
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
File: dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft (raw, json)
Hash identifier: boYH9l5iJfHc+6S9A31BHvpQYB2bHqD/c4W/sYXhIkM=
Subject key identifier: B7:BE:D6:81:4B:03:47:A7:63:07:10:51:F6:F8:1A:11:66:97:35:88
Authority key identifier: 76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
Certificate issuer: /CN=A91D4DC1/serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Certificate serial: 060E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
Manifest number: 0609
Signing time: Sat 28 Feb 2026 23:25:33 +0000
Manifest this update: Sat 28 Feb 2026 23:25:33 +0000
Manifest next update: Sat 07 Mar 2026 23:25:33 +0000
Files and hashes: 1: dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl (hash: GXr3hRWF16j0yLQ+BgVBxKPF3fFaP/CFXCIZSVk2xAo=)
2: B5A7B020DBDB11EB8EC1494EC4F9AE02.roa (hash: pYihusS4UyoIsK9PCzKPk27dDaihl6ZYHFqiCUhf6Dc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 23:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4DC1, serialNumber=76DF7F91169A3F380C0A6BCD38E9186DEFF31BAB
Validity
Not Before: Feb 28 23:25:33 2026 GMT
Not After : Mar 7 23:25:33 2026 GMT
Subject: CN=69a3796d-9967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:56:ad:cf:2d:10:af:51:a3:98:ff:a0:44:e1:
cd:b0:6e:e0:44:d6:1f:bd:4c:92:41:69:44:64:2e:
3f:86:bc:f1:22:6a:21:00:84:a1:6e:30:4c:74:97:
84:e6:1c:4c:db:bf:75:47:7a:20:36:3b:aa:73:c1:
66:24:8f:22:43:f5:5a:74:39:68:c2:d3:11:e3:fb:
7a:08:c8:45:73:74:00:e0:81:24:33:96:18:0b:03:
a9:0a:e0:58:a1:d1:30:91:bd:fd:a8:6c:84:c6:25:
06:e7:35:9d:f7:8e:b6:3b:81:71:10:46:3b:e3:03:
f3:1d:7b:cb:df:95:f6:5f:4a:6e:ec:57:f5:04:32:
a8:0b:76:24:cf:85:e5:d0:ba:f9:c8:c2:b3:db:74:
4d:88:23:28:e6:76:55:16:3a:4b:76:0c:6a:60:c6:
8a:35:f5:0b:7d:eb:5a:c5:22:fe:e2:75:06:ef:dc:
07:ba:90:d1:92:ab:17:4f:f8:08:b9:f2:df:95:f9:
98:38:d9:24:73:8b:e7:81:35:62:9b:16:46:0a:0f:
b3:a0:e4:97:be:14:6f:ca:cd:2a:26:17:ad:86:c1:
c0:b6:a1:eb:40:22:da:ee:32:d4:6a:f8:64:f6:a6:
a5:33:b5:a4:de:9b:20:e9:40:b7:5a:f2:23:7c:a8:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:D6:81:4B:03:47:A7:63:07:10:51:F6:F8:1A:11:66:97:35:88
X509v3 Authority Key Identifier:
keyid:76:DF:7F:91:16:9A:3F:38:0C:0A:6B:CD:38:E9:18:6D:EF:F3:1B:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dt9_kRaaPzgMCmvNOOkYbe_zG6s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4DC1/996F98EADBD711EBB9511745C4F9AE02/dt9_kRaaPzgMCmvNOOkYbe_zG6s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c7:5c:2e:40:17:c8:93:90:ca:13:d9:39:da:63:36:59:f6:
e5:a5:17:7d:4f:c6:63:86:55:45:da:29:a9:45:e0:d0:29:f2:
54:59:cf:ed:6a:0b:97:9c:a7:06:b1:f9:4f:46:49:1e:08:05:
00:c5:bd:41:f9:3a:0b:bf:46:f4:77:a6:19:a1:0e:16:1c:66:
95:5d:6e:ce:e5:aa:31:46:98:1f:83:c4:9f:32:49:00:79:dc:
70:8e:d5:5b:0e:61:0a:06:90:b2:e8:df:02:3e:4c:d8:f1:1d:
4d:59:51:f8:09:77:f5:3c:d4:6d:7c:f9:d3:57:16:e7:2c:cf:
c7:14:ba:63:09:87:21:b9:78:6b:ea:01:36:2f:00:a4:d3:53:
91:83:69:71:24:b3:5b:57:99:7a:2a:91:79:94:29:0f:f7:64:
91:b9:13:5b:b9:81:a1:f8:a3:50:1f:fc:53:d3:29:d9:c3:78:
a4:d3:3d:a8:ba:72:aa:3d:b9:69:90:04:f3:1d:96:88:78:60:
d2:03:6d:78:b3:0b:62:74:17:48:18:b0:c5:76:c2:ee:96:a5:
a5:27:23:be:06:83:69:69:70:c8:77:e0:cd:43:8a:19:06:1c:
e2:e1:20:ca:e1:63:b6:03:99:6b:2a:fe:32:90:5f:61:d7:36:
52:4a:d3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:19 2026 by rpki-client