74:01:48:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BF:58:53:DE:1D:F2:32:9C:2F:B6:A7:37:E0:70:B0:B1:FA:14:CA
X509v3 Authority Key Identifier:
keyid:75:3B:4E:0E:44:26:8A:81:66:14:21:B7:D3:A0:92:27:E5:E2:DC:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dTtODkQmioFmFCG306CSJ-Xi3K4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911170F/46064FD09F6A11F1AC7746063611F970/dTtODkQmioFmFCG306CSJ-Xi3K4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4d:47:be:04:bc:1e:ce:9c:eb:39:ba:7c:50:52:25:e2:a0:
66:c2:aa:e4:f2:92:7f:69:03:d6:b6:74:dd:d0:16:c1:52:ea:
8c:d5:93:78:62:17:bf:a6:6e:d9:5b:b3:1a:4b:c5:41:a5:0b:
e9:1a:31:69:18:bb:28:8b:e7:e6:a4:81:10:55:b9:34:fa:df:
5a:e9:5f:95:70:27:e0:ac:e5:cd:34:7c:ec:ce:db:a7:08:73:
66:16:6c:34:5e:f8:39:95:9c:5f:a4:d4:93:6b:78:dd:84:f1:
79:6b:e1:05:12:da:77:a7:b1:d5:a4:4a:8e:e5:db:c8:16:15:
d0:ca:08:a6:98:00:0a:9f:e4:0b:38:5b:e1:38:2a:17:80:90:
f4:92:7a:50:12:b8:44:79:49:7d:a1:ce:b7:b4:f2:49:2d:60:
c2:1d:fb:22:0d:fe:79:af:1f:b9:10:6f:93:fa:62:b7:a3:cd:
82:d3:09:e5:a1:b0:a8:be:b8:62:d3:c3:98:08:b3:7e:31:ee:
43:9f:95:2a:81:66:c9:7b:2d:02:49:f0:8f:ca:0b:9d:87:aa:
05:b4:7b:14:94:9d:cd:68:80:a0:0a:95:bc:ef:1b:5c:0f:81:
0a:4d:fe:cb:66:fe:1f:fd:df:32:00:eb:60:64:b2:c2:c3:33:
63:99:3f:40
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MTcwRjExMC8GA1UEBRMoNzUzQjRFMEU0NDI2OEE4MTY2MTQyMUI3RDNBMDkyMjdF
NUUyRENBRTAeFw0yNjA5MjMwODQ5MzZaFw0yNjA5MzAwODQ5MzZaMBgxFjAUBgNV
BAMTDTZhYjM5MmExLTg3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDIKzMCw2qxKtHH/68qPVxeSl/zXAPcOhWgyQ5yDP6r5yhUYdpU4mbxfLjwjOza
WPIbIQere+JD5HZhziPl72t/ySxQAT5LujY2STqzUw0nBdhh8UFSm6mFglUu3dSX
mJFZXi7aCGhf0L3mgx5YU51XKzPca6c8JFBGEbVJDhWe1r8YwKhrod4445oHvoh6
c9ksalHOiqtG7NeczVoHScp/3nSK285i/LvlGRjUwC6rvHpWP2NRfxHIWD8ibQDY
20ar6cZHhhyBqBjgo3fXoXE3BT3zv3EawMTC14lJF5VIrgXlyISUq4njjdKsTr3u
+GahgcEntnii6N7qS3QBSOm9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU279YU94d
8jKcL7anN+BwsLH6FMowHwYDVR0jBBgwFoAUdTtODkQmioFmFCG306CSJ+Xi3K4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNzBGLzQ2MDY0RkQwOUY2
QTExRjFBQzc3NDYwNjM2MTFGOTcwL2RUdE9Ea1FtaW9GbUZDRzMwNkNTSi1YaTNL
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZFR0T0RrUW1pb0ZtRkNHMzA2Q1NKLVhpM0s0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx
NzBGLzQ2MDY0RkQwOUY2QTExRjFBQzc3NDYwNjM2MTFGOTcwL2RUdE9Ea1FtaW9G
bUZDRzMwNkNTSi1YaTNLNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAaTUe+BLwezpzrObp8UFIl4qBmwqrk8pJ/aQPWtnTd0BbBUuqM1ZN4Yhe/pm7Z
W7MaS8VBpQvpGjFpGLsoi+fmpIEQVbk0+t9a6V+VcCfgrOXNNHzsztunCHNmFmw0
Xvg5lZxfpNSTa3jdhPF5a+EFEtp3p7HVpEqO5dvIFhXQygimmAAKn+QLOFvhOCoX
gJD0knpQErhEeUl9oc63tPJJLWDCHfsiDf55rx+5EG+T+mK3o82C0wnlobCovrhi
08OYCLN+Me5Dn5UqgWbJey0CSfCPygudh6oFtHsUlJ3NaICgCpW87xtcD4EKTf7L
Zv4f/d8yAOtgZLLCwzNjmT9A
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:09 2026 by rpki-client