
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier: QK2eyyr2X9u6t8uujOSN5D9KsAv7ExOzY9xEcr0N0oA=
Subject key identifier: 9F:F4:E0:7A:86:FF:4F:4D:EA:1A:DA:6B:E5:72:1C:C8:C8:A3:49:93
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial: 01FF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number: 01ED
Signing time: Wed 23 Sep 2026 03:19:02 +0000
Manifest this update: Wed 23 Sep 2026 03:19:02 +0000
Manifest next update: Wed 30 Sep 2026 03:19:02 +0000
Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: Aez1/8Ul9OlRXIyT8iYFj7edfbUaqEtclyIGLKWzeN8=)
2: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: nqdMcW1cqYt2/q2Bt8CB/e8QcYBAYu8tfj1XxULchaE=)
3: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=)
4: 3DC76C6280F411F18C41EDA965A30FBC.roa (hash: 0oeZmq/i87Ga6txSFdxJgRIePyIHiVNn2wV3/lW+EFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 03:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 511 (0x1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Validity
Not Before: Sep 23 03:19:02 2026 GMT
Not After : Sep 30 03:19:02 2026 GMT
Subject: CN=6ab34526-18d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:38:37:c8:b4:61:78:f2:dc:94:1c:48:83:
37:ea:53:59:2a:5d:f7:2c:fd:af:ad:bf:d8:bb:e6:
af:4d:7e:1c:23:95:40:05:4d:54:a0:fe:af:c8:c9:
47:4c:8f:a4:ed:4d:33:ef:e8:6d:11:aa:ff:ad:c2:
83:ad:c0:93:86:51:44:e9:99:19:3e:4d:ce:fa:59:
b9:f3:47:57:fe:29:2f:d1:15:a7:04:62:70:8c:73:
fa:73:bb:c9:70:cb:17:47:af:7c:0f:93:ee:fc:5e:
e4:a7:05:b3:1e:7f:69:1c:89:7b:79:fa:f7:d3:10:
c3:6f:10:c8:8e:c0:80:c3:bc:4e:e3:fb:59:36:7a:
26:49:6d:fd:06:ba:8c:5b:ed:77:40:18:5e:02:5b:
e1:ec:b4:fc:47:e6:07:95:ed:10:3c:6b:e8:bb:1a:
e6:8e:6c:1d:15:df:d2:95:20:9f:45:29:6f:9c:f4:
06:7e:33:bd:fe:6b:35:e7:3c:3c:a3:df:24:8e:fe:
e4:46:06:68:c2:9c:d2:78:be:dc:65:4e:59:90:c7:
eb:ae:bc:ab:bb:df:41:50:b2:55:21:ea:08:9a:43:
d1:fe:7d:d5:71:07:1f:33:d7:8d:7e:e1:23:7d:a8:
37:67:5e:18:26:7a:a4:82:7d:fc:b1:00:c6:e3:1a:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:E0:7A:86:FF:4F:4D:EA:1A:DA:6B:E5:72:1C:C8:C8:A3:49:93
X509v3 Authority Key Identifier:
keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:ce:b4:be:19:ca:50:b7:da:e1:89:6d:72:26:f9:dd:4e:6f:
e8:f0:8a:54:e9:54:6d:ed:8f:a1:4b:32:a5:05:5e:f9:ca:ed:
30:27:ab:3f:ee:ca:06:06:d0:cf:83:7e:09:7d:e3:42:a7:3a:
57:b4:9d:b5:f6:c1:3b:17:50:02:c6:5a:9a:80:4b:a9:ec:bf:
da:d2:38:02:29:5c:56:92:45:4d:94:29:a2:c6:12:ed:a8:b3:
b9:73:0f:52:dd:3d:ea:e7:c8:d2:d4:93:f1:78:62:b7:64:f4:
dc:82:d6:94:36:02:b4:31:32:0b:29:40:37:d2:7f:e5:bd:57:
5d:f5:4a:92:ac:04:a9:5e:9b:d8:23:71:23:08:b7:47:1b:f4:
3b:9a:f1:22:ae:02:58:ab:fa:c7:41:f9:3c:17:4c:76:c6:ac:
63:9f:1f:42:58:ee:7f:61:d0:a9:2f:62:c5:df:15:1e:0c:35:
0f:79:44:a8:3b:90:c8:e7:c1:14:31:a0:17:9f:7d:18:33:34:
4a:38:c4:2a:28:65:e9:99:aa:2a:5f:38:03:9e:8a:05:b2:65:
67:35:29:18:72:a3:c4:cb:4b:4e:10:50:51:c4:25:5d:00:9f:
2f:01:a5:ca:ab:5b:d6:7d:86:28:89:79:13:eb:a0:26:de:bd:
ce:a1:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:10:49 2026 by rpki-client