
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
File: dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft (raw, json)
Hash identifier: 5LGJegNFjfPzYSjdXAJl0Oh1XhWDV3ny+/dhQxXlSX4=
Subject key identifier: 35:53:4C:F2:2F:E4:0B:43:F1:61:DA:B6:47:DF:6C:67:F8:34:89:95
Authority key identifier: 76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
Certificate issuer: /CN=A91B7E17/serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Certificate serial: 0751
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
Manifest number: 0749
Signing time: Sun 20 Sep 2026 21:44:21 +0000
Manifest this update: Sun 20 Sep 2026 21:44:21 +0000
Manifest next update: Sun 27 Sep 2026 21:44:21 +0000
Files and hashes: 1: dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl (hash: PTCUkHIJR3a3XS+aYla3H9njp8H9nK2ykQrB7XhVDps=)
2: 87F6FDDC880911EB96D8882DC4F9AE02.roa (hash: nya9dv0nfdtT56zwG/wSYGtmj0pyX/94TyasLPF8tJU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 21:44:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1873 (0x751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B7E17, serialNumber=76D1F66C016DC184734E6D9BE1BEE90801FFA01F
Validity
Not Before: Sep 20 21:44:21 2026 GMT
Not After : Sep 27 21:44:21 2026 GMT
Subject: CN=6ab053b5-4188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:31:f7:18:2c:28:7d:55:46:73:44:a8:73:
8a:71:a3:4b:99:30:21:fd:42:57:0d:66:5d:56:c7:
14:41:8d:d6:85:21:0d:7a:2f:54:52:3c:54:ed:da:
e9:f0:96:e6:52:74:aa:b4:01:20:66:d9:4f:b3:4d:
3e:38:cb:55:1f:d0:c4:53:06:32:b6:08:1b:72:f1:
7f:a9:13:9a:18:17:08:1e:82:d7:1f:87:fc:ff:b0:
cd:22:4f:04:28:da:d8:04:8d:dd:8e:85:28:32:e1:
30:34:6d:ef:78:02:10:a7:d6:3c:42:bc:9d:7b:3a:
64:4a:d6:04:36:cb:e8:2c:9d:f4:74:27:79:ed:82:
a9:73:f0:d3:f8:f2:a7:3a:de:1b:82:58:22:1f:33:
48:e4:9d:13:ac:e2:8e:d6:70:be:f9:5c:6a:a1:8c:
57:aa:f6:b2:45:e0:e1:fb:8b:f8:92:5d:78:79:79:
b3:26:71:14:8b:f3:61:d2:0e:06:ac:8e:52:20:e9:
b8:09:00:b4:44:a5:ca:8e:a6:4c:b2:3c:49:fc:73:
4c:b1:e8:45:05:48:0b:1b:90:ad:38:4b:fd:b4:00:
02:5d:d8:dc:a4:5a:73:89:aa:55:6c:3c:15:0c:b6:
43:67:c9:a6:63:a9:c9:09:67:18:47:1c:6c:e7:29:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:53:4C:F2:2F:E4:0B:43:F1:61:DA:B6:47:DF:6C:67:F8:34:89:95
X509v3 Authority Key Identifier:
keyid:76:D1:F6:6C:01:6D:C1:84:73:4E:6D:9B:E1:BE:E9:08:01:FF:A0:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtH2bAFtwYRzTm2b4b7pCAH_oB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7E17/7AB0B566880711EBA0A9B62AC4F9AE02/dtH2bAFtwYRzTm2b4b7pCAH_oB8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:62:81:62:ff:f8:37:34:83:ee:82:e3:d7:4b:54:52:eb:88:
d4:2c:40:8c:5b:31:4f:d1:f0:bd:1f:39:08:60:cd:20:73:fb:
cb:5b:40:98:4d:7d:dd:0d:cb:74:e3:b3:e6:bc:36:8c:39:1b:
db:c0:1b:62:52:44:31:18:1b:c7:71:7a:e4:2b:17:ce:46:fe:
75:6a:1b:f2:3b:70:df:53:c8:c4:4b:98:c0:6f:83:04:24:dd:
41:ef:95:02:b2:ff:5d:72:5d:b3:35:e0:ed:0c:71:e5:43:f6:
b8:ca:31:59:52:fd:ec:a9:aa:54:82:6f:2a:9d:0a:8d:fc:68:
c8:eb:59:3d:c5:6d:d5:0f:5c:02:82:b5:67:91:fe:bd:50:31:
3f:bf:19:0f:a3:14:e8:71:c8:e8:c1:38:cc:4a:6c:0b:bd:b2:
cd:32:01:de:5d:7e:bf:97:a5:b3:ab:8a:e4:72:1d:42:f1:a2:
4f:a0:f2:9c:53:81:a6:fc:9a:22:9b:b0:55:94:81:4d:c1:ef:
2a:e0:06:06:0b:7c:ef:bb:cb:d1:95:ef:e5:06:cd:67:7e:3d:
ab:c0:63:79:43:4b:f3:9d:c3:89:a9:62:16:9f:cc:84:b7:86:
a0:2e:73:f3:a8:b3:52:c4:83:4b:6e:0b:b8:46:3d:0c:18:e4:
0b:c4:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:50:53 2026 by rpki-client