
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
File: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft (raw, json)
Hash identifier: x1+zWTDqK6WLlsdDWE1knW3Y2UE1jENPDuWJuYxVDQ4=
Subject key identifier: DF:3A:05:18:0D:2B:BD:FF:6A:BD:6E:48:BC:76:F4:07:BB:75:28:07
Authority key identifier: E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
Certificate issuer: /CN=A91A2FF9/serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Certificate serial: 4E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
Manifest number: 4D
Signing time: Fri 25 Sep 2026 08:26:31 +0000
Manifest this update: Fri 25 Sep 2026 08:26:31 +0000
Manifest next update: Fri 02 Oct 2026 08:26:31 +0000
Files and hashes: 1: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl (hash: OpYI5FurFujcyxmYo1t84rg+52XAE2UbwHJMUue+DDQ=)
2: D898F57242DC11F1862EFB92CB833773.roa (hash: NhBu2Z3OF4VzcUnX2RhgJnVsv8Gh1MRdgOtdbwjJcZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl
rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 08:26:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2FF9, serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Validity
Not Before: Sep 25 08:26:31 2026 GMT
Not After : Oct 2 08:26:31 2026 GMT
Subject: CN=6ab63037-29f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:2c:34:64:6a:fe:7b:5d:5f:e5:36:ff:2d:
41:ae:c8:d0:a3:21:97:40:1a:1d:a7:22:81:c3:10:
ef:d8:ad:41:e4:c1:f9:91:cc:ae:cd:a7:5c:20:68:
34:8c:ff:1e:59:79:65:1a:46:f7:61:3a:6b:82:cc:
9b:4e:83:83:3a:dc:b7:6f:09:e0:36:84:b9:66:61:
6b:ca:64:78:3f:fc:bc:5f:0d:e0:9a:00:8b:2c:40:
87:f5:d9:a7:f3:be:1c:5e:3c:59:8e:25:9d:df:18:
e7:86:3c:7b:05:f1:5b:6c:69:97:ca:6c:7c:cf:ac:
70:11:7b:4e:c0:33:fd:95:81:23:1d:7c:67:01:87:
c0:6a:14:ca:43:6f:ea:64:b8:22:59:63:6e:0c:1d:
79:2a:1b:bb:b1:08:3d:97:ea:d5:0a:e1:e0:94:ab:
03:73:2c:97:8b:02:8d:83:3f:45:d2:b9:5b:c2:e1:
59:b2:e5:61:ce:a3:7c:19:99:9b:43:7b:7a:b7:07:
1c:b8:ab:dc:f8:2f:43:89:70:a6:b0:72:37:45:c2:
f3:79:7d:1f:b8:49:82:9d:ac:8a:ff:53:7d:f4:6e:
07:52:45:2e:01:31:d1:39:d8:13:9e:ef:df:37:e3:
28:e2:17:0e:a7:a6:58:fb:77:13:38:b4:e9:91:b2:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3A:05:18:0D:2B:BD:FF:6A:BD:6E:48:BC:76:F4:07:BB:75:28:07
X509v3 Authority Key Identifier:
keyid:E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:7b:d3:94:57:aa:f4:d7:a5:a7:4f:f3:19:dd:3c:77:7d:
74:5f:71:22:b6:89:13:df:15:21:c9:ff:53:01:69:b6:28:4d:
5e:e8:68:16:4d:0f:87:38:3f:f0:2e:9e:f9:95:a5:04:fb:7a:
0b:63:05:4f:ae:0b:48:e6:1a:84:e4:b9:57:ef:d9:6b:42:a9:
9b:8b:f1:88:3c:d5:9d:df:9b:18:4a:9c:15:cc:59:d1:6b:ce:
ed:87:cd:0a:d8:a3:ea:06:ea:23:19:f9:b4:70:f5:e9:7e:75:
12:85:b8:76:a9:b3:7d:90:de:e7:21:fe:93:84:69:ac:2b:21:
01:6a:06:ec:c0:56:63:6a:76:95:71:8b:62:50:6f:08:16:5f:
6b:7a:00:c0:b6:0c:78:13:e0:91:ef:6c:e1:07:5f:e1:8c:9b:
c3:e3:15:99:3d:93:9b:74:5f:8c:f6:f0:eb:7a:30:ae:ea:cf:
cb:23:60:24:5b:6a:e0:5e:f1:8a:28:2b:46:c0:9a:9a:5b:df:
88:25:7d:86:d9:ac:c5:ff:24:30:63:74:aa:5b:f9:57:a0:41:
4f:2e:4e:42:e3:ca:f6:a8:77:2b:22:98:86:65:f7:c0:a3:5f:
fd:da:ea:75:a0:39:29:3b:0a:fb:2c:e5:b8:57:d4:26:fc:b8:
5f:9f:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:54:25 2026 by rpki-client