
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json)
Hash identifier: MTQvfG/qM61/RXp11q0ATbclqfhSX4KoRNQ0lKLJRrA=
Subject key identifier: 07:52:96:61:FB:28:39:73:35:2C:7C:F7:79:41:E3:DF:9D:28:02:AD
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 35DC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
Manifest number: 3584
Signing time: Wed 22 Jul 2026 14:52:44 +0000
Manifest this update: Wed 22 Jul 2026 14:52:43 +0000
Manifest next update: Wed 29 Jul 2026 14:52:43 +0000
Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: 9KUZseewjLkipTUWVr2a/x/K0Qy9atLXnrrgU+LrEYA=)
2: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=)
3: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=)
4: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=)
5: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=)
6: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=)
7: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13788 (0x35dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jul 22 14:52:43 2026 GMT
Not After : Jul 29 14:52:43 2026 GMT
Subject: CN=6a60d93c-9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:fa:03:ae:1f:83:66:52:26:51:4b:a2:40:2c:
e9:0b:16:f1:64:9b:5b:ea:a8:3d:ad:69:45:2a:b2:
0c:0b:97:4a:3a:69:34:f6:df:35:13:1c:e0:41:a2:
f7:ac:bf:c1:7d:21:6b:fd:76:02:77:34:ff:e9:04:
bf:a6:0d:bd:81:55:a7:68:56:77:9a:95:59:b3:e5:
7c:d6:e7:e1:a0:d8:25:1b:43:07:11:6e:79:e3:26:
5b:47:08:0f:22:42:07:7d:82:86:ad:35:ac:c7:6b:
94:8d:91:fc:ba:ae:90:ee:3a:9f:c6:56:5d:ec:9c:
dc:ee:b3:6c:88:db:ec:fd:95:32:96:c3:fd:79:fb:
85:d9:08:36:fd:a9:bf:c6:6d:54:09:26:db:7e:32:
de:3f:b7:52:f4:94:f1:bf:77:20:4a:c7:f1:df:19:
13:96:ba:27:99:05:47:08:64:e9:ef:54:06:4a:5f:
3e:40:29:c0:b9:bc:89:c9:24:34:29:bd:c9:be:a9:
2e:83:ae:7c:3d:cc:34:8c:8d:b5:d3:4c:f3:d5:da:
ad:11:d0:26:ce:92:40:51:84:d5:da:ac:61:a1:62:
90:d4:c6:2c:26:b3:d7:32:12:8e:ec:ea:c2:9e:51:
5a:6a:1e:59:c2:3b:66:9d:94:e9:f7:9f:29:5c:08:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:52:96:61:FB:28:39:73:35:2C:7C:F7:79:41:E3:DF:9D:28:02:AD
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:e2:cf:ec:ff:84:d7:5f:61:b0:b6:5e:02:2c:03:6b:61:8b:
e7:81:ae:ca:6a:c6:59:86:fc:9c:a0:45:61:df:82:e5:42:a2:
ae:3f:ab:8f:78:31:9e:c1:83:b3:ff:6b:24:e5:bb:d1:da:98:
c7:c0:f6:cd:50:a4:9d:9b:66:af:7c:cb:ca:06:0b:27:02:ee:
8d:be:f5:7f:c5:31:50:ab:11:0b:a4:93:17:66:78:af:55:4a:
13:fe:00:62:8f:73:fd:6a:3a:de:8b:d0:66:dd:3d:0e:a9:a1:
e1:38:ab:d2:cf:c3:28:0a:0d:6d:0f:1e:d7:e7:bb:6c:1d:f3:
8b:26:0c:62:78:7c:e1:28:ec:51:6e:f0:75:32:ac:a6:d1:20:
bc:25:c2:1e:c1:d9:2c:c1:e4:ac:e1:0a:b6:89:4d:86:1c:9e:
4e:e7:cc:05:2a:82:fc:88:28:c2:f7:2f:d4:f8:88:a0:cf:65:
9f:cc:78:71:e8:dd:dc:6f:9e:e0:1b:18:5f:f2:0c:60:b1:bb:
d5:8c:1c:8e:a2:b5:6a:0a:4e:05:f7:ae:71:ac:b2:ad:00:a2:
65:b8:7c:73:08:b3:f4:58:01:30:e5:7f:01:b6:f8:a7:63:bf:
db:9a:15:dc:55:cf:7f:61:6b:56:88:52:62:22:38:46:d3:c7:
62:bf:04:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:06 2026 by rpki-client