
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier: AidBd+bz+TC3tv7B66xu8hP3AXO3xbvGLEQk1/zdc6g=
Subject key identifier: 80:1D:FC:19:89:B0:E9:1C:63:6F:28:81:D2:E6:DA:BC:79:9D:75:20
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 088F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number: 0883
Signing time: Sun 20 Sep 2026 20:41:54 +0000
Manifest this update: Sun 20 Sep 2026 20:41:54 +0000
Manifest next update: Sun 27 Sep 2026 20:41:54 +0000
Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: gZQmkybZizwr13ooxdKITPcBEcm5ZwgeHcSpNtEhF3Y=)
2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2191 (0x88f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Sep 20 20:41:54 2026 GMT
Not After : Sep 27 20:41:54 2026 GMT
Subject: CN=6ab04512-33db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:00:d1:d0:66:83:0c:e6:9f:d1:6c:80:d0:
88:da:8d:05:74:23:e2:cf:f8:d8:01:8b:a5:d7:59:
4e:d8:88:8c:99:b3:2c:23:54:7e:6c:34:99:7a:ce:
90:fa:8c:4d:b5:00:62:d7:fd:34:ca:cf:b9:12:d1:
8f:53:3c:f6:ad:d6:8e:98:f3:d3:ea:63:4c:8e:44:
3e:6f:24:4a:7a:e6:6e:67:93:64:c1:b0:37:ce:93:
cd:16:29:90:74:d1:b0:87:de:f1:06:8c:8b:f7:e2:
ac:a3:ac:97:bc:4a:11:e9:28:a0:9b:f6:23:0e:ec:
09:d7:33:fc:be:3d:ea:0e:3e:7c:f1:31:10:09:ed:
ec:36:76:7e:14:c1:bf:5d:3b:b6:be:5c:73:69:b7:
c4:08:dc:6f:e5:c2:de:d9:8a:45:3f:29:ce:7d:dc:
11:19:74:c2:9b:04:a6:6f:af:b6:ef:90:59:50:c9:
5a:47:0e:98:d7:4b:cb:95:66:ba:97:c1:6e:9a:6b:
d4:46:3e:62:8d:38:32:d1:4a:47:1d:43:e2:74:b6:
96:29:d3:e9:8f:19:99:b4:1c:24:7d:41:95:d1:69:
57:fe:ec:e1:19:e9:1d:7f:9a:69:36:c5:9d:35:1a:
fd:15:18:16:ca:f9:a5:00:a9:1d:94:c6:a4:f2:bf:
3c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:FC:19:89:B0:E9:1C:63:6F:28:81:D2:E6:DA:BC:79:9D:75:20
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:3a:aa:9b:01:7f:6c:6e:27:ea:22:c5:96:6b:6d:59:75:
03:3c:bc:db:25:a6:c6:a1:01:c9:4e:d1:30:33:f8:59:85:3d:
85:31:1c:65:2a:12:e0:f6:93:3c:5d:7c:9e:fd:8b:d3:46:bf:
bc:1e:74:a8:ff:93:8e:d1:08:c4:45:27:d6:0e:39:3a:b0:e8:
f3:d4:19:99:c7:d9:71:2a:51:fb:09:d1:93:80:ec:6f:ce:99:
ab:26:cf:78:72:27:cb:87:41:f2:c7:6a:30:17:76:00:10:2c:
c7:f7:9b:25:8b:6b:12:1f:f6:3b:4e:84:22:23:1d:4f:d6:71:
66:a5:de:25:05:8a:26:89:45:a3:bd:f2:32:e2:e8:ed:ad:43:
5b:91:99:5b:bc:07:01:95:40:b4:6c:23:73:50:27:02:5f:3b:
04:cc:d2:3b:fa:8c:1d:a1:70:42:ff:b3:d0:cb:4c:4d:51:3f:
bc:e9:7d:33:f7:db:5b:b0:4b:c7:6c:24:6f:ec:4c:6e:be:61:
d9:68:77:91:4a:83:3b:17:c8:12:97:7c:47:ad:50:e2:2e:d1:
b6:ba:a8:0e:68:9a:6b:40:b9:b8:b7:07:c5:7e:96:a9:75:89:
98:6b:31:75:5a:ce:b9:c8:02:1b:cf:10:de:65:cf:0e:5c:85:
54:3c:42:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:53:32 2026 by rpki-client