
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier: fXB4Bu+Qahh3F7chyMdZjcpu23h79TP731+AZUig4tc=
Subject key identifier: 36:7E:36:AB:DE:AF:98:47:1B:A8:DE:35:B6:5A:2F:6C:97:43:41:2F
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial: 082A
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number: 0818
Signing time: Thu 16 Apr 2026 21:00:19 +0000
Manifest this update: Thu 16 Apr 2026 21:00:18 +0000
Manifest next update: Thu 23 Apr 2026 21:00:18 +0000
Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: T0wNNAdv9x8HmGkOmPbisfzHru9WF4zY4+e0sbJRDIk=)
2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: 6fP6rDBHclh/0NOHkluOXt1a6fQZ2ulzPfQPIbkh2Ik=)
3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: RyCT9Kfh39JgpB62lsPr7X3rrbBLW034nB14BsTheqA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2090 (0x82a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Validity
Not Before: Apr 16 21:00:18 2026 GMT
Not After : Apr 23 21:00:18 2026 GMT
Subject: CN=69e14de3-25a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:fb:72:10:03:62:aa:2c:3b:4d:39:30:02:
3b:e8:ea:a6:3f:c4:bd:ef:8b:28:06:ab:1b:35:ea:
fe:4f:2b:28:16:39:30:28:ca:3e:49:aa:77:8a:db:
80:eb:98:d9:a5:7f:e8:7d:8e:ae:09:c8:68:4b:9e:
a9:41:5d:13:cb:34:78:d5:e4:54:97:1b:88:2f:07:
23:99:a8:93:3b:b8:3f:66:32:8a:d4:1c:7c:35:c5:
75:b2:c4:ad:b6:ab:c7:75:24:85:de:41:67:bd:92:
e8:97:da:3a:c3:a3:56:d6:5a:87:1b:93:39:3a:57:
02:e6:75:d6:a4:4a:25:25:2f:00:80:7c:a1:aa:2c:
58:30:25:80:3b:90:f2:95:00:ed:72:d2:17:a0:cd:
29:09:cd:b8:5e:8f:56:34:95:8e:e9:88:5c:98:80:
8c:f5:06:5d:9a:97:d8:b7:5e:47:91:e9:9c:eb:3e:
1b:7f:2e:83:b1:9e:ed:55:a8:20:d3:b6:bd:e7:4d:
9e:fa:fe:c2:b1:a4:35:6b:40:9f:22:61:ea:b5:04:
05:63:73:64:eb:d7:9f:2e:fd:aa:74:d8:bb:22:01:
e1:3c:cc:c8:ae:2e:a4:b8:fc:28:32:d7:56:2a:4e:
c4:77:f5:fd:08:c1:4a:ca:ce:a0:12:96:3d:ee:69:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:36:AB:DE:AF:98:47:1B:A8:DE:35:B6:5A:2F:6C:97:43:41:2F
X509v3 Authority Key Identifier:
keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d6:b1:8e:56:4b:ea:08:0a:26:41:e0:2b:cb:a5:77:ce:86:
81:84:00:32:e5:2c:ab:ec:00:e5:9d:7a:e6:a2:5f:1f:5a:29:
1d:3a:80:93:70:2a:74:62:0e:0d:cc:97:dc:17:56:74:d2:54:
32:ff:1f:2f:62:7d:56:d7:31:b6:5d:0c:4d:18:9c:ed:67:f2:
23:03:92:bc:1e:63:cc:d6:9e:ce:3a:66:c4:1a:b7:b0:0e:5c:
e3:67:4b:28:bd:4c:88:cb:27:aa:92:5c:a6:91:f0:9f:9f:61:
df:53:01:88:9e:c3:ce:a2:d7:d0:be:ea:e6:89:11:d1:63:46:
8e:9f:40:cf:9d:5d:39:44:67:20:2c:c8:24:78:ee:78:83:d6:
56:60:1c:9d:f4:4d:f5:45:c7:1e:1e:59:63:c2:ac:45:e1:84:
b0:6f:97:e4:4b:fe:c6:e7:a9:bc:9a:fc:59:f2:a7:73:d4:00:
3c:e6:7d:d2:15:e3:49:5d:59:e6:96:25:62:bc:9f:49:df:37:
63:cc:70:13:dc:96:5d:84:aa:61:ba:21:b3:67:cb:73:da:57:
c0:b8:d8:9f:93:c6:e6:55:e2:b2:3b:36:44:4e:55:f2:8a:a6:
50:4b:b1:19:83:67:a3:53:4b:4d:55:f1:10:2c:a9:ed:b8:7c:
69:82:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:17 2026 by rpki-client