
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier: zVJc6wlTCkVrkL60RlJfKKPYrMP0Q751yQ/A1HVpQ4I=
Subject key identifier: CE:4E:D7:9D:A0:1A:DA:70:6A:AC:0F:A7:3E:02:DD:D0:11:EA:FE:42
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial: 01C7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number: 01B7
Signing time: Sat 13 Jun 2026 04:01:13 +0000
Manifest this update: Sat 13 Jun 2026 04:01:12 +0000
Manifest next update: Sat 20 Jun 2026 04:01:12 +0000
Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: SzgNZP2ddq9Ed+Pmc3ltfYJ43mUf06SP/RcKTzvBVPU=)
2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=)
3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: nqdMcW1cqYt2/q2Bt8CB/e8QcYBAYu8tfj1XxULchaE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Validity
Not Before: Jun 13 04:01:12 2026 GMT
Not After : Jun 20 04:01:12 2026 GMT
Subject: CN=6a2cd608-c02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:50:c1:90:ca:31:20:9f:8f:c5:7c:d8:1c:
1b:2a:01:17:89:e7:fb:8b:bd:61:a0:00:c8:4e:dc:
47:ad:e7:d8:4e:bd:5d:eb:d8:6f:53:ab:ec:f0:c0:
20:fb:65:be:a8:f0:24:86:bd:54:97:e7:9a:f4:7b:
52:49:b1:c2:dc:50:c3:1d:7d:08:17:4a:75:96:eb:
bf:95:0c:07:ce:5c:16:65:f5:24:ba:5e:bc:ef:a6:
8d:fc:05:b1:f2:cb:fc:57:0c:14:8f:8d:8c:bd:3c:
5b:44:57:75:a0:cb:c1:47:19:c9:fc:9a:5c:41:de:
78:f7:bb:b8:5b:b1:be:d7:85:a3:f5:a2:72:06:87:
37:47:4d:26:f5:68:83:5d:13:1a:25:31:91:4c:9b:
f7:df:16:4d:cd:84:66:92:77:fb:3c:b8:64:4d:73:
b9:f4:13:c2:f2:cc:4a:15:ae:02:57:6d:4b:9a:74:
88:f5:40:09:a4:b3:87:dd:4f:59:8d:a1:63:95:6c:
aa:7d:37:68:37:2d:d5:5a:2e:66:35:af:9d:be:b0:
63:02:7a:70:1f:92:1c:6a:9f:63:60:4b:67:21:13:
ac:bc:be:3d:56:82:9b:18:8b:5e:f3:ee:3a:3e:2a:
08:5b:0c:6d:3c:4f:f0:0c:05:35:af:ef:5b:51:29:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:D7:9D:A0:1A:DA:70:6A:AC:0F:A7:3E:02:DD:D0:11:EA:FE:42
X509v3 Authority Key Identifier:
keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:cc:1e:93:3a:5a:99:7e:9c:3c:c1:cc:25:32:bb:f6:55:07:
11:fe:cf:70:55:c4:f5:26:7b:54:71:eb:b1:03:ad:e1:42:e2:
9d:f6:cc:19:88:90:2c:48:78:67:23:20:df:cf:51:7d:7e:9d:
08:b9:fd:da:14:11:99:42:34:32:95:29:b3:92:01:ad:58:06:
23:53:c7:fa:19:86:0b:9a:99:fb:24:1d:93:f3:ed:65:10:a1:
46:4d:81:6e:8a:7d:c8:e4:be:73:0e:3f:fa:8c:e4:eb:89:2c:
55:e3:a7:6f:1a:20:4b:6e:dd:c3:7c:46:33:8d:f1:68:3c:2f:
84:f3:a4:dc:1c:50:7f:21:de:ed:17:b1:1c:bf:54:a5:55:4a:
1c:bb:08:67:59:69:39:d2:84:fc:ed:86:db:04:85:8f:d6:f4:
64:cc:b3:1d:e6:87:77:51:74:5f:6c:96:0b:38:48:15:60:aa:
3b:eb:2d:73:8c:da:a7:9b:83:25:66:70:6f:53:9a:2a:d7:ff:
aa:98:a5:4b:99:fb:1d:94:7e:68:83:2e:b0:1a:d1:54:91:db:
90:f4:4c:87:90:d3:b8:5f:c3:f9:54:39:ef:83:78:62:bd:f6:
02:7c:ce:69:55:20:e2:da:9f:4b:ae:21:0c:1c:3e:64:3e:dc:
10:94:be:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:28:58 2026 by rpki-client