
$ rpki-client -vvf rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
File: DttKNycL9JQYSkbmAjFI_tbjOh4.mft (raw, json)
Hash identifier: 3Ldqab1iUM4DH0YomoJNwWxeCgE1Ai9diyYDC7mgbbQ=
Subject key identifier: E0:3C:9C:D7:6C:4B:04:A0:EC:2E:FC:CF:49:08:E6:5D:12:53:1B:23
Authority key identifier: 0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
Certificate issuer: /CN=A91878E2/serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Certificate serial: 0161
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
Manifest number: 015E
Signing time: Sun 01 Mar 2026 05:57:39 +0000
Manifest this update: Sun 01 Mar 2026 05:57:39 +0000
Manifest next update: Sun 08 Mar 2026 05:57:39 +0000
Files and hashes: 1: DttKNycL9JQYSkbmAjFI_tbjOh4.crl (hash: 1tpvid0PCnZpuyYU98+xCFh3s7/X1b6P55uw4/LF3Yw=)
2: 1C174EBCFC7011EE96142B1BC4F9AE02.roa (hash: RUYAq/sHQifGw9yl10echj1dgf9tOoWhpM9Z2a6ZUv0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl
rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353 (0x161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91878E2, serialNumber=0EDB4A37270BF494184A46E6023148FED6E33A1E
Validity
Not Before: Mar 1 05:57:39 2026 GMT
Not After : Mar 8 05:57:39 2026 GMT
Subject: CN=69a3d553-c8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:1e:1a:44:4b:dc:b0:77:3b:b3:47:e6:a1:
aa:7f:0e:18:a4:d0:cf:b7:45:85:6c:a5:c3:28:e7:
ce:fb:88:af:3c:18:d5:28:4a:92:77:aa:c0:6a:8a:
ff:93:72:02:9b:f0:e3:25:11:f9:22:69:0b:b6:87:
d3:9a:7d:d4:6b:03:a1:4c:68:69:e9:fc:db:b2:cb:
26:c0:b1:d3:eb:46:2c:40:61:0c:e3:5d:e0:7b:6f:
26:16:d4:12:63:ca:25:3f:15:87:ff:63:5e:aa:b2:
53:b5:d3:ce:5b:79:24:a5:e3:34:42:79:0a:1b:5f:
23:ac:6f:4c:9b:4b:eb:ee:e0:8d:a2:60:b0:bb:2d:
60:39:2b:30:bb:c5:92:99:1d:2a:58:7a:e7:1d:0b:
01:ea:84:d3:53:44:62:39:7c:d2:5f:32:1c:d9:b7:
66:09:7f:e3:cb:46:ad:d2:b9:be:c0:29:34:3d:8a:
74:bb:88:70:a0:e3:0f:fb:16:2b:85:0e:e8:6c:9e:
ff:ca:7a:6d:3a:0b:38:3f:a0:31:76:08:7d:c6:77:
5b:b1:d2:6a:ad:d4:5f:a4:90:20:fe:88:1f:7c:51:
f8:21:12:16:44:6d:a6:ec:df:b3:a7:67:97:b6:1b:
7d:de:e5:30:4e:ba:3a:7d:dc:8a:fa:23:be:e3:82:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3C:9C:D7:6C:4B:04:A0:EC:2E:FC:CF:49:08:E6:5D:12:53:1B:23
X509v3 Authority Key Identifier:
keyid:0E:DB:4A:37:27:0B:F4:94:18:4A:46:E6:02:31:48:FE:D6:E3:3A:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DttKNycL9JQYSkbmAjFI_tbjOh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878E2/AF32083EFC6811EE9961DD5DC4F9AE02/DttKNycL9JQYSkbmAjFI_tbjOh4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e7:55:50:58:4b:05:91:14:63:bd:ed:b0:9d:46:35:11:b2:
40:f2:a5:bb:fd:21:30:d6:91:c5:ac:d8:c8:bd:38:52:fd:26:
3a:74:06:36:61:bb:a8:f7:14:41:bd:ec:51:30:bf:10:21:a5:
6d:7a:af:ca:bd:f8:49:48:c4:16:e0:c8:6e:9c:ac:22:82:2f:
e7:63:08:ef:eb:43:21:7d:c2:c7:3e:1b:16:7b:3e:39:54:d7:
00:0a:f6:26:88:df:4e:d1:06:75:08:97:13:54:c7:a2:0c:59:
14:99:c5:1d:fe:93:d0:8b:e7:35:c6:69:e4:0b:67:93:5a:2c:
51:e4:ac:ed:33:38:ac:d8:43:e7:b6:7c:b4:2e:d7:ef:10:f8:
ab:6c:b5:c6:61:92:59:12:de:48:7a:09:3d:7b:5e:29:ce:e7:
03:e6:86:45:a5:68:e8:65:cc:48:58:98:49:91:fb:8a:ba:e8:
7b:19:56:63:c0:72:24:43:fb:1e:3d:21:3a:88:bd:d4:ae:91:
5b:14:b9:ec:34:e0:08:89:c9:47:e7:af:e1:29:62:21:7c:7d:
df:bc:e1:04:0d:97:7e:0c:1f:22:12:6b:51:54:31:f5:9d:74:
57:d8:6a:16:fd:02:33:7e:b8:a9:0e:8b:b1:80:4e:9c:d8:fd:
bd:e1:02:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:59:14 2026 by rpki-client