
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json)
Hash identifier: hI2Eld+GSWjCuP53B6njoxRkI2S+Z/lYPENXHl78wS8=
Subject key identifier: F1:30:2A:F1:5C:F6:12:FB:4A:78:9C:CB:84:E7:24:B8:FC:57:5C:EC
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 35C8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
Manifest number: 3570
Signing time: Fri 12 Jun 2026 14:50:22 +0000
Manifest this update: Fri 12 Jun 2026 14:50:21 +0000
Manifest next update: Fri 19 Jun 2026 14:50:21 +0000
Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: 7C0y+hYq1XlcaKGhF+noa2x1A3J9UOzEXioEf+2tZ1E=)
2: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=)
3: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=)
4: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=)
5: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=)
6: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=)
7: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 14:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13768 (0x35c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Jun 12 14:50:21 2026 GMT
Not After : Jun 19 14:50:21 2026 GMT
Subject: CN=6a2c1cad-7641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:33:10:41:fb:79:d3:ba:1f:0e:64:c1:9d:a9:
09:87:e1:8e:c4:fb:fe:af:4d:3a:34:2d:ed:88:96:
a3:ea:8e:40:6a:e9:74:48:90:7c:b3:b3:c3:c9:cd:
fb:a8:88:c2:ce:aa:9f:cb:a8:da:88:3e:b8:9f:41:
a2:1b:38:85:e9:c7:42:be:31:6a:8c:fa:f4:6f:7e:
18:93:ba:9d:af:eb:14:4f:2a:79:85:c8:35:3e:2b:
fe:e5:8d:9d:e4:b9:6b:ad:84:ee:c3:fa:8a:1a:97:
6f:69:57:4a:4f:49:80:41:c8:d2:f4:43:51:dc:22:
ea:e1:0d:5b:5b:ef:7f:ca:f8:e3:17:9e:fb:c0:ff:
89:19:bd:88:46:ac:12:d9:37:af:55:17:c0:f3:90:
7e:0b:6f:d4:55:0e:1b:bf:a0:12:7e:c3:46:81:97:
95:b3:69:76:d5:7e:92:ba:bc:0a:a7:fd:44:cf:b8:
eb:91:d4:b5:1f:59:fa:4f:6b:76:69:f8:4e:66:f0:
1f:a1:0f:47:01:bd:21:5e:70:43:bc:55:b8:7b:ea:
43:84:9b:9e:a4:a1:e7:e8:a6:3d:7e:1e:da:4d:fe:
4a:09:e1:9d:a7:56:99:86:2d:45:1a:7e:ab:67:31:
00:e2:cb:97:8b:5d:59:cd:97:e6:b8:f0:57:63:80:
d6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:30:2A:F1:5C:F6:12:FB:4A:78:9C:CB:84:E7:24:B8:FC:57:5C:EC
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fa:6b:0b:c2:9c:96:03:18:7b:0d:7f:12:32:06:74:e3:ac:
e2:61:ec:89:b9:86:99:10:d0:52:53:a0:68:43:92:fe:78:16:
37:7c:22:92:bf:5f:68:d6:bf:bd:01:3e:fe:da:f6:6b:1e:29:
73:6e:e3:02:dc:fc:6f:70:f4:bd:78:3f:36:97:38:65:ed:3e:
41:2d:5a:f0:48:46:07:09:a4:57:f8:b0:56:03:ba:4f:7c:a7:
ab:c2:ef:a3:b2:34:c8:2f:e1:c6:8f:80:07:d0:31:4d:24:31:
ca:e6:66:c1:05:5f:1d:72:70:b8:e3:ca:5d:ae:dc:09:c6:ca:
c2:01:8f:69:43:66:86:ba:19:43:bc:d1:da:5d:f8:cf:6a:d1:
63:22:81:13:7d:f2:29:bb:24:73:26:0b:61:b6:89:bc:2e:ac:
18:0e:53:ce:6a:71:f9:62:bd:a8:39:b8:81:f9:35:e2:f3:05:
1f:b2:9c:54:94:1e:d0:37:2c:0d:dd:5f:1c:18:36:b8:80:6a:
4f:a6:b9:bc:99:10:ae:8a:77:bf:27:5a:17:49:e6:0a:d2:a8:
42:ab:d3:86:d3:52:32:f2:9a:ea:0d:85:76:4f:0e:8f:bc:0e:
b8:39:22:c2:64:1b:80:78:9f:5d:c5:4c:ce:e1:e7:83:e6:bf:
24:8e:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:47:27 2026 by rpki-client