
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: M6cHBDJt+7BfoY6RI6+r1UJQT2iHKWUODgsTw9z+HzM=
Subject key identifier: 86:E1:7A:E5:BC:41:35:32:7D:E6:76:B8:68:70:9C:6D:7B:3E:58:D4
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0EE9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0EDA
Signing time: Tue 28 Jul 2026 17:47:27 +0000
Manifest this update: Tue 28 Jul 2026 17:47:27 +0000
Manifest next update: Tue 04 Aug 2026 17:47:27 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: OyOW6WM2PUi1KXcZzI+18LNZ7qiOpR5mSbaa71L6/Ls=)
2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=)
3: AFAF715E4F6111F180E0E950C4833773.roa (hash: f1Qtrg6zMcuoal6t/eOY7kCkc2ldrxW+UAv8fqMIKbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 17:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3817 (0xee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Jul 28 17:47:27 2026 GMT
Not After : Aug 4 17:47:27 2026 GMT
Subject: CN=6a68eb2f-a0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:e7:8a:12:f1:68:f5:a0:fa:c2:d1:01:39:
aa:49:f2:2a:ee:0c:3b:17:30:93:96:1c:50:1f:8f:
4e:de:7a:c7:f8:0a:3e:a6:68:ff:3f:bf:8e:04:fd:
bf:c0:57:97:50:18:44:af:be:64:fa:63:e1:bb:de:
84:f1:6c:e5:56:7b:ae:e6:82:35:8a:23:37:70:e7:
ba:8d:80:0b:33:d8:76:89:38:aa:2a:0b:54:e6:7c:
4d:69:92:b2:59:2b:dd:63:05:58:cf:19:da:67:f2:
09:d8:d6:93:81:d3:01:e2:8f:08:90:b3:47:13:47:
91:00:c8:93:68:de:be:e4:fa:67:dc:2d:ff:90:52:
b3:f9:57:30:c9:8a:89:55:cb:c3:9b:3c:31:bc:8c:
ef:56:17:6f:78:c9:c1:b6:be:f0:1c:10:fe:4b:70:
b9:35:0e:fb:2f:d3:fa:ed:e1:f2:79:79:c8:96:ce:
95:35:db:a6:8c:54:4d:a1:b7:56:92:63:12:d4:ed:
a1:14:72:c0:99:c9:be:c3:88:80:6b:e6:fb:51:5b:
87:de:f7:58:ab:3d:7b:4e:3f:7c:96:13:bc:23:96:
25:2e:a9:83:94:42:ae:66:dd:f5:22:2a:bd:19:2c:
2c:5a:24:5c:46:73:ba:14:1e:28:79:23:d2:4c:8f:
d6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E1:7A:E5:BC:41:35:32:7D:E6:76:B8:68:70:9C:6D:7B:3E:58:D4
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:41:f3:4a:e6:5b:e0:15:9c:56:67:c9:50:0c:61:1f:31:7e:
33:87:8e:8f:9d:9c:94:33:49:92:8f:fb:11:b7:63:09:0e:eb:
6a:d9:33:60:52:e1:47:37:e7:b6:50:29:d6:fc:39:fe:52:a3:
3b:47:14:64:87:8e:e2:5b:f7:34:de:84:c7:36:17:47:6e:b5:
0a:31:06:fe:76:78:a6:bd:fc:be:68:d8:fe:b6:e1:34:84:92:
41:37:fd:c3:54:7d:ed:12:4b:30:68:5a:cb:c6:62:a1:b3:23:
9e:67:eb:1f:c9:42:a8:6f:b6:f6:3d:ad:47:a2:fe:2b:6e:72:
a6:23:76:e3:3c:cb:ca:76:06:08:5d:f7:30:2b:cb:b5:11:3c:
72:d6:b4:8e:40:29:45:0b:a9:d2:3f:bf:77:50:f7:a7:9a:ce:
7c:35:ff:33:54:a8:29:0d:1c:65:9b:5b:d8:dc:34:e4:37:d1:
ec:ba:2f:6e:ee:d0:95:88:27:51:6b:13:85:76:0d:3f:7a:41:
47:8a:a9:4a:ab:bb:7d:6e:1e:28:f7:e2:47:db:c2:3f:8a:e4:
01:46:da:28:b9:d3:48:d9:bf:ba:2c:04:40:77:8a:9a:af:93:
c3:05:64:1a:30:e2:76:4a:85:78:e2:1f:b0:01:e4:48:4e:7b:
ba:9f:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:17:35 2026 by rpki-client