
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
File: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft (raw, json)
Hash identifier: MssevLLqlRXm+LR5T/Iwp8mXrwJNJj0h4Wd7eNB3tJ8=
Subject key identifier: 37:FF:4C:29:CE:BC:6D:A7:FE:2D:86:35:F9:BB:29:6B:42:82:A5:AF
Authority key identifier: E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
Certificate issuer: /CN=A91A2FF9/serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Certificate serial: 59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
Manifest number: 58
Signing time: Sat 17 Oct 2026 08:55:15 +0000
Manifest this update: Sat 17 Oct 2026 08:55:14 +0000
Manifest next update: Sat 24 Oct 2026 08:55:14 +0000
Files and hashes: 1: 4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl (hash: AlifML6Q6Owp1V3cVZGOtr+D/8RgvQR2v01F/UojejY=)
2: D898F57242DC11F1862EFB92CB833773.roa (hash: NhBu2Z3OF4VzcUnX2RhgJnVsv8Gh1MRdgOtdbwjJcZw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl
rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 24 Oct 2026 08:55:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A2FF9, serialNumber=E2DE9A4134BA2FC42AD4A93C3A298ED361BF0CF1
Validity
Not Before: Oct 17 08:55:14 2026 GMT
Not After : Oct 24 08:55:14 2026 GMT
Subject: CN=6ad337f3-4341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:73:c5:34:36:2d:3e:b1:ad:8b:fa:18:3c:
3b:63:f9:9e:5d:46:04:23:87:46:db:1a:ad:bd:18:
c3:69:3f:4c:f3:9b:32:cd:fd:ea:cb:79:06:2c:2c:
f2:34:56:a2:80:c7:72:c4:63:1f:d1:be:e8:36:07:
21:2f:6c:51:7b:cb:e2:43:1c:33:33:e6:b4:e0:2c:
d6:91:c6:86:be:a5:7a:5c:8d:3f:78:1d:be:d4:d6:
c1:8c:42:62:13:83:ee:26:cd:a1:93:5f:79:99:5f:
04:e7:a5:55:9c:14:ec:75:2c:aa:0e:09:01:e7:49:
4c:af:46:9b:38:2e:73:33:9a:38:1d:10:aa:ec:20:
64:cc:25:27:37:16:3e:92:e2:b4:55:a7:99:71:c3:
53:6b:6f:bd:45:ed:e2:40:5d:4c:49:3b:a2:5d:72:
f2:47:6d:c9:1d:9f:e8:be:f0:7d:78:31:36:19:e4:
51:29:9f:0e:20:07:ff:c7:68:a2:4c:ee:54:3c:1f:
e6:a5:38:1a:b0:a9:e0:30:bb:c6:4e:8e:dd:8d:fb:
c1:35:86:76:fa:ff:36:55:79:d5:de:ea:0e:e3:d1:
e9:38:ea:d8:f3:7f:2e:c5:6e:e5:b0:87:cc:d8:56:
b8:b4:b2:8f:67:2e:2f:68:72:ee:8d:cb:46:d1:88:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:4C:29:CE:BC:6D:A7:FE:2D:86:35:F9:BB:29:6B:42:82:A5:AF
X509v3 Authority Key Identifier:
keyid:E2:DE:9A:41:34:BA:2F:C4:2A:D4:A9:3C:3A:29:8E:D3:61:BF:0C:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4t6aQTS6L8Qq1Kk8OimO02G_DPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/80F6C1AA42DC11F1A82C4355CB833773/4t6aQTS6L8Qq1Kk8OimO02G_DPE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:12:51:c8:30:05:c1:c2:ea:2f:e2:ab:71:5b:75:78:fe:97:
98:8a:98:b3:c5:4d:24:73:eb:a1:fb:1a:f2:f5:8b:b6:34:cb:
74:b2:6c:17:8f:e3:75:f9:f2:5d:2e:17:50:ab:60:34:20:43:
47:69:81:98:3e:1f:2f:6b:4a:f1:66:ea:25:85:7d:0c:2f:e3:
d9:29:fd:d8:bf:21:de:de:3b:6d:b4:85:96:9b:63:e6:64:e9:
ee:71:3f:ee:ac:e7:23:dd:03:bf:97:7a:2a:77:0f:a3:a0:9f:
0f:50:ad:75:4c:4d:09:56:fb:a0:ea:bb:5c:d5:56:4d:e4:68:
25:81:8b:de:e7:b2:62:fe:57:a4:3c:41:59:1f:a8:b5:02:42:
aa:6a:3f:70:ae:9e:4f:9e:56:7e:04:94:ea:57:d5:d5:b4:8f:
ea:21:04:fa:4c:e4:10:98:e3:fc:0b:74:3a:1f:89:dd:d0:a8:
d1:bf:b0:ee:b4:d1:ca:7f:ca:ff:8c:87:4b:46:23:d1:5d:27:
a6:37:a0:77:dd:a9:31:04:b6:26:d4:9e:5b:51:96:69:ea:5c:
db:5f:2b:d8:a3:5b:e2:87:f6:bf:df:df:a9:79:4a:a7:11:6f:
23:78:18:c6:52:23:a4:ff:e6:15:df:f6:71:52:e9:01:3c:fd:
6d:53:b8:b2
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB
MkZGOTExMC8GA1UEBRMoRTJERTlBNDEzNEJBMkZDNDJBRDRBOTNDM0EyOThFRDM2
MUJGMENGMTAeFw0yNjEwMTcwODU1MTRaFw0yNjEwMjQwODU1MTRaMBgxFjAUBgNV
BAMTDTZhZDMzN2YzLTQzNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/cXPFNDYtPrGti/oYPDtj+Z5dRgQjh0bbGq29GMNpP0zzmzLN/erLeQYsLPI0
VqKAx3LEYx/Rvug2ByEvbFF7y+JDHDMz5rTgLNaRxoa+pXpcjT94Hb7U1sGMQmIT
g+4mzaGTX3mZXwTnpVWcFOx1LKoOCQHnSUyvRps4LnMzmjgdEKrsIGTMJSc3Fj6S
4rRVp5lxw1Nrb71F7eJAXUxJO6JdcvJHbckdn+i+8H14MTYZ5FEpnw4gB//HaKJM
7lQ8H+alOBqwqeAwu8ZOjt2N+8E1hnb6/zZVedXe6g7j0ek46tjzfy7FbuWwh8zY
Vri0so9nLi9ocu6Ny0bRiLO9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN/9MKc68
baf+LYY1+bspa0KCpa8wHwYDVR0jBBgwFoAU4t6aQTS6L8Qq1Kk8OimO02G/DPEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRkY5LzgwRjZDMUFBNDJE
QzExRjFBODJDNDM1NUNCODMzNzczLzR0NmFRVFM2TDhRcTFLazhPaW1PMDJHX0RQ
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNHQ2YVFUUzZMOFFxMUtrOE9pbU8wMkdfRFBFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy
RkY5LzgwRjZDMUFBNDJEQzExRjFBODJDNDM1NUNCODMzNzczLzR0NmFRVFM2TDhR
cTFLazhPaW1PMDJHX0RQRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQA0ElHIMAXBwuov4qtxW3V4/peYipizxU0kc+uh+xry9Yu2NMt0smwXj+N1+fJd
LhdQq2A0IENHaYGYPh8va0rxZuolhX0ML+PZKf3YvyHe3jtttIWWm2PmZOnucT/u
rOcj3QO/l3oqdw+joJ8PUK11TE0JVvug6rtc1VZN5GglgYve57Ji/lekPEFZH6i1
AkKqaj9wrp5PnlZ+BJTqV9XVtI/qIQT6TOQQmOP8C3Q6H4nd0KjRv7DutNHKf8r/
jIdLRiPRXSemN6B33akxBLYm1J5bUZZp6lzbXyvYo1vih/a/39+peUqnEW8jeBjG
UiOk/+YV3/ZxUukBPP1tU7iy
-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:25 2026 by rpki-client