
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json)
Hash identifier: H8U69PexeZsPms6lwFDaALkU9JiZxHG4DXNGt1nmy3o=
Subject key identifier: A0:18:41:F7:5F:01:6B:F7:1C:E3:7C:BF:ED:8E:67:C2:BD:ED:B1:6D
Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Certificate serial: 3599
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
Manifest number: 3541
Signing time: Thu 12 Mar 2026 14:49:25 +0000
Manifest this update: Thu 12 Mar 2026 14:49:25 +0000
Manifest next update: Thu 19 Mar 2026 14:49:25 +0000
Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: foe6LLKY/PjOaDRpXYlIjUxTl8RTr5GXKl1G5DD+r5o=)
2: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=)
3: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=)
4: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=)
5: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=)
6: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=)
7: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 14:49:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13721 (0x3599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C
Validity
Not Before: Mar 12 14:49:25 2026 GMT
Not After : Mar 19 14:49:25 2026 GMT
Subject: CN=69b2d275-72ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:fc:50:d8:62:85:90:75:d8:4c:7c:18:00:
c9:b0:46:a3:89:71:f3:9a:24:27:8d:1b:95:09:e2:
f7:7a:b2:ce:d6:bc:5a:4a:d0:3f:a8:a5:88:4c:2d:
69:4b:63:31:26:db:79:46:bc:45:aa:4b:26:ed:64:
38:af:2b:b5:cf:29:58:6f:8e:d9:62:05:17:58:eb:
4b:15:e8:8f:1f:b6:21:bc:d8:e9:72:4a:f7:9c:8a:
a5:f7:80:71:0c:4b:07:9d:6c:1a:a6:01:4c:9f:75:
58:94:17:b1:4c:bd:f9:ce:c5:85:99:c6:9c:94:16:
77:c3:f8:76:87:53:b0:7c:1f:13:49:c4:be:e7:03:
6b:66:ec:12:1f:db:65:91:c2:72:c3:40:a6:17:6b:
21:0f:1f:e0:0f:bb:49:f9:18:6c:cf:ee:58:ee:c4:
df:5a:26:ec:6b:a0:eb:85:58:06:0f:a4:3c:29:4e:
fb:ca:6a:3d:46:68:8a:b2:4d:0f:0d:fa:ac:ef:4f:
6d:c9:7b:d6:1c:40:3a:b7:84:c5:3b:ae:f0:38:ef:
d8:94:60:85:17:5a:ca:67:b6:34:bd:89:de:14:50:
15:fb:02:5b:fa:d4:a3:4b:14:8d:17:87:c6:44:87:
0e:d1:f9:85:50:e4:47:40:62:3f:40:df:0f:bb:a3:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:41:F7:5F:01:6B:F7:1C:E3:7C:BF:ED:8E:67:C2:BD:ED:B1:6D
X509v3 Authority Key Identifier:
keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:73:f3:d4:5e:56:86:c9:a6:c2:e2:b7:31:65:ad:e5:a0:be:
db:1a:4e:07:74:ee:19:d0:f8:97:b3:b4:8b:27:de:98:b0:d1:
3a:76:28:15:1e:cd:3e:8e:47:c8:20:59:03:4f:fd:b7:fc:57:
0c:08:4f:15:8e:48:98:11:38:90:06:55:d5:96:18:a0:a4:e8:
2d:0a:39:42:27:eb:95:6b:a8:79:32:74:2f:a0:75:03:19:b3:
ad:9a:3c:6d:b0:86:ae:37:bb:38:b0:e0:91:33:23:8d:e7:97:
8a:c3:ab:a6:b0:d6:f6:82:9a:8d:ef:2a:39:12:87:ce:39:14:
1d:04:2f:1e:3b:39:d2:b6:bf:0a:9a:b4:98:fe:4a:dc:b8:53:
a9:88:75:dd:fa:f6:10:d5:13:2a:16:c2:44:fa:bc:ab:12:b0:
85:76:c8:77:75:cf:ef:54:0d:a5:db:70:36:36:0e:25:d4:68:
86:3d:0f:3f:15:43:aa:52:71:16:ad:72:e5:08:06:00:14:96:
3f:54:e1:6d:b0:98:d4:84:93:d8:db:d8:1e:02:d5:5e:af:60:
7a:fb:de:af:06:7a:25:46:3e:0b:59:df:84:6e:e5:f5:4e:40:
d2:e8:df:c7:49:03:3d:9d:bd:49:f3:25:50:f0:9c:ba:76:b1:
3f:07:69:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:28:36 2026 by rpki-client