
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
File: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft (raw, json)
Hash identifier: lNdFxY60AfVZ//tCp9TjnY1kT/m27yg8+EPuNMmVJHE=
Subject key identifier: DC:C8:80:E7:7C:A0:13:58:71:03:AB:FC:7F:79:D0:B6:2E:53:10:AA
Authority key identifier: 76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
Certificate issuer: /CN=A914C651/serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Certificate serial: 01FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
Manifest number: 01EB
Signing time: Sat 19 Sep 2026 03:34:03 +0000
Manifest this update: Sat 19 Sep 2026 03:34:02 +0000
Manifest next update: Sat 26 Sep 2026 03:34:02 +0000
Files and hashes: 1: dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl (hash: Kl9O5gq2505+0FL1UOmsM7U0WTAX9nv5qS4nlef5vak=)
2: 1577D3D4CEED11EEAD68A169C4F9AE02.roa (hash: AQI2bwJCuqKXIuSLIUCmPdyM40gof3FT5HfSxWUNveA=)
3: E6BD4CAECEEC11EEB0E9E665C4F9AE02.roa (hash: nqdMcW1cqYt2/q2Bt8CB/e8QcYBAYu8tfj1XxULchaE=)
4: 3DC76C6280F411F18C41EDA965A30FBC.roa (hash: 0oeZmq/i87Ga6txSFdxJgRIePyIHiVNn2wV3/lW+EFA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C651, serialNumber=76D6FA7CF9BF8E415F2F42619B804288763E67A2
Validity
Not Before: Sep 19 03:34:02 2026 GMT
Not After : Sep 26 03:34:02 2026 GMT
Subject: CN=6aae02aa-60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ac:15:b3:48:0a:88:df:17:03:20:8b:6a:30:
59:e1:53:59:e6:7f:66:96:df:f2:12:6e:d6:da:16:
22:2f:86:3b:89:0a:da:26:3d:8e:83:0b:58:30:8a:
9a:d5:00:1e:cd:98:0f:6c:55:ef:cf:24:0d:0f:79:
97:d8:58:6c:a5:74:60:a9:ff:38:bd:90:8a:b3:3d:
66:f8:fc:78:0e:e4:9b:93:a0:45:80:16:cf:ba:97:
9f:70:9e:ac:ba:77:3d:80:6f:93:99:d4:13:d2:3d:
e5:cc:b8:ba:3e:b2:d0:37:9e:70:50:9b:fc:d9:a3:
1e:72:bd:a3:f0:e6:84:75:98:67:29:1e:73:9c:e0:
91:c5:cd:0c:72:4d:78:03:b9:72:b4:c3:9e:da:2c:
a6:a2:8f:aa:c8:01:60:54:b9:26:ac:27:ca:82:20:
6a:fb:89:85:ac:a4:d6:7b:91:47:6f:f1:55:bf:a8:
36:54:cd:55:8f:a1:3b:68:b8:1c:3c:13:2d:d4:54:
0a:92:0d:19:42:59:fe:a2:c9:ae:3d:57:c1:5f:a1:
f5:35:27:2f:b9:3e:df:47:5e:6e:f3:7c:cc:eb:2c:
d4:9b:f5:3e:09:2a:6a:26:40:98:ac:b6:de:b9:de:
87:c0:54:ac:2c:d6:e7:e3:88:8f:32:48:fa:9f:05:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C8:80:E7:7C:A0:13:58:71:03:AB:FC:7F:79:D0:B6:2E:53:10:AA
X509v3 Authority Key Identifier:
keyid:76:D6:FA:7C:F9:BF:8E:41:5F:2F:42:61:9B:80:42:88:76:3E:67:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C651/334F68C8CEEC11EEAE03306CC4F9AE02/dtb6fPm_jkFfL0Jhm4BCiHY-Z6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:75:9a:6c:25:f2:e9:73:6e:7c:da:30:ab:8f:01:18:c4:0b:
7e:ef:2f:8d:5d:7b:60:0a:40:63:99:8d:89:29:28:97:1b:7f:
3a:cd:d3:b2:9d:da:5a:66:08:c6:03:df:51:99:04:0f:b6:a7:
1b:1a:c4:2c:de:6b:36:ed:83:62:82:4b:91:69:a7:21:22:c2:
e5:59:de:fa:41:3f:c7:ab:11:6d:b7:39:d5:b0:87:10:1d:f4:
53:37:15:48:6a:c9:26:fc:dd:0a:07:8f:3a:3d:33:b3:bc:bc:
7d:6d:1c:a8:ae:d0:56:04:24:28:6e:b4:19:5b:a0:c0:a9:c6:
17:f9:34:5c:00:65:71:ea:ec:71:25:0f:fa:9f:e1:97:77:8e:
49:ea:04:fc:92:ee:08:8f:fa:ec:a2:ea:6b:17:32:4b:b8:08:
96:9d:3d:c3:00:69:0b:07:01:7d:ae:40:66:23:12:b7:21:89:
58:44:6d:29:56:3b:04:f0:fa:a0:0f:8c:95:79:cb:ee:6a:88:
27:2f:6e:c1:ef:2d:d8:50:ed:d1:0c:f5:fa:c1:46:07:f9:95:
3f:6c:b0:be:df:0b:3a:9c:53:8f:c9:7b:34:37:79:26:04:a8:
40:ab:a8:14:af:56:4a:d0:f2:4c:f8:40:23:b2:ff:f8:09:a0:
ae:a2:e1:f4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM2NTExMTAvBgNVBAUTKDc2RDZGQTdDRjlCRjhFNDE1RjJGNDI2MTlCODA0Mjg4
NzYzRTY3QTIwHhcNMjYwOTE5MDMzNDAyWhcNMjYwOTI2MDMzNDAyWjAYMRYwFAYD
VQQDEw02YWFlMDJhYS02MGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoqwVs0gKiN8XAyCLajBZ4VNZ5n9mlt/yEm7W2hYiL4Y7iQraJj2OgwtYMIqa
1QAezZgPbFXvzyQND3mX2FhspXRgqf84vZCKsz1m+Px4DuSbk6BFgBbPupefcJ6s
unc9gG+TmdQT0j3lzLi6PrLQN55wUJv82aMecr2j8OaEdZhnKR5znOCRxc0Mck14
A7lytMOe2iymoo+qyAFgVLkmrCfKgiBq+4mFrKTWe5FHb/FVv6g2VM1Vj6E7aLgc
PBMt1FQKkg0ZQln+osmuPVfBX6H1NScvuT7fR15u83zM6yzUm/U+CSpqJkCYrLbe
ud6HwFSsLNbn44iPMkj6nwXFvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzIgOd8
oBNYcQOr/H950LYuUxCqMB8GA1UdIwQYMBaAFHbW+nz5v45BXy9CYZuAQoh2Pmei
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzY1MS8zMzRGNjhDOENF
RUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2prRmZMMEpobTRCQ2lIWS1a
NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R0YjZmUG1famtGZkwwSmhtNEJDaUhZLVo2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzY1MS8zMzRGNjhDOENFRUMxMUVFQUUwMzMwNkNDNEY5QUUwMi9kdGI2ZlBtX2pr
RmZMMEpobTRCQ2lIWS1aNkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAgnWabCXy6XNufNowq48BGMQLfu8vjV17YApAY5mNiSkolxt/Os3Tsp3aWmYI
xgPfUZkED7anGxrELN5rNu2DYoJLkWmnISLC5Vne+kE/x6sRbbc51bCHEB30UzcV
SGrJJvzdCgePOj0zs7y8fW0cqK7QVgQkKG60GVugwKnGF/k0XABlcerscSUP+p/h
l3eOSeoE/JLuCI/67KLqaxcyS7gIlp09wwBpCwcBfa5AZiMStyGJWERtKVY7BPD6
oA+MlXnL7mqIJy9uwe8t2FDt0Qz1+sFGB/mVP2ywvt8LOpxTj8l7NDd5JgSoQKuo
FK9WStDyTPhAI7L/+AmgrqLh9A==
-----END CERTIFICATE-----
Generated at Sun Sep 20 03:19:10 2026 by rpki-client