
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier: ioWHO/l0DZGWFuAxa5fy+2RcOcaBSPdIsdvBmXckK8Y=
Subject key identifier: 08:9A:9A:07:B5:8F:A2:77:47:D1:FE:FB:57:84:17:3C:A0:30:1B:F3
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial: 081E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number: 080C
Signing time: Tue 24 Mar 2026 20:52:20 +0000
Manifest this update: Tue 24 Mar 2026 20:52:19 +0000
Manifest next update: Tue 31 Mar 2026 20:52:19 +0000
Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: 4idKAgfyAmi5WPrpKxwKCaEnDjDwSmpP6kVz+pOOpqM=)
2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: 6fP6rDBHclh/0NOHkluOXt1a6fQZ2ulzPfQPIbkh2Ik=)
3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: RyCT9Kfh39JgpB62lsPr7X3rrbBLW034nB14BsTheqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2078 (0x81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Validity
Not Before: Mar 24 20:52:19 2026 GMT
Not After : Mar 31 20:52:19 2026 GMT
Subject: CN=69c2f984-b22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:d5:fc:c3:3e:bd:b9:4e:3d:8f:c1:b3:5d:
69:68:66:17:97:8b:9b:02:6a:14:77:c9:79:7b:07:
ec:cb:0c:76:9f:0e:66:06:b9:c6:f3:ec:b8:10:f4:
28:2a:34:be:ce:a3:25:d4:76:fa:ac:f3:af:00:bc:
14:4e:c3:fb:85:ca:83:f6:27:b6:14:33:e1:94:8f:
ee:62:72:92:06:d3:c9:18:83:84:1f:e9:69:6d:3c:
e9:48:bf:73:39:95:77:09:84:66:c2:69:1d:1f:42:
89:70:c6:55:57:94:0c:6c:ad:21:14:9f:17:c7:2b:
62:1e:02:7a:88:20:b9:7e:dc:5d:40:62:7c:a0:1e:
f9:a0:15:f4:0f:f9:b9:c3:06:10:32:79:e9:97:c0:
fa:87:d3:2f:02:64:d2:ed:c9:45:ed:97:2d:3d:bb:
e9:86:7f:2e:b3:e4:ca:15:29:9f:e7:5b:7d:da:bf:
1b:c1:6c:c5:a0:2e:2b:b7:d6:fa:1c:1f:2d:36:6b:
df:96:98:cb:d7:54:1e:33:b3:e7:1c:5c:69:b5:b7:
a1:c3:1d:5e:25:d1:ad:4e:f8:57:ae:7d:b7:f3:4d:
3c:bb:98:39:ed:ce:f6:46:49:a5:e2:dc:f8:c4:5f:
93:8e:93:55:fc:8f:f3:82:1e:e5:d7:17:bd:42:ae:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:9A:07:B5:8F:A2:77:47:D1:FE:FB:57:84:17:3C:A0:30:1B:F3
X509v3 Authority Key Identifier:
keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bf:14:0b:d3:ff:48:7d:aa:9c:49:72:17:a8:59:9f:c3:93:
fc:5a:43:b2:e9:60:39:4f:4b:c5:c1:08:a6:a2:09:90:90:58:
de:b1:80:6a:ba:c5:cd:ba:95:82:68:86:e4:10:db:69:94:dd:
f8:3f:01:05:4b:24:a6:10:1c:64:f5:fc:37:3a:b7:8c:c2:1f:
ec:68:b2:01:55:de:cf:59:69:df:44:d5:91:a3:b2:51:57:d5:
0a:38:7d:cf:02:b3:ec:0c:b5:81:ab:65:f7:53:3c:77:17:2d:
53:59:cf:99:2f:b9:09:eb:00:a1:24:be:18:2f:99:cc:47:d3:
ac:14:ac:8d:03:a5:a5:c8:f6:75:75:2c:85:ab:38:93:9d:a3:
6d:69:b9:26:37:cb:b8:a1:51:00:19:40:b4:55:92:3f:0a:b8:
fb:06:3a:cd:23:8f:ae:3f:b8:58:69:27:87:72:da:78:88:1d:
30:be:ed:a6:2d:20:b5:1b:44:62:1a:d0:27:bf:a3:fc:33:6d:
22:48:0c:aa:a0:70:19:b6:e4:37:85:c8:7f:72:f6:64:5c:c0:
1f:21:e6:8f:a7:68:b5:21:01:fc:cd:aa:ee:2a:b6:1c:1b:94:
b1:c0:65:83:fe:b9:fe:9f:3c:ea:70:a4:1d:6d:e5:cb:59:c1:
46:5d:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:45 2026 by rpki-client