
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: qSbBnM7n/2XMyVd1wkkfwqCrscouoAtFILzBate/JCs=
Subject key identifier: 6F:2F:52:5C:70:CF:DF:50:53:FD:41:BF:20:DD:5A:D1:CB:8E:9E:83
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 02D9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 02A3
Signing time: Sat 25 Jul 2026 03:09:48 +0000
Manifest this update: Sat 25 Jul 2026 03:09:48 +0000
Manifest next update: Sat 01 Aug 2026 03:09:48 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: c4czDZ21xjojsvsBqYOwxyQUuygO2iM65OiEfy5o5D0=)
2: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: gPmOaoN+l9WJ/rTZGr8yHo6MmYAS6GPMF/52rd8LuYY=)
3: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: OhRPWyMKqFduA9uJzaW+9hsoRlZdED+15N0UsPHGwsQ=)
4: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: 2aqoL9qe8tIo9qlQGinuDss/0nrnNaVd49bC6qwXz1M=)
5: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Gdu+/km9OM7ctxIRapvlJ9L445WBOrHYSmYqVRl94Tk=)
6: 8A04741C68A311F19B45E58A7847A888.roa (hash: 5V4OEah4mKyaGcX20wD1WmEBPoGeOJlAllUfd1W2fB8=)
7: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: lCUoUv+f43f2WVQxLTt9/x7joh+RYHOTSuRXDeNCXQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 01 Aug 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 729 (0x2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Jul 25 03:09:48 2026 GMT
Not After : Aug 1 03:09:48 2026 GMT
Subject: CN=6a6428fc-c17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:dc:03:ee:1b:ab:ff:89:e0:71:2a:81:01:
04:74:d6:0b:03:ba:fc:33:49:af:65:f6:2d:48:e2:
51:4f:17:aa:bf:b1:e7:11:86:63:1e:92:d5:55:f5:
35:1c:50:c7:56:7c:5a:12:73:0c:f1:1a:24:bb:93:
d0:08:7d:77:32:55:16:7e:12:81:57:52:ec:5c:d8:
68:bc:90:53:33:e0:db:9b:8d:c9:2e:da:19:71:11:
84:85:1e:5a:ce:3e:1b:1e:3f:6a:45:8a:c5:ce:66:
7c:c7:b4:33:7d:e1:0f:07:b2:d5:e4:7b:1b:c4:b6:
b0:0e:4e:2f:3b:48:dd:2a:30:de:2b:8e:58:3d:e6:
ed:1a:0c:f3:5d:70:fc:3f:df:05:09:5c:45:25:1c:
12:4e:1c:a3:c6:18:b0:96:35:fb:ba:b1:8e:13:20:
06:f7:6d:18:97:a2:dc:46:6f:9e:a5:b6:59:28:52:
9f:5c:72:06:38:80:d2:26:2b:7d:5d:bf:9c:9b:8b:
89:75:d6:df:e9:67:07:3d:ba:d8:fb:0d:49:20:8d:
69:b7:64:cd:78:5b:32:38:bd:8c:1d:89:aa:d8:a3:
2a:68:e0:4c:ff:bb:ab:c2:80:a7:47:49:48:c6:46:
93:44:16:cf:2d:0c:ee:ee:fc:8e:00:57:c2:2e:60:
50:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2F:52:5C:70:CF:DF:50:53:FD:41:BF:20:DD:5A:D1:CB:8E:9E:83
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:80:f4:8a:15:de:e9:bf:39:8b:7f:c9:1d:46:34:ee:78:5f:
2b:47:12:3b:36:2b:16:39:c7:08:61:0e:71:65:39:46:27:f1:
d5:33:2f:6f:6e:22:99:05:46:b1:f6:91:d6:45:92:87:95:a7:
d2:8e:95:9d:32:52:f5:c6:88:c1:0f:a9:7e:a2:52:56:dc:5c:
d9:19:25:62:b2:22:1e:29:4a:e0:26:df:32:e1:69:99:c3:24:
ac:ab:0a:02:81:9a:4d:e9:8f:ed:6a:49:53:94:62:91:b1:74:
6b:15:d9:ee:1a:89:89:c2:04:d1:c3:10:57:b7:34:4f:03:fc:
bb:e1:e5:7c:e6:2c:6a:8e:ed:0e:9b:cf:85:94:98:2d:d8:03:
20:a9:ec:29:ac:35:81:a1:3f:cd:a2:9d:46:e3:eb:7d:fe:fd:
e9:59:45:ee:49:5e:75:6a:a7:f3:11:99:a9:ec:04:e6:af:6c:
e9:e0:53:fa:47:34:5a:82:c8:07:7a:79:54:37:0d:74:f3:38:
99:14:07:fd:c2:69:bd:38:f7:62:b5:ee:96:13:9e:d7:7d:7a:
00:b1:5e:c5:6f:57:25:c4:2e:20:21:79:9b:7a:18:12:e0:02:
72:52:bd:3e:3c:df:0a:96:ad:71:38:5c:58:2a:73:b9:b1:ab:
73:ef:8e:8a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1
MUI5Nzc3RkEwHhcNMjYwNzI1MDMwOTQ4WhcNMjYwODAxMDMwOTQ4WjAYMRYwFAYD
VQQDEw02YTY0MjhmYy1jMTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp1PcA+4bq/+J4HEqgQEEdNYLA7r8M0mvZfYtSOJRTxeqv7HnEYZjHpLVVfU1
HFDHVnxaEnMM8Roku5PQCH13MlUWfhKBV1LsXNhovJBTM+Dbm43JLtoZcRGEhR5a
zj4bHj9qRYrFzmZ8x7QzfeEPB7LV5HsbxLawDk4vO0jdKjDeK45YPebtGgzzXXD8
P98FCVxFJRwSThyjxhiwljX7urGOEyAG920Yl6LcRm+epbZZKFKfXHIGOIDSJit9
Xb+cm4uJddbf6WcHPbrY+w1JII1pt2TNeFsyOL2MHYmq2KMqaOBM/7urwoCnR0lI
xkaTRBbPLQzu7vyOAFfCLmBQNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8vUlxw
z99QU/1BvyDdWtHLjp6DMB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF
MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo
WlFOaWxENXRfdmxSdVhkX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALoD0ihXe6b85i3/JHUY07nhfK0cSOzYrFjnHCGEOcWU5Rifx1TMvb24imQVG
sfaR1kWSh5Wn0o6VnTJS9caIwQ+pfqJSVtxc2RklYrIiHilK4CbfMuFpmcMkrKsK
AoGaTemP7WpJU5RikbF0axXZ7hqJicIE0cMQV7c0TwP8u+HlfOYsao7tDpvPhZSY
LdgDIKnsKaw1gaE/zaKdRuPrff796VlF7kledWqn8xGZqewE5q9s6eBT+kc0WoLI
B3p5VDcNdPM4mRQH/cJpvTj3YrXulhOe1316ALFexW9XJcQuICF5m3oYEuACclK9
PjzfCpatcThcWCpzubGrc++Oig==
-----END CERTIFICATE-----
Generated at Sat Jul 25 08:32:41 2026 by rpki-client