
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
File: dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json)
Hash identifier: wWHkS968OsoXUPxeNf5vp7UIVAKdV/XezjlGSjLTQI0=
Subject key identifier: 94:E2:6C:39:4B:B7:EF:32:78:FA:BA:26:06:9F:9D:6E:8F:58:42:53
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Certificate issuer: /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial: 0233
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
Manifest number: 0229
Signing time: Sat 13 Jun 2026 02:42:02 +0000
Manifest this update: Sat 13 Jun 2026 02:42:02 +0000
Manifest next update: Sat 20 Jun 2026 02:42:02 +0000
Files and hashes: 1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: JUkc7B5I1vpGu/W4Sq8RA/BNspc4frRAd9utfAiHtO4=)
2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: LOVQf/LdRjlXMFrzIgrgv8KlqIFzre3Qe7jhRSJb4JQ=)
3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: xb0+uYgRF2Qsu64pqIvTIsaUIoIoJYA9r/GFBorr/Cw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:42:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 563 (0x233)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Validity
Not Before: Jun 13 02:42:02 2026 GMT
Not After : Jun 20 02:42:02 2026 GMT
Subject: CN=6a2cc37a-02a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:f4:f0:74:b0:31:70:33:84:e8:70:24:ca:
7f:41:77:f8:8f:87:ae:fd:be:30:4a:d5:f4:1b:ac:
01:6b:b2:37:88:49:a2:1f:4b:8b:94:01:af:20:b6:
0d:2e:84:cb:f3:52:a1:63:9e:94:9c:96:c7:c6:4c:
84:3d:25:8a:4e:be:76:27:1b:bd:db:92:3f:60:8e:
4c:ef:dc:7e:17:ac:d4:70:de:7b:56:ef:f4:83:c4:
4b:8a:a8:fb:23:e1:5f:11:b0:a3:b6:1c:3a:4f:38:
3f:c6:76:4c:3b:b3:e0:53:c7:16:2d:88:ba:4b:e3:
08:44:60:c3:db:84:b1:1f:e5:9d:80:7d:34:a2:0c:
a8:d0:44:58:e8:8a:ad:bf:b9:f1:f8:f8:3b:0c:42:
8b:1a:95:d4:5f:fd:b4:a8:88:1b:1c:2d:9b:ef:88:
e1:69:51:9e:a9:96:ef:85:06:f9:85:13:db:14:71:
12:db:1e:21:ff:e1:08:05:03:b7:01:dd:68:1d:f7:
0e:7b:c4:6a:82:0e:f8:f9:ca:4d:34:36:61:67:84:
45:f5:19:36:8a:20:30:23:5d:68:bc:37:bd:33:66:
03:13:d8:b2:4c:d8:04:e8:69:66:25:cc:5a:52:99:
80:5a:77:dd:54:96:d3:70:9a:a4:15:d5:de:b1:9d:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:6C:39:4B:B7:EF:32:78:FA:BA:26:06:9F:9D:6E:8F:58:42:53
X509v3 Authority Key Identifier:
keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:0b:39:fa:5d:fe:7c:91:09:c3:e9:15:d6:72:4a:18:0c:b5:
f9:2a:2c:4b:56:ec:fd:92:77:09:f0:36:8c:90:f7:7c:59:26:
81:aa:41:3c:68:6b:3d:93:ca:fe:31:e6:a9:47:ec:78:99:48:
55:d2:4f:6f:b6:6a:b1:d6:09:10:a7:01:87:31:d7:4a:a2:8d:
ff:78:2d:4d:dd:95:38:38:f2:fc:d4:22:d0:3e:93:75:4c:1a:
6c:92:35:ec:04:5b:7c:9c:85:19:bc:ea:09:84:34:dd:b4:3e:
7e:c0:4f:48:f2:00:0a:77:26:ae:2f:ab:13:39:d7:59:e1:61:
72:21:4c:7e:b3:d4:a0:63:6a:91:2a:46:7c:a1:44:81:63:3e:
cc:ff:3e:30:be:5d:1c:71:19:c8:88:04:95:1d:de:7d:52:57:
4d:87:08:16:7c:af:71:4e:9b:8a:52:d5:e3:62:36:a2:79:03:
73:e7:4f:42:01:45:1a:b6:3a:f3:9d:f6:79:72:8b:c0:d5:1f:
cf:0a:7b:a6:4e:80:87:e2:49:4d:d8:55:79:1c:6b:ae:95:5c:
2c:1f:37:60:ef:bb:1e:49:64:ea:ab:38:5d:b5:69:34:87:64:
15:1e:e5:30:ac:5c:a4:00:51:ee:06:f0:f9:32:77:2f:44:62:
08:ea:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:00 2026 by rpki-client