
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier: TbWRkoDKVsgiTNEwPnQbsWkMx4NtDibsiYLsC3WvcCY=
Subject key identifier: 88:CE:47:15:40:D9:7A:92:89:A5:1E:6D:F7:B0:2E:3E:0D:25:D3:5C
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 0873
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number: 0867
Signing time: Tue 28 Jul 2026 21:16:19 +0000
Manifest this update: Tue 28 Jul 2026 21:16:19 +0000
Manifest next update: Tue 04 Aug 2026 21:16:19 +0000
Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: vLWVa0cZ0i27F37gnl6jCAWt04fV6fqxNdsQsEGBOXI=)
2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 19:19:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Jul 28 21:16:19 2026 GMT
Not After : Aug 4 21:16:19 2026 GMT
Subject: CN=6a691c23-9cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8b:99:49:b3:73:a6:d1:09:34:e9:86:c6:f7:
cc:85:06:d6:ca:c6:58:ab:6e:bf:48:2b:d4:77:da:
87:66:09:bb:d2:80:11:8e:6e:1e:da:7a:dc:98:80:
cf:5f:46:86:6b:e9:90:ac:5d:26:61:11:5c:68:43:
c0:bd:bf:a3:4a:40:1e:9b:cf:68:b4:4c:8b:6e:53:
18:6a:95:ff:5f:3e:2b:e9:46:57:e9:46:9f:53:ee:
46:ab:60:65:31:cc:7c:39:03:2b:32:9d:6f:d7:fd:
d4:0d:51:11:de:54:52:cd:8b:0b:ff:a1:53:6b:36:
2c:86:60:fa:ac:da:cd:cb:51:f1:3a:89:3a:86:10:
17:e3:08:da:5e:5f:c2:b0:14:38:89:5a:7b:32:29:
2e:f2:41:f4:cd:bf:e5:13:08:7c:9a:86:02:86:b8:
83:02:f0:b2:ec:01:67:a5:ab:9e:9b:4d:06:5a:a7:
e9:54:b0:e9:c4:e6:f8:85:14:14:42:9a:25:fa:25:
4e:ad:e9:f8:27:68:ab:01:87:96:48:7c:67:0c:35:
f6:cf:6d:ef:20:23:4c:e7:6d:25:5f:70:b8:14:a4:
4b:b8:e1:1c:cf:05:34:71:7e:3c:b1:99:0d:0a:e2:
f8:0f:e6:d4:67:44:94:d0:21:bf:66:e9:11:2f:19:
8d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CE:47:15:40:D9:7A:92:89:A5:1E:6D:F7:B0:2E:3E:0D:25:D3:5C
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:21:57:fa:01:8e:3a:57:1f:21:24:6e:60:4d:1c:c8:1b:3f:
8c:68:3f:df:90:e8:d3:3d:8f:01:3d:de:a7:2e:05:d3:f7:d4:
ea:95:d7:3c:57:f8:52:25:96:0a:81:b6:cc:52:05:4b:fa:cc:
91:dd:f7:44:f2:e4:59:63:88:2e:72:44:53:73:2b:50:01:6e:
7b:dd:4f:ac:be:2a:26:f6:51:be:96:17:b8:a6:9c:24:96:30:
a1:ed:dd:84:97:99:c5:eb:86:24:07:4d:08:22:69:9f:8f:ea:
ba:9b:4b:28:79:6e:bf:2d:db:0f:37:c0:b1:ba:71:75:98:f4:
77:a0:ef:57:e7:99:c1:f0:e4:89:e9:09:15:a3:d3:57:88:eb:
63:55:14:dd:71:b7:b3:8f:84:75:8f:8a:ac:08:b4:8b:9c:b0:
0e:d9:44:1e:d7:cb:3f:71:7a:ea:17:b4:23:04:b9:97:a7:24:
2a:bc:7a:74:24:50:de:bc:5d:da:ab:f9:ce:1f:db:7c:66:6f:
de:e1:79:71:f7:26:59:f9:a2:1c:5a:86:1d:42:23:5d:1c:b9:
2b:d4:0d:e5:b4:28:a3:cb:d5:d4:b7:11:b5:5b:c3:c6:9d:34:
42:8c:c0:17:07:9b:04:bf:7f:03:ba:5b:69:a6:14:af:eb:76:
7a:ef:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:09:45 2026 by rpki-client