
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
File: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft (raw, json)
Hash identifier: Ze4SXueBti5d68cQ0tYT1aPp8K9En3umOcTzmcOe+kY=
Subject key identifier: D2:BA:28:2F:82:6F:2F:14:16:B3:73:E2:52:8E:E2:1E:A8:85:8F:01
Authority key identifier: 0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
Certificate issuer: /CN=A917C09A/serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
Certificate serial: 6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
Manifest number: 6A
Signing time: Mon 27 Jul 2026 10:12:42 +0000
Manifest this update: Mon 27 Jul 2026 10:12:42 +0000
Manifest next update: Mon 03 Aug 2026 10:12:42 +0000
Files and hashes: 1: Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl (hash: X1islV4aAP+g1LX65WBc2CMkI+QDpki7ci+d/d6ts+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl
rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 10:12:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106 (0x6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C09A, serialNumber=0F3B5FF154505291408C4840B1036D92A9304ED4
Validity
Not Before: Jul 27 10:12:42 2026 GMT
Not After : Aug 3 10:12:42 2026 GMT
Subject: CN=6a672f1a-1ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9c:e3:3a:05:20:aa:79:3a:64:d7:65:a5:b2:
bd:18:7c:9b:e4:f9:34:b6:d0:dc:cb:a7:84:09:f7:
6c:99:1f:b0:22:60:0a:10:c7:88:b2:60:66:92:d5:
28:f2:66:66:3e:b1:43:ce:70:1e:bd:94:e1:6a:91:
30:f1:0a:9f:30:d3:ed:ea:f3:ed:ed:6e:89:37:a2:
fe:38:9b:bc:d5:50:b9:ba:03:d4:05:17:45:68:fe:
de:73:9f:30:ea:00:80:eb:2c:08:48:36:a1:51:8a:
f1:91:f0:45:79:99:f0:18:49:63:6f:67:cb:70:67:
35:42:c0:1f:dc:94:50:67:f6:7d:f1:c6:a3:b0:8f:
48:03:20:6e:14:a5:9f:ec:7e:26:bf:8f:1f:fc:a0:
3a:3b:83:12:2f:ee:83:b2:2c:09:1d:ff:d6:b4:8d:
8b:17:36:b4:83:8a:af:71:22:9d:7e:68:a4:24:d8:
19:74:cc:39:c4:ae:ba:08:1a:07:6b:b6:d5:46:4e:
4f:d7:48:cc:87:ec:e3:42:ba:67:b1:15:08:50:4c:
83:8e:4f:1d:1d:5a:28:71:d5:b2:2d:27:a1:56:91:
17:e2:e6:66:7b:49:56:4a:e9:7a:e7:c3:de:f1:ff:
c3:37:e2:da:44:63:7d:14:95:19:60:f0:3c:41:51:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BA:28:2F:82:6F:2F:14:16:B3:73:E2:52:8E:E2:1E:A8:85:8F:01
X509v3 Authority Key Identifier:
keyid:0F:3B:5F:F1:54:50:52:91:40:8C:48:40:B1:03:6D:92:A9:30:4E:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C09A/BB673F3EEAD711F0B9CBFBE6646F56BC/Dztf8VRQUpFAjEhAsQNtkqkwTtQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:05:92:42:1b:31:86:75:6c:fe:ee:4d:29:26:b9:d7:8e:cd:
63:9d:51:08:fe:a0:d1:1d:52:9d:78:b5:0a:9d:cf:85:9d:87:
4a:ad:57:f0:b2:24:71:37:c1:de:81:4f:0b:f3:37:13:74:0b:
39:2e:c7:de:1e:e0:51:c6:14:80:79:15:93:a6:67:2e:7f:b2:
63:e4:2e:20:bf:36:9c:7e:b8:04:8f:60:b6:fd:57:4f:cf:5b:
8a:6e:57:53:96:02:6e:e8:41:1a:f5:75:e8:86:4e:8c:f1:96:
f1:a2:28:89:35:7c:e8:f7:72:39:bf:b0:7f:96:03:52:9d:b6:
af:b2:33:1c:df:10:ed:08:30:11:bf:6f:e3:52:c5:bb:84:41:
66:d0:34:93:8e:a3:af:59:1c:a0:52:0f:5a:99:0b:97:28:7f:
d8:94:80:00:fc:85:d6:9c:3c:67:94:db:93:e8:5e:2f:f5:a2:
08:cd:f5:6c:cf:05:44:17:06:14:d4:32:af:55:32:00:6d:ed:
30:d9:24:be:53:18:74:07:67:1e:2f:00:ed:15:9b:0e:e3:88:
5e:c9:81:4a:26:53:49:70:7e:e5:79:5c:7b:c5:dc:c4:cc:6a:
22:0e:3c:22:2f:46:21:63:21:db:01:00:4d:2f:1d:b6:c1:0b:
90:6c:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:14 2026 by rpki-client