
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: acnlMUqgiRbpNRpJZ5Ez7gBwYnZdPOLGj6urx6zosAQ=
Subject key identifier: 14:CF:9C:DF:8C:6C:93:A0:83:DE:A8:5E:A8:38:14:52:8E:10:30:46
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0EE6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0ED7
Signing time: Wed 22 Jul 2026 17:51:01 +0000
Manifest this update: Wed 22 Jul 2026 17:51:01 +0000
Manifest next update: Wed 29 Jul 2026 17:51:01 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: joeWc3Hs5bos5uYC8jEV8x4QVQvcHU4yEHSFCuwFPAE=)
2: AFAF715E4F6111F180E0E950C4833773.roa (hash: f1Qtrg6zMcuoal6t/eOY7kCkc2ldrxW+UAv8fqMIKbE=)
3: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 17:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3814 (0xee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Jul 22 17:51:01 2026 GMT
Not After : Jul 29 17:51:01 2026 GMT
Subject: CN=6a610305-0194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:d8:66:b5:b1:45:5a:b2:dc:36:3c:c5:23:
6c:80:b0:4e:44:36:6b:71:03:87:ce:33:4d:6b:29:
5a:71:e6:37:19:0c:f9:58:c0:d3:d8:24:c4:4e:8f:
a5:eb:99:71:af:c3:7c:42:ae:bf:8a:4f:e4:9b:a3:
f7:d0:92:a0:19:60:78:85:42:21:85:26:17:70:8c:
7a:15:7d:1e:bc:c5:dd:83:b6:31:f5:87:6c:cf:d5:
fb:f0:1b:f8:53:10:71:3c:0e:00:af:1c:6d:52:3b:
2e:b4:a0:47:be:5d:f2:54:74:cf:c3:c2:25:fd:09:
0a:7b:db:97:5d:c2:f5:9a:3d:89:f7:ab:a7:cf:34:
76:bf:ec:5e:20:51:29:53:c2:43:be:db:74:5b:f4:
f2:13:5b:ab:e3:04:b7:28:f2:2a:4f:6a:a9:31:0d:
c7:1a:72:72:22:66:34:4c:df:cc:fc:e2:44:1c:08:
06:aa:28:ae:fd:3f:10:47:6f:7f:be:2c:0c:1d:dc:
35:0a:a5:0f:e4:5b:18:72:68:69:dd:54:6c:7f:d2:
ff:d2:a1:2d:eb:4a:a4:8e:7d:f0:d7:98:b7:6a:91:
f8:27:55:8b:5a:c1:cf:bf:d7:93:8d:13:d1:00:e8:
ba:5a:9e:8b:50:a6:52:c3:29:4f:da:d3:04:b6:bb:
28:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CF:9C:DF:8C:6C:93:A0:83:DE:A8:5E:A8:38:14:52:8E:10:30:46
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c4:b4:26:51:b3:bf:d6:dc:88:d6:2e:e4:b8:44:51:bd:88:
7b:ba:ca:6e:67:66:9f:30:3f:d6:10:be:fb:62:a7:5c:0b:6b:
01:31:d9:f6:26:61:90:ec:10:9c:68:4c:a1:27:fd:fa:19:e5:
bf:57:e0:23:f2:b3:14:e1:38:1e:d3:13:f2:66:9e:c5:8c:50:
95:10:30:28:b4:94:8c:f7:99:ed:9c:46:99:25:6b:19:f4:94:
c8:0a:48:92:8f:ad:f0:a7:53:a3:8b:68:06:7a:58:8e:ca:ee:
97:f0:94:e0:b3:d1:c4:39:39:93:e6:3e:8d:49:9c:e5:28:6d:
7f:f8:6a:30:a5:9d:fe:ce:34:c7:cb:dd:d7:c1:72:fd:15:d5:
d2:b0:43:df:ed:a5:22:46:d3:32:f7:8e:20:1b:96:2a:8b:25:
cc:26:67:3f:62:16:fe:f6:d2:80:8f:89:e5:2e:ad:30:e3:45:
ce:b4:da:8b:b1:80:6c:1d:59:74:73:d8:86:ce:bb:33:7e:59:
ea:0c:f2:be:c6:de:97:1d:5c:d5:fc:2a:ea:60:d3:4d:f4:f5:
1c:74:e2:a0:13:5f:cf:f2:65:08:57:be:af:0d:ad:b8:60:f4:
9d:31:db:e4:32:14:bf:44:0c:28:1e:86:8d:d8:68:56:41:c7:
54:6a:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:27:15 2026 by rpki-client