
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
File: dsy3G8ONvsj1s1rnufdOprg25Qg.mft (raw, json)
Hash identifier: kFMc+b/Y6XZBE6KQTBTpVvcdzbWYpUlz/w7asWvkfN4=
Subject key identifier: F8:84:62:5E:A5:6F:61:AB:86:00:E0:73:9A:C1:22:35:3D:5D:2D:9A
Authority key identifier: 76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08
Certificate issuer: /CN=A91C7425/serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508
Certificate serial: 1B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
Manifest number: 1A
Signing time: Sat 13 Jun 2026 09:02:09 +0000
Manifest this update: Sat 13 Jun 2026 09:02:08 +0000
Manifest next update: Sat 20 Jun 2026 09:02:08 +0000
Files and hashes: 1: dsy3G8ONvsj1s1rnufdOprg25Qg.crl (hash: E2cVdM02DWMUZGeI8/sKGBvAjsP+aYlD5TKZWoU1I7k=)
2: 8A11628E49A511F1AC5B8E7699833773.roa (hash: niJhKfV+ouFK6sQjUZt4n5DTxe39SMX+kn/MPEsu8wg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl
rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 09:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7425, serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508
Validity
Not Before: Jun 13 09:02:08 2026 GMT
Not After : Jun 20 09:02:08 2026 GMT
Subject: CN=6a2d1c91-2045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:70:67:9f:fb:e6:88:c0:9a:ef:7f:28:44:
93:90:ec:b5:29:ab:28:b8:55:7a:19:80:ba:be:8e:
e6:97:b3:43:ae:d3:09:fb:e6:21:cd:15:bc:ef:5c:
95:b4:1c:39:e8:94:9d:47:b7:c9:85:ee:53:84:2d:
2f:9a:4c:06:b6:d5:73:67:53:65:69:61:b0:f2:d2:
4a:5d:9a:63:0b:4b:12:4f:24:34:08:16:ba:b0:b2:
b3:5b:2c:b8:50:df:a3:4d:83:20:26:c9:fd:f4:66:
c8:78:0e:1d:74:50:5d:17:f6:73:d4:ed:a1:e3:e2:
d2:e6:29:61:af:0e:71:0f:49:b6:8e:d4:70:74:e5:
c3:92:d7:a7:9d:bd:48:d4:a1:47:a5:cd:d8:e3:8a:
a0:2d:fb:12:7c:56:46:2d:c2:f6:a6:a8:0a:c1:4d:
40:a1:4b:aa:a5:6f:72:57:c5:db:99:27:0c:c3:34:
0c:81:71:c0:19:72:4e:28:a6:c6:77:96:0b:3c:38:
a2:af:6b:22:74:17:1b:f8:ea:4b:33:13:fa:d8:bf:
74:3d:ad:b8:7c:7e:3c:64:2a:91:48:89:7c:57:17:
39:c6:2a:f9:78:b6:7c:1d:ef:59:4b:9b:09:f8:3e:
5a:b4:48:80:ca:c3:0a:66:35:05:1e:90:bb:08:2e:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:62:5E:A5:6F:61:AB:86:00:E0:73:9A:C1:22:35:3D:5D:2D:9A
X509v3 Authority Key Identifier:
keyid:76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:65:94:30:3c:b7:b4:5b:ef:c9:51:65:f2:6b:40:8c:3b:
48:05:bb:24:72:93:05:af:84:15:0d:d8:52:0d:8c:2e:e9:b3:
4f:41:c5:d2:3b:ba:fa:e7:77:10:02:18:43:cf:ec:e4:df:11:
19:ed:5e:29:25:8d:4a:88:7f:60:78:71:b1:f5:a1:71:05:31:
60:19:71:67:85:e1:36:12:d1:ec:f8:8b:18:22:db:9d:7c:08:
78:df:a0:76:22:c3:de:d0:33:2a:60:08:b5:ed:f6:23:a8:85:
60:44:46:43:b0:5a:ef:e5:77:43:de:d4:fd:fb:1a:3c:5e:bd:
d5:d3:51:ab:2b:be:e7:6c:7f:34:2d:d1:81:55:93:8d:b6:37:
62:14:a4:78:e2:c0:d2:0d:00:5b:ea:ec:39:4a:81:2b:d0:04:
e2:63:14:c4:0e:46:7f:19:70:e6:dd:93:db:e1:95:9b:92:62:
80:75:da:40:f8:ce:7a:98:e0:72:ff:0f:bd:6c:df:7d:0b:68:
db:83:47:81:d4:c5:4b:e3:e5:f0:42:1b:9a:68:56:65:8b:7a:
12:17:95:ae:ff:b6:3f:a1:6c:de:68:ab:a4:b7:13:80:f6:d4:
de:e7:85:61:bc:0d:be:0b:b8:8c:76:c5:1a:c8:93:44:33:97:
e8:d6:b1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:40 2026 by rpki-client