
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
File: dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json)
Hash identifier: KoTgukNzku1B+MNHZzDvm3uiIABTv0frWT3iJOcKRwQ=
Subject key identifier: 3F:D5:81:37:4A:73:99:C8:42:02:96:6B:10:86:24:EC:45:33:1B:3F
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial: 0639
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
Manifest number: 0632
Signing time: Tue 12 May 2026 22:51:35 +0000
Manifest this update: Tue 12 May 2026 22:51:34 +0000
Manifest next update: Tue 19 May 2026 22:51:34 +0000
Files and hashes: 1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: oFAxrWHQEKbdcEU2j0Ww4XXI8EQurNC0GKuyfhQsbi0=)
2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: c5w5QLZZ9to+icb8pOHSdLzZ2mnRXQw2msiixSkPrZk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 22:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1593 (0x639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Validity
Not Before: May 12 22:51:34 2026 GMT
Not After : May 19 22:51:34 2026 GMT
Subject: CN=6a03aef7-ed59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ac:25:9d:64:6f:4c:0b:fb:8f:0d:ba:de:33:
e5:63:54:76:fc:ce:55:2b:93:0c:51:af:09:4d:df:
97:5b:38:8f:04:6d:86:29:a6:48:a2:e5:55:fa:df:
27:03:b7:5b:23:2a:51:4d:e4:ae:9e:f0:28:dc:ef:
d5:67:ac:06:74:e0:2f:b7:3c:1c:8b:d1:8a:35:17:
b0:fa:16:a6:a1:2a:ef:fd:a6:52:cb:48:f8:9f:2d:
f2:6f:25:56:40:d5:60:3e:2a:cd:6f:91:72:ce:42:
22:f8:55:dd:2d:6c:6d:e4:af:3e:7e:ef:aa:ce:b6:
c8:3e:55:7f:32:63:6a:a2:e0:41:37:9d:a3:00:52:
33:b1:f3:a1:f2:74:e9:9f:f7:db:38:61:8f:fe:ad:
61:d3:a6:15:91:f2:9c:cc:ec:ad:80:75:23:1a:e1:
6d:e8:6d:2d:86:82:60:f6:de:a3:eb:e1:3e:ce:7b:
e5:67:b0:ac:14:94:23:35:a7:f7:f6:b5:af:ea:32:
80:9f:18:79:88:8c:ae:cf:38:84:89:ac:ce:01:83:
30:d9:62:15:f2:c2:b6:dd:18:b2:dc:c6:65:20:db:
32:cd:25:72:67:10:f7:31:6a:4a:0b:09:6c:9f:7e:
05:8f:e2:2c:47:55:90:a6:29:e2:13:bb:ca:95:74:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:81:37:4A:73:99:C8:42:02:96:6B:10:86:24:EC:45:33:1B:3F
X509v3 Authority Key Identifier:
keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:46:df:de:e3:ab:e1:eb:3e:3f:f0:6b:9a:0b:85:18:a2:83:
4a:10:1c:ad:63:71:5f:c0:f9:82:8d:0f:14:be:9f:45:a2:d1:
10:d3:6f:f8:d9:12:c2:bd:b6:33:ee:08:f4:48:76:b9:6d:bc:
61:b0:71:ae:0d:f8:91:0d:6d:88:cd:26:0e:c9:cf:76:59:68:
83:77:01:6e:e3:bf:47:9a:80:2b:60:e5:2b:94:0f:87:a6:52:
7c:65:7f:cb:14:90:b7:ac:d7:3e:3c:dc:f6:48:0a:87:ad:5d:
75:a6:fd:0a:4a:3e:5c:d0:aa:ef:8f:8d:9a:26:47:20:87:1f:
fd:76:4e:7c:0f:b8:bd:c0:f6:88:ed:29:45:a7:e6:b0:e0:79:
97:72:4a:27:1c:5c:36:e3:a3:6e:d0:50:0d:12:7a:bf:35:59:
41:ab:61:0e:52:d6:c5:38:36:b3:e6:12:d7:80:be:1a:6b:e1:
db:eb:18:ad:b2:41:53:3e:37:41:39:28:f0:d8:65:0a:ca:28:
ee:fa:2c:19:a8:9d:d7:ee:f7:3a:d9:7e:38:69:3d:e3:ef:37:
4f:19:c2:60:37:48:c1:ae:68:77:03:2d:d3:20:e9:73:1f:33:
5e:a5:10:0d:85:d5:39:73:d2:92:76:30:c6:97:79:6b:cd:17:
b2:d7:62:29
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDREQzExMTAvBgNVBAUTKDc2REY3RjkxMTY5QTNGMzgwQzBBNkJDRDM4RTkxODZE
RUZGMzFCQUIwHhcNMjYwNTEyMjI1MTM0WhcNMjYwNTE5MjI1MTM0WjAYMRYwFAYD
VQQDEw02YTAzYWVmNy1lZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkawlnWRvTAv7jw263jPlY1R2/M5VK5MMUa8JTd+XWziPBG2GKaZIouVV+t8n
A7dbIypRTeSunvAo3O/VZ6wGdOAvtzwci9GKNRew+hamoSrv/aZSy0j4ny3ybyVW
QNVgPirNb5FyzkIi+FXdLWxt5K8+fu+qzrbIPlV/MmNqouBBN52jAFIzsfOh8nTp
n/fbOGGP/q1h06YVkfKczOytgHUjGuFt6G0thoJg9t6j6+E+znvlZ7CsFJQjNaf3
9rWv6jKAnxh5iIyuzziEiazOAYMw2WIV8sK23Riy3MZlINsyzSVyZxD3MWpKCwls
n34Fj+IsR1WQpiniE7vKlXQEjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/VgTdK
c5nIQgKWaxCGJOxFMxs/MB8GA1UdIwQYMBaAFHbff5EWmj84DAprzTjpGG3v8xur
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENERDMS85OTZGOThFQURC
RDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6Z01DbXZOT09rWWJlX3pH
NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0OV9rUmFhUHpnTUNtdk5PT2tZYmVfekc2cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NERDMS85OTZGOThFQURCRDcxMUVCQjk1MTE3NDVDNEY5QUUwMi9kdDlfa1JhYVB6
Z01DbXZOT09rWWJlX3pHNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoUbf3uOr4es+P/BrmguFGKKDShAcrWNxX8D5go0PFL6fRaLRENNv+NkSwr22
M+4I9Eh2uW28YbBxrg34kQ1tiM0mDsnPdllog3cBbuO/R5qAK2DlK5QPh6ZSfGV/
yxSQt6zXPjzc9kgKh61ddab9Cko+XNCq74+NmiZHIIcf/XZOfA+4vcD2iO0pRafm
sOB5l3JKJxxcNuOjbtBQDRJ6vzVZQathDlLWxTg2s+YS14C+Gmvh2+sYrbJBUz43
QTko8NhlCsoo7vosGaid1+73Otl+OGk94+83TxnCYDdIwa5odwMt0yDpcx8zXqUQ
DYXVOXPSknYwxpd5a80XstdiKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:01:54 2026 by rpki-client