
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier: WMKpUw7O5fS4ODLtxUcM+zvOlPtQTABa5m63ydgY3Zw=
Subject key identifier: 42:99:FF:04:F4:88:C3:C7:70:4A:17:38:67:AA:0D:D5:CD:90:9A:99
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 0870
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number: 0864
Signing time: Wed 22 Jul 2026 21:23:42 +0000
Manifest this update: Wed 22 Jul 2026 21:23:42 +0000
Manifest next update: Wed 29 Jul 2026 21:23:42 +0000
Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: 50vp0OMVCGflLyJV1Wl/4sRcgB4TrPKyLR7obvBthes=)
2: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
3: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 21:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2160 (0x870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Jul 22 21:23:42 2026 GMT
Not After : Jul 29 21:23:42 2026 GMT
Subject: CN=6a6134de-5829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bc:f6:80:f9:ca:3f:13:b4:46:48:a7:90:10:
f5:3b:bb:59:2d:eb:9d:46:37:47:ba:07:d8:11:32:
43:a1:00:88:0e:6b:16:ab:0e:bf:d5:57:2e:dd:bd:
8c:20:8c:39:34:f1:43:fa:a4:44:50:de:ac:e1:fe:
29:1c:72:5f:97:15:4c:c6:e3:70:4f:c4:cd:96:ae:
ca:3b:79:c2:e6:19:48:5d:46:16:ff:90:2b:68:34:
17:ac:85:fc:fb:62:5f:b2:1b:56:e3:0c:db:c9:87:
46:b9:9b:59:2a:54:a3:2e:c4:35:85:24:ab:16:31:
54:05:a0:d5:55:98:7b:79:8e:b5:bf:89:e3:b9:a3:
fc:dd:f7:7d:07:96:eb:69:dc:92:56:d7:d0:e0:1a:
ff:3d:25:48:df:c6:2e:c4:27:8d:d9:93:b4:e5:f9:
6e:dd:51:59:42:f7:a2:bd:a2:9c:b7:30:0c:c8:ce:
e6:35:54:21:a9:13:aa:0e:54:c6:97:27:29:ac:c4:
48:1a:18:ff:08:24:40:7d:b5:36:87:6f:4e:6b:a9:
53:1d:8c:59:4e:d3:f7:71:f9:94:1b:da:e3:70:00:
dc:b4:ba:ff:e1:2a:f2:58:ba:20:08:33:21:dd:51:
5d:95:e6:0e:65:fd:a1:53:a4:14:e5:ae:3c:b0:75:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:99:FF:04:F4:88:C3:C7:70:4A:17:38:67:AA:0D:D5:CD:90:9A:99
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:89:91:bc:27:5a:ba:73:5a:fd:a2:a6:d8:60:4f:31:f4:e5:
a9:7d:5f:f6:72:de:ad:76:d9:d8:d3:09:75:b5:18:36:f9:e3:
41:ed:88:29:cd:38:cf:56:21:05:0c:7a:ef:03:4f:c8:78:df:
06:d0:29:7a:3c:ac:3c:14:7c:37:02:c6:24:15:b6:91:46:da:
50:a9:21:77:c2:84:b2:72:71:fc:43:82:5e:89:f9:28:6d:fd:
18:79:8d:ac:ce:ba:54:36:e3:bc:bf:8a:28:9f:4d:53:48:25:
77:e4:0c:9b:ea:9f:45:8f:99:70:04:4c:53:59:64:1a:47:4b:
68:59:1a:de:aa:c4:e1:78:38:48:42:d0:7a:0b:56:58:50:ff:
1b:2b:2b:bb:d8:f1:b8:9c:bf:0f:ec:50:c8:69:59:85:fd:7c:
54:21:a8:c1:05:26:9b:de:e9:60:0a:e4:51:cd:23:8b:fe:f8:
d0:9d:ae:f9:42:f6:b2:24:d5:cb:e6:e8:0b:76:ef:14:76:ec:
20:6f:d0:57:52:9b:ee:69:89:2d:85:09:64:eb:8c:7f:3d:37:
23:6f:cb:29:75:36:29:e6:62:d8:71:32:1d:a2:64:30:8d:c6:
c1:a4:ce:8f:12:f1:5d:6e:e7:f3:78:8c:f0:41:cb:30:32:6c:
51:ac:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:47 2026 by rpki-client