
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
File: DYxttID--Lv1xosdQ5bdhfWTwUY.mft (raw, json)
Hash identifier: XZqmnvjIiUqNxzloObb25Ekks/921fafTtA+55V5GOw=
Subject key identifier: CD:A4:08:30:83:E8:B7:4D:D3:A5:5D:07:99:F3:4E:4A:11:B2:78:42
Authority key identifier: 0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
Certificate issuer: /CN=A9150A44/serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Certificate serial: 1240
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
Manifest number: 1233
Signing time: Fri 04 Sep 2026 17:05:11 +0000
Manifest this update: Fri 04 Sep 2026 17:05:11 +0000
Manifest next update: Fri 11 Sep 2026 17:05:11 +0000
Files and hashes: 1: DYxttID--Lv1xosdQ5bdhfWTwUY.crl (hash: lNd+UA+l8VcwSBhET35XQokJUqqO53Q9vZop9y8OMTM=)
2: 9F3D07940A3D11E9A4A5D873C4F9AE02.roa (hash: CBq8LWgrgXC9mO0SUvr0TrX8pn6h91JP7Wdayc/HFqk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4672 (0x1240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9150A44, serialNumber=0D8C6DB480FEF8BBF5C68B1D4396DD85F593C146
Validity
Not Before: Sep 4 17:05:11 2026 GMT
Not After : Sep 11 17:05:11 2026 GMT
Subject: CN=6a9afa47-764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:86:04:c3:66:79:00:df:fd:ac:e9:c7:ed:
82:2b:ec:5e:b6:5a:eb:11:a3:9f:21:f6:96:1d:08:
a7:8a:ac:3c:0b:9c:ee:d2:22:0d:a6:be:3c:d6:f3:
2e:53:c2:ad:e8:d9:d7:f5:5a:62:85:e2:a1:1e:7c:
aa:37:af:57:89:0b:92:32:bb:63:77:99:8f:a6:09:
63:64:b4:74:0b:76:a1:55:16:ea:f6:9a:1a:78:2c:
47:f8:4e:3b:c3:0d:7f:06:5b:26:be:cc:44:1c:36:
c4:08:56:bd:12:df:e4:38:e2:b0:40:72:0b:15:02:
75:73:06:ff:85:30:05:92:3d:07:e8:31:f8:4e:f2:
de:d4:39:f3:81:c9:4d:2d:e1:1e:ee:2a:9f:7b:dc:
b7:d4:73:5c:c7:f2:be:af:5b:8e:8a:f5:e8:2b:95:
17:6d:bf:d3:a4:74:d8:3f:b8:09:c6:ab:87:0c:dd:
45:07:67:23:e8:0c:56:b1:c5:1e:74:9c:1c:7b:08:
f1:76:c6:b9:d9:c7:3e:be:54:34:66:b4:dc:aa:75:
0d:eb:db:e5:79:83:22:aa:20:bc:7b:05:c9:09:59:
57:39:76:06:60:56:25:ca:d8:7c:6f:ae:70:a4:d9:
18:dc:f6:d5:e3:bf:3f:23:ca:14:6d:a2:15:67:7a:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A4:08:30:83:E8:B7:4D:D3:A5:5D:07:99:F3:4E:4A:11:B2:78:42
X509v3 Authority Key Identifier:
keyid:0D:8C:6D:B4:80:FE:F8:BB:F5:C6:8B:1D:43:96:DD:85:F5:93:C1:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYxttID--Lv1xosdQ5bdhfWTwUY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150A44/739775CE0A3411E98EE8715EC4F9AE02/DYxttID--Lv1xosdQ5bdhfWTwUY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:ae:ea:c0:e9:bd:33:1c:6e:07:74:e2:6f:02:0e:39:1f:15:
70:82:a7:f0:54:93:47:f7:a4:fb:77:9f:d2:62:1b:1d:b2:05:
9e:8b:29:c1:98:52:fe:db:32:91:c0:9a:49:f8:c3:33:ce:f2:
a6:59:a6:84:6f:e0:14:3e:1a:ee:ee:00:d5:27:68:82:12:60:
71:5d:6b:6c:98:bc:a7:cb:c9:2a:58:b5:fb:a7:f1:21:3c:2b:
54:cc:85:48:ba:52:c9:d3:c5:56:db:b2:a0:91:73:96:0d:5e:
40:8b:33:6e:59:1b:8e:a4:a7:ca:6b:06:9b:18:34:64:0a:35:
0a:6b:82:2d:c1:09:d5:e9:35:4a:c4:cc:d6:6a:32:6a:3d:20:
5f:88:47:33:7b:b9:55:e1:e4:33:34:19:32:b7:64:62:54:0b:
ec:1a:bb:4e:9a:5a:aa:1f:1a:9f:01:bc:3b:18:e2:0b:7a:50:
84:c5:8f:7d:af:67:af:60:40:57:59:80:93:21:59:ac:b6:fb:
45:37:c6:89:8d:b9:08:dc:0c:7d:a8:18:ff:41:aa:09:4a:4f:
76:f3:60:c1:df:e4:da:87:e7:63:f2:7b:44:18:6a:cb:e7:03:
0d:72:df:37:bc:79:59:97:bc:bf:f4:be:ba:91:99:71:88:1e:
48:33:1e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:01:55 2026 by rpki-client