
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json)
Hash identifier: qnRAeKP4LR02vSp1VyonI0Onw8+0dYKxaeDs+A1XW30=
Subject key identifier: 9E:44:BF:8D:8D:28:9F:9A:18:E1:AD:C2:C4:84:FB:4F:F2:23:40:81
Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Certificate serial: 01B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
Manifest number: 01A8
Signing time: Thu 23 Jul 2026 05:31:13 +0000
Manifest this update: Thu 23 Jul 2026 05:31:13 +0000
Manifest next update: Thu 30 Jul 2026 05:31:13 +0000
Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: rowP3I2vN9GZiAutswPX4vLExAZ996fYR8SvazSD/0M=)
2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: jcMfcvbTYBEvZvAM9l9pumxljJCtyzP7TzycGPDLmwI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl
rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Validity
Not Before: Jul 23 05:31:13 2026 GMT
Not After : Jul 30 05:31:13 2026 GMT
Subject: CN=6a61a721-ba8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:fa:ae:58:71:09:70:bb:79:61:be:54:da:
b9:8d:3e:55:2e:23:4a:bb:e6:ac:5e:7c:c4:73:77:
8c:10:bb:da:ed:70:f3:bc:6d:7a:7a:60:13:59:6a:
81:3f:d3:3e:8b:bf:fe:0b:01:4e:20:66:ed:10:1c:
46:55:49:c3:fc:82:ed:35:a1:84:3a:93:72:85:4a:
eb:95:fc:0b:39:05:70:92:2c:10:72:9f:d0:f1:33:
09:db:0f:60:31:98:9d:d0:a8:f4:be:ea:99:ff:ec:
92:a8:2a:a0:70:88:cc:0b:86:9d:85:36:2e:91:20:
2d:46:39:aa:7b:09:38:26:4a:89:e9:d5:0c:17:0a:
80:ea:34:e9:40:ef:1a:25:b8:5b:49:91:80:75:1c:
e2:6f:8d:29:66:71:7b:de:f6:07:74:cb:75:6d:d8:
75:4e:4d:57:8e:08:e5:6e:28:69:6e:98:95:9c:a3:
a0:b1:2f:2e:88:cf:f1:c8:99:5e:e2:49:f0:0a:73:
6d:ef:4c:dc:11:2b:0f:46:0c:ab:c0:4e:1a:f7:4d:
51:02:33:f3:40:0a:79:c1:1d:09:c9:8c:d5:01:b9:
ae:76:e3:4b:40:e4:c4:5c:6e:6c:76:33:91:ef:4a:
1b:ee:e7:fc:b1:a4:1b:8e:dd:2d:6f:8c:55:24:7b:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:BF:8D:8D:28:9F:9A:18:E1:AD:C2:C4:84:FB:4F:F2:23:40:81
X509v3 Authority Key Identifier:
keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:92:21:ba:f5:8c:ca:21:d3:0a:e6:8a:f7:8d:d2:30:a0:39:
e3:d1:18:ed:af:e4:d4:e5:c6:54:ae:a8:c6:4b:65:38:59:c5:
a9:a8:e8:f9:42:a7:19:d3:60:f2:22:e3:8e:87:2d:36:2c:da:
fc:ad:e0:dc:45:83:d2:18:a9:e3:71:24:90:99:2e:ef:e3:4c:
aa:97:76:8a:9c:de:56:37:5f:89:72:7e:9d:a2:4f:42:9e:0d:
4c:9c:5b:fb:c3:4d:52:fb:1e:95:99:08:f8:8a:09:50:68:a8:
03:d2:d3:3c:09:25:88:75:bd:00:ca:cb:c2:29:dc:8f:c8:49:
30:a4:24:93:92:21:7b:76:77:81:26:c5:ad:e6:ff:00:b6:29:
00:30:9a:c3:7d:70:ac:5e:1e:a4:bd:69:33:60:4f:46:48:6c:
eb:3d:74:0c:ae:34:58:aa:29:e4:11:b9:d0:47:26:ac:ce:5a:
4b:91:06:e5:9b:98:5c:75:04:ef:b0:cb:6d:76:5b:38:cf:9a:
3b:ca:9d:99:ab:dd:3d:ee:a2:9f:c2:7c:a1:1d:a0:99:24:f1:
23:b0:48:a1:2f:bf:a7:97:fe:fd:c8:99:97:b1:7c:42:02:c9:
9a:03:60:df:90:9b:13:b5:21:12:9f:5d:e7:89:6c:98:41:3c:
a7:a4:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:26 2026 by rpki-client