
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: l36zwKVNZ1EP2K3ZoL2kF/Q7hw8J3v+LrKm8HNjihUo=
Subject key identifier: F3:23:C4:F0:60:DC:9C:B9:FD:70:C0:83:A3:5F:6F:24:95:D7:37:05
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 0311
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 02D5
Signing time: Tue 27 Oct 2026 01:42:09 +0000
Manifest this update: Tue 27 Oct 2026 01:42:08 +0000
Manifest next update: Tue 03 Nov 2026 01:42:08 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: HDZOpyVoFF2DXh+waRe6JtPX9WSas8yzMPb7kIiiuMg=)
2: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Hox0f2DRIVuIK+ZDPSBwi8YFrSvd/HIMMzrpJToGzWQ=)
3: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: Kr94412hhcY/at18rjv0XA0pqE08XI59mHNHLnbdksc=)
4: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: ghST+vSBTxMdN+yzTKosvMAzRvP/vrilwEFegVUb+WY=)
5: 8A04741C68A311F19B45E58A7847A888.roa (hash: Zy0kCOinMyWSdMjqBbtvPvM9LDmL8Dbk2NJX54n4aWs=)
6: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: Wcf2vMzftWJtAn6zdPO2KOKSjFD6mFbi1Rf4pSx3lOY=)
7: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: HFcUvaW9KbLDg5i5OgcqMSY14LszjF0fYUXU/KjRNmo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 01:42:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 785 (0x311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Oct 27 01:42:08 2026 GMT
Not After : Nov 3 01:42:08 2026 GMT
Subject: CN=6ae00171-0084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:ae:c9:11:eb:38:02:1d:ed:46:a5:80:89:
c9:cd:9c:8c:34:28:9a:cf:52:fe:dd:80:3d:7d:fb:
90:2b:79:d5:20:09:1b:c2:36:a8:16:0c:7f:2a:72:
78:ae:62:ab:45:b6:cb:be:51:e8:a5:3f:f0:c0:55:
80:9a:c0:57:9a:bb:43:1d:ec:5d:f1:c3:58:12:a8:
c1:87:f2:18:d7:8b:fc:55:56:ca:6a:ff:f3:11:28:
6a:0d:a1:73:3c:97:1d:3b:66:ce:98:82:95:76:97:
79:05:f3:d7:15:d1:76:ac:6d:8a:45:31:28:3f:e8:
74:76:9f:21:11:20:24:53:d0:ac:58:2c:2e:55:61:
93:53:9c:79:07:c5:43:e6:00:77:73:33:93:78:03:
07:e9:34:be:d7:81:d5:7e:b8:01:57:ab:f9:fb:ec:
1f:a6:b8:71:58:45:ee:c0:37:1d:02:3c:c0:b0:a7:
ca:b6:eb:5e:87:f6:b4:8f:2d:b9:b1:80:0b:53:92:
7f:9e:d9:8c:10:c3:90:d5:dc:be:55:9c:8b:59:d0:
97:1f:c9:3c:36:ae:89:69:63:c6:85:4f:ac:72:d5:
99:51:7f:51:a0:d4:c0:8a:89:69:f2:ee:d0:1e:90:
80:2a:e2:03:35:a1:f2:34:c5:59:14:b1:90:42:78:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:23:C4:F0:60:DC:9C:B9:FD:70:C0:83:A3:5F:6F:24:95:D7:37:05
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:0c:84:79:3c:26:2c:02:31:ca:4c:00:d4:b7:57:07:3a:1f:
a7:9b:96:1c:ed:9e:11:39:45:de:6c:e6:06:0c:54:8f:0d:c9:
e4:2d:b7:e2:58:79:72:c3:b3:01:47:66:35:27:f1:85:65:d1:
56:38:61:b5:8a:54:c1:e8:96:ee:9f:24:4f:63:24:71:c8:8f:
1f:90:43:b4:93:fd:5e:94:74:14:59:ae:43:0e:ea:3e:f3:2f:
e5:3b:d3:eb:7c:01:21:3d:b6:3c:83:f0:ab:89:16:8e:35:9b:
69:b7:17:8d:93:e2:5f:ea:69:99:23:35:94:88:ab:bf:93:af:
d2:f7:2e:cf:8d:98:03:94:66:03:88:44:6e:05:ba:b9:0d:53:
e7:c3:fb:1f:75:d1:c4:f9:8b:7d:79:eb:d4:b7:31:c0:8e:a5:
cd:99:10:5a:ab:b9:10:51:3d:62:fc:b9:56:c9:44:9a:17:be:
9b:97:09:7f:18:86:61:02:03:cc:5a:51:7c:e8:b2:4c:fc:0b:
d6:9c:2e:5c:59:4d:42:42:95:90:43:7d:64:d6:0a:0c:5a:10:
88:01:df:8a:ae:4d:fc:cd:18:2d:58:f4:6a:e0:df:97:42:23:
20:32:f6:2d:cf:e3:b9:2a:75:df:70:ef:1f:57:b5:e6:6d:c8:
4d:03:62:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:24 2026 by rpki-client