
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier: PQKmHA51J94L0qLAPB5gxZhXJHAJVVikRdoc3nmnAQw=
Subject key identifier: A8:47:06:4E:E1:A2:02:DF:D3:37:8A:F2:02:03:BC:10:08:96:5A:84
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 08AB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number: 089F
Signing time: Sat 14 Nov 2026 20:35:50 +0000
Manifest this update: Sat 14 Nov 2026 20:35:50 +0000
Manifest next update: Sat 21 Nov 2026 20:35:50 +0000
Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: PIsgTZnIhspD8mBWM/UKOm++oGNefmE44OAqNSHR8yE=)
2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Nov 14 20:35:50 2026 GMT
Not After : Nov 21 20:35:50 2026 GMT
Subject: CN=6af8c626-bb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:48:65:82:fb:51:74:e1:46:90:b8:8f:fa:
8d:9d:fc:5b:ca:e9:e1:c1:81:d3:2c:ce:3c:99:17:
fc:7f:02:f8:32:47:e4:9a:98:3d:60:91:4a:9c:3b:
bb:45:8d:d6:df:48:1a:8a:2d:44:d6:08:58:a3:7b:
52:46:a1:a1:2f:82:da:d7:a8:ad:1e:a5:fc:17:6e:
79:65:5d:da:d6:56:2d:3e:86:01:c5:36:4d:5f:fe:
d6:e3:88:66:d4:5d:cc:ce:22:58:21:7e:7f:08:66:
fc:6b:18:e4:e2:05:76:fd:93:ea:28:c1:2e:de:4e:
b9:8a:7f:21:57:2b:0a:be:aa:41:16:ab:51:de:f5:
60:de:09:ab:a4:4e:87:3e:e3:9e:b0:a6:8c:b6:2f:
4d:a5:21:af:ed:18:40:af:f1:d5:09:10:16:2b:2f:
6c:73:ec:27:48:25:ec:7d:c7:b3:a2:be:5f:b0:ff:
00:35:d2:1c:32:31:a0:f4:8b:ba:6b:a9:45:a1:b8:
56:87:50:56:e4:fd:4e:0e:db:a3:a8:3f:e0:34:37:
ff:ae:d0:d8:ac:25:82:c3:46:4f:66:93:50:f2:fb:
ad:f3:86:7d:f9:f9:08:3b:a7:e2:8d:25:ec:77:40:
0c:9b:4f:5c:52:87:41:ae:b5:b1:64:4d:5e:84:80:
6e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:47:06:4E:E1:A2:02:DF:D3:37:8A:F2:02:03:BC:10:08:96:5A:84
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:4c:e1:53:4c:c7:43:2e:c3:9b:6a:0f:20:29:1a:49:cf:16:
64:86:44:03:71:aa:0d:e8:a1:6f:e2:e5:c4:ca:95:1c:65:51:
2e:25:e9:75:22:af:e7:8d:b1:e5:e5:73:f1:45:9c:3f:d8:6e:
a1:67:73:63:5a:ee:47:69:bf:70:38:a7:be:17:42:4e:a3:d0:
c1:4d:46:c5:68:22:39:d1:50:63:a0:8d:f9:4b:6d:5b:1f:a0:
2b:5b:f2:b7:50:8d:b2:03:94:9c:ab:d7:3c:a8:26:d6:19:e7:
8e:2c:91:49:1f:bd:03:a7:0c:8a:34:8a:6e:76:bc:cb:7b:75:
77:7e:40:d1:76:56:21:c2:0c:c1:cd:fb:5b:2f:ec:44:fc:03:
ba:3f:c9:fe:87:2c:73:65:79:48:43:b9:8b:33:d5:04:51:80:
2c:2f:46:50:eb:65:06:6b:53:61:1c:c1:69:f9:41:ac:1c:2a:
e9:d5:d9:78:27:e5:5f:e3:8b:5d:d0:25:ea:8f:dd:a4:f9:66:
fc:8b:3c:d2:28:05:3c:0b:ec:3b:c8:01:a5:8f:c0:68:50:ac:
a6:63:87:7d:98:8e:3d:84:f0:9a:a8:c5:0f:26:84:d0:32:f9:
25:1e:01:64:8b:42:09:5c:02:2f:18:e4:14:45:b6:41:5b:d4:
78:a8:15:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:46:11 2026 by rpki-client