
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
File: DtUqdvMcJCF0oq0ZSByVcDty4jY.mft (raw, json)
Hash identifier: NFO2Yo50w9YARasznKLGxojNSnDX6epvqLMyE5wodkY=
Subject key identifier: 7E:9B:B0:7C:97:8F:0E:EA:75:82:40:B5:AF:53:14:6D:34:A7:BB:4D
Authority key identifier: 0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
Certificate issuer: /CN=A91E33D7/serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Certificate serial: 0EDC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
Manifest number: 0ECD
Signing time: Thu 02 Jul 2026 17:47:51 +0000
Manifest this update: Thu 02 Jul 2026 17:47:51 +0000
Manifest next update: Thu 09 Jul 2026 17:47:51 +0000
Files and hashes: 1: DtUqdvMcJCF0oq0ZSByVcDty4jY.crl (hash: 34nEKxEo0rsOm0u1/1nBvQOQMlIvSXMo4fXsZzVg7P8=)
2: C26576D4F4ED11E9ACC51713C4F9AE02.roa (hash: +8+LmzfERPVvTvelw5uwc+I3y328jDcfohQEW7SsOnc=)
3: AFAF715E4F6111F180E0E950C4833773.roa (hash: f1Qtrg6zMcuoal6t/eOY7kCkc2ldrxW+UAv8fqMIKbE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 09 Jul 2026 17:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3804 (0xedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E33D7, serialNumber=0ED52A76F31C242174A2AD19481C95703B72E236
Validity
Not Before: Jul 2 17:47:51 2026 GMT
Not After : Jul 9 17:47:51 2026 GMT
Subject: CN=6a46a447-c3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:84:0e:e6:44:c7:c9:50:65:1a:ac:a7:c7:
f5:ba:b4:49:9e:ef:af:df:84:4d:01:c2:01:39:ce:
4a:7c:87:82:9b:02:ff:c5:45:1f:87:eb:70:bc:2e:
32:de:50:37:c2:7f:93:1d:c6:88:5b:d9:1c:77:a1:
6c:ce:1e:7d:36:fa:f0:7f:8f:c1:92:17:a6:09:53:
9a:ed:47:07:ba:e7:0e:fd:a7:28:5d:18:2f:50:2d:
32:8f:c5:65:25:e5:39:90:00:2f:f2:bb:0f:93:05:
d2:62:66:dd:85:6d:09:ae:03:5c:68:9b:63:5e:0e:
03:69:42:7f:29:63:06:df:a0:b7:36:c8:c5:ae:31:
bc:f3:ef:a6:6d:ac:36:b3:c7:d2:92:88:84:29:c8:
4e:ca:12:6e:26:1a:29:77:7b:7a:35:49:e5:37:c2:
54:19:0b:0a:10:9d:c0:a3:4e:b8:6f:23:71:ee:62:
d3:ab:be:2b:f1:b2:b0:f5:ce:7b:f0:9d:c3:4a:37:
b6:ef:d0:f5:f6:2a:00:ad:b6:c1:8b:5a:73:8a:1d:
04:3b:2d:ec:f2:e6:36:2f:5a:3e:c8:82:5a:a8:a9:
80:0f:4d:fc:82:3a:a2:63:f9:43:07:fc:d9:15:af:
05:1a:ac:3c:c2:92:a9:ef:5e:6b:67:65:77:62:07:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9B:B0:7C:97:8F:0E:EA:75:82:40:B5:AF:53:14:6D:34:A7:BB:4D
X509v3 Authority Key Identifier:
keyid:0E:D5:2A:76:F3:1C:24:21:74:A2:AD:19:48:1C:95:70:3B:72:E2:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DtUqdvMcJCF0oq0ZSByVcDty4jY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33D7/DC7D8864AEB011E98D08E13CC4F9AE02/DtUqdvMcJCF0oq0ZSByVcDty4jY.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:7c:c7:bb:56:b0:09:6e:e0:e9:34:eb:de:8c:1d:ae:4c:ea:
9a:ca:4d:ac:e8:05:8b:4b:c8:a4:7e:12:5d:7c:21:11:4a:b0:
2a:95:50:dc:d4:fd:f4:1a:35:1d:ef:05:22:c1:b8:74:c6:28:
8b:06:dc:4c:b5:a2:68:37:a7:dd:cd:9a:04:22:94:6f:d1:cc:
4c:51:34:11:13:dd:0b:9b:d6:db:bd:8f:0a:eb:44:c7:af:a8:
68:2f:38:dd:a6:d3:83:6e:af:c2:36:33:72:08:7d:0c:e9:b4:
f0:5a:5e:00:75:b1:51:ec:03:d5:ae:2a:a6:06:15:d8:5d:60:
f4:f5:1a:1e:df:d5:c9:35:8d:69:92:11:de:10:98:8a:dc:20:
e6:50:70:6f:1f:b4:0a:48:cd:86:84:b8:5a:92:c5:e0:dd:f5:
7e:50:d7:7a:1c:99:62:80:fc:76:d6:8b:f3:a5:8c:ea:10:ab:
da:56:71:12:0f:ec:06:ac:5c:3b:46:29:ba:42:9d:eb:24:9b:
d9:d7:06:b9:ab:6e:96:18:0f:ea:dc:01:86:ac:20:75:97:ce:
cc:6e:0c:29:a8:e0:55:30:1e:5b:9c:5a:f2:2c:df:d6:8b:11:
70:51:a8:0c:cb:a5:3e:ce:01:3a:f6:4c:29:01:44:00:28:11:
e1:b9:8d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 16:09:44 2026 by rpki-client