
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
File: DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft (raw, json)
Hash identifier: tZNOWZjERaQDJ6XUxHDq+lTQKf4rXfkba/nBUjBDqjY=
Subject key identifier: 0A:9C:42:C3:DC:E3:C6:7E:BB:3B:FB:E9:86:BE:70:C8:20:1B:23:BE
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Certificate issuer: /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial: 0899
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
Manifest number: 088D
Signing time: Sat 10 Oct 2026 20:50:07 +0000
Manifest this update: Sat 10 Oct 2026 20:50:06 +0000
Manifest next update: Sat 17 Oct 2026 20:50:06 +0000
Files and hashes: 1: DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl (hash: /mS8wY2rI7K3ySiqrOBUp14UjXF0wgJQwsdAjVUeEZY=)
2: CC26BAE6895E11F08FE3390FC4F9AE02.roa (hash: gMWeQiLTy0ha5JRkRDRAzKIPkA2Mg4zoy04sliHlLwQ=)
3: AD27F510895E11F0AF42FE0EC4F9AE02.roa (hash: JM03PRnYpRFkohzYbnLnI1USKOzvkdZpcJ9fV4bxujM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 20:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2201 (0x899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Validity
Not Before: Oct 10 20:50:06 2026 GMT
Not After : Oct 17 20:50:06 2026 GMT
Subject: CN=6acaa4ff-2c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:43:2a:42:1c:94:7e:ef:52:ae:a6:a7:44:
d4:c8:64:c2:18:45:94:2c:60:c6:5f:25:e1:40:21:
b1:53:db:f7:e9:61:94:af:9a:97:68:8c:22:a3:9d:
8d:7c:72:12:fe:f6:41:0d:60:4c:25:1f:1f:c7:c9:
6a:e3:0e:dc:93:98:28:df:10:8b:4c:3e:a8:d3:89:
af:07:34:c6:f9:2a:14:a3:15:d9:76:33:18:b3:53:
4e:3c:9f:a8:e0:b0:33:84:9d:09:60:59:8d:7f:5d:
27:dd:df:5a:e1:ed:55:ff:af:36:c1:34:94:32:c7:
a1:61:33:3d:2a:fe:77:ae:57:c9:f1:1d:6e:ba:35:
13:ef:77:a0:19:ac:c5:01:7f:f2:2e:aa:d4:e3:70:
1d:99:32:3e:df:d5:ee:d7:43:53:ec:5b:c3:6a:67:
3d:44:c7:ce:30:51:13:bb:05:04:1d:fd:a1:e0:6a:
d9:4a:5c:61:43:5c:97:d0:77:05:2f:94:09:1e:59:
7b:e0:43:ae:7a:de:ca:1f:fa:14:09:33:cc:73:20:
7c:43:1e:c1:86:5b:f3:2a:64:42:c6:27:90:dd:0d:
16:48:f7:fb:a0:90:89:83:38:9e:e9:91:1f:ce:43:
4b:a5:ed:d5:83:65:1c:c2:3d:87:c0:08:0c:0d:22:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9C:42:C3:DC:E3:C6:7E:BB:3B:FB:E9:86:BE:70:C8:20:1B:23:BE
X509v3 Authority Key Identifier:
keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f5:12:2c:d3:0e:3b:c9:b0:55:d5:91:18:40:77:38:d2:65:
71:c9:ed:8c:8d:24:1e:7c:57:62:13:1f:b5:29:57:78:5c:36:
4b:7a:b2:80:ba:b5:0f:c5:b4:c5:bb:e7:2f:55:0d:2b:11:c4:
cd:0d:27:e6:5a:5f:a3:f8:3c:ff:97:37:61:24:12:c3:7a:a1:
1f:a4:75:39:f8:f8:b3:60:ea:3a:74:1c:03:04:7e:e5:1e:df:
fe:e1:da:af:cb:fb:d8:1c:e4:cd:4f:fa:fd:aa:1a:5e:17:e7:
70:50:6f:24:c1:f4:14:86:16:8a:4c:18:46:14:0f:0e:89:74:
fd:7e:fe:21:fb:67:f1:73:da:a5:63:7a:f6:19:dd:9b:df:ad:
cb:a4:b8:8b:43:a1:22:c8:d2:79:76:8d:8e:52:ab:8a:8c:5b:
22:a9:09:2e:e1:cd:ec:0f:f0:9e:30:74:ec:67:4f:3c:05:44:
31:3b:07:3c:52:da:32:87:95:0a:36:76:e9:80:ff:77:b2:b3:
49:51:53:88:ac:ff:10:9f:48:46:9a:27:dd:cd:5d:bc:14:c7:
56:5e:8b:eb:dd:9c:74:e3:1e:5a:9b:ec:ca:2f:6e:22:54:0b:
1b:bb:59:db:66:75:4a:5c:b1:76:2a:fa:83:cb:85:44:ef:97:
3f:77:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:19:55 2026 by rpki-client