
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json)
Hash identifier: AIRN9E8Q+1IOHEG44e9l9MUHAaJqxJfZQfFt0Bg/9Nc=
Subject key identifier: A0:23:C8:5A:CE:E5:E8:E2:AE:E0:F7:5B:95:B3:F1:C9:AD:B5:AB:CB
Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Certificate serial: 0813
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
Manifest number: 0801
Signing time: Mon 02 Mar 2026 20:58:08 +0000
Manifest this update: Mon 02 Mar 2026 20:58:07 +0000
Manifest next update: Mon 09 Mar 2026 20:58:07 +0000
Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: nqvCzMYSmIbnNGxYsOwW1fRnxPu3XoUtnISXVBh36pY=)
2: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: RyCT9Kfh39JgpB62lsPr7X3rrbBLW034nB14BsTheqA=)
3: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: 6fP6rDBHclh/0NOHkluOXt1a6fQZ2ulzPfQPIbkh2Ik=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 20:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2067 (0x813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358
Validity
Not Before: Mar 2 20:58:07 2026 GMT
Not After : Mar 9 20:58:07 2026 GMT
Subject: CN=69a5f9df-cbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:e5:e8:c6:87:a9:ea:65:a2:7a:a6:09:27:
70:fe:cd:13:a0:ad:82:d3:5d:9c:40:29:b3:e2:81:
75:e3:42:91:3a:e8:55:62:6c:71:04:55:fb:a3:7b:
77:be:43:ce:5e:f0:e3:65:3a:ec:e8:80:cc:c1:80:
0f:03:71:c6:d1:a8:21:f8:86:da:4b:da:4f:3b:8f:
bd:73:8e:74:7a:a1:2c:57:0e:35:c9:e2:a2:19:41:
66:64:44:f1:93:9c:a4:df:b1:7c:3a:04:77:01:a4:
9f:aa:f1:c9:43:6b:33:21:59:76:37:16:da:eb:b1:
ed:69:4b:9e:92:4d:e1:7a:a0:f2:d6:37:59:c3:c9:
6c:a7:fa:c2:da:4d:a7:8a:b8:d2:cb:b7:29:99:67:
62:28:f1:09:61:63:bc:dc:b6:f2:7f:55:1d:ec:e8:
c3:b2:b3:6b:e7:0c:2c:4e:9c:1f:12:57:31:f2:ec:
47:cc:7d:29:a4:bd:46:69:2a:96:2a:3c:5a:4f:17:
ca:12:4e:50:d9:1b:4d:5d:d3:ad:fe:57:24:94:c3:
64:c6:ac:48:4c:f8:32:2d:9d:4a:28:ba:a4:ca:3c:
16:30:5d:66:5c:7f:f5:e0:d8:94:72:4f:95:ab:81:
53:4a:89:93:3d:c8:20:e5:22:1f:a5:f6:1e:df:c6:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:C8:5A:CE:E5:E8:E2:AE:E0:F7:5B:95:B3:F1:C9:AD:B5:AB:CB
X509v3 Authority Key Identifier:
keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:51:a1:b0:fe:e6:06:54:46:84:f4:94:ae:4a:2e:fd:f7:75:
00:3c:b9:05:36:3c:7a:9d:9b:e1:e1:79:db:ca:cd:aa:1b:ac:
dc:dc:fa:21:b9:f3:12:a2:89:3f:2a:85:9b:42:82:ce:10:29:
9c:35:bb:f0:29:4b:f8:28:05:a6:7b:85:96:f4:f7:95:da:97:
2d:bc:cc:b4:ba:87:ef:3c:ed:63:5f:2d:6e:6e:a8:68:17:8c:
52:a5:04:fb:9d:d5:0d:5d:48:14:54:4f:7e:ea:4c:f0:05:37:
bc:40:9b:47:c3:d8:1d:eb:85:e9:d9:27:1f:72:36:bd:7a:a0:
00:5e:d1:03:bb:f9:e6:b3:84:7f:97:9d:b5:e9:13:61:70:f0:
2f:c1:9a:75:af:d3:17:8c:56:77:62:68:5b:4a:f7:6f:e9:30:
b4:09:82:79:86:2b:86:e5:ce:1d:92:48:b1:37:cb:a8:0d:46:
93:04:a0:a7:8a:7b:e2:3e:a6:5f:91:c1:6c:28:a7:12:b3:56:
64:c5:a0:89:f8:f1:de:46:f4:ac:d9:b7:3c:c8:0d:17:1b:71:
d6:f9:53:46:66:28:3b:34:3c:17:71:99:ab:f9:cb:27:8b:08:
f6:22:fc:b3:38:21:1d:f6:b5:1f:d4:94:00:af:07:5b:5d:0e:
f3:bf:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 08:38:33 2026 by rpki-client