
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: Ya/smU4H+Uko31p0DpyxJyIzTeJr1kFRjn35J6vaC3o=
Subject key identifier: 44:6A:4C:EA:7F:05:4B:90:53:F1:F8:40:94:9E:E3:97:62:30:AF:E4
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 02F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 02BA
Signing time: Mon 07 Sep 2026 01:35:04 +0000
Manifest this update: Mon 07 Sep 2026 01:35:03 +0000
Manifest next update: Mon 14 Sep 2026 01:35:03 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: 2iyJ9cGAmK2XBZynPXUJWPtm3MDMznc6pEMRn+aurB8=)
2: 8A04741C68A311F19B45E58A7847A888.roa (hash: 5V4OEah4mKyaGcX20wD1WmEBPoGeOJlAllUfd1W2fB8=)
3: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: 2aqoL9qe8tIo9qlQGinuDss/0nrnNaVd49bC6qwXz1M=)
4: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: lCUoUv+f43f2WVQxLTt9/x7joh+RYHOTSuRXDeNCXQ8=)
5: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Gdu+/km9OM7ctxIRapvlJ9L445WBOrHYSmYqVRl94Tk=)
6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: OhRPWyMKqFduA9uJzaW+9hsoRlZdED+15N0UsPHGwsQ=)
7: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: gPmOaoN+l9WJ/rTZGr8yHo6MmYAS6GPMF/52rd8LuYY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 14 Sep 2026 01:35:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 752 (0x2f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Sep 7 01:35:03 2026 GMT
Not After : Sep 14 01:35:03 2026 GMT
Subject: CN=6a9e14c8-82f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:8c:67:a4:54:59:fa:31:16:cb:0a:fd:ac:
31:4e:46:7f:1a:eb:6b:0a:db:f8:c4:33:b7:95:84:
58:dc:34:a6:fd:99:1c:8c:22:52:ba:5d:0c:d7:2d:
a9:d2:44:21:51:26:48:31:5b:55:d2:dd:bd:b6:86:
89:11:85:63:be:97:e1:3e:c1:d8:0f:84:4c:23:20:
fe:eb:c6:50:d9:a9:96:5d:e4:1a:06:ec:64:31:b6:
b0:a7:36:03:c6:38:06:30:df:f0:5e:36:d8:01:99:
b0:c0:04:85:9d:1d:4e:6a:f6:58:77:48:d8:f6:da:
e1:3f:ef:1f:73:df:0a:f9:7e:dd:fd:bf:23:19:16:
fd:ec:b1:ac:74:ab:56:10:9d:68:0d:03:60:61:3a:
76:af:6d:0a:3c:a5:3c:74:51:eb:98:fa:f2:5a:8f:
da:48:59:5d:2c:e7:11:36:bc:ac:48:45:53:83:bd:
b6:f5:70:ee:5c:2b:4c:a8:72:32:91:c1:60:5e:e9:
bb:2b:16:ac:21:8a:bf:8a:2b:e8:d1:db:4e:7a:da:
ab:53:5e:c7:7a:6f:59:38:28:26:f0:7d:65:8a:47:
66:ff:90:72:cb:fb:35:8d:16:d4:df:2f:ee:5e:9f:
93:12:8d:d4:ae:45:40:b4:94:ee:90:f5:3d:9f:d9:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6A:4C:EA:7F:05:4B:90:53:F1:F8:40:94:9E:E3:97:62:30:AF:E4
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:1f:5d:cf:1d:15:93:7f:d5:bd:e0:22:35:6e:f9:49:d8:
db:ac:a1:2c:c6:4e:52:d4:43:c2:66:f7:5c:c6:ed:64:8e:cc:
74:1e:e0:ec:3d:a5:10:b0:58:2d:c1:89:a2:da:d4:27:01:ba:
43:56:e1:18:ac:09:04:ef:eb:3f:6a:7d:68:c9:6d:dc:e1:5f:
dd:68:d4:75:7f:11:2e:8d:4b:77:23:f0:f6:26:f6:a6:1f:39:
0a:fe:d0:2c:26:5b:cb:8c:35:28:00:80:55:0c:f4:3a:50:5a:
0a:7e:d4:e3:3d:62:e2:fc:6d:02:32:10:1d:12:f0:7e:4c:74:
2f:0e:4e:c5:2f:4f:e6:dd:fd:32:ea:21:b2:71:db:ca:84:dd:
25:ea:65:85:00:fb:1a:b9:7e:42:cc:8f:63:9f:09:87:da:af:
ab:a8:7e:55:62:de:44:ce:ee:5b:9c:c6:a3:3c:ea:13:e2:69:
3a:3e:8c:c2:ef:63:ff:55:8a:63:6a:70:dd:2f:70:b6:3b:4e:
b5:f2:ac:6c:e0:07:e9:53:bc:a0:9b:d7:3c:dd:55:be:e4:43:
cc:21:05:34:27:2f:5e:84:e0:4b:81:00:c9:1e:03:4a:d2:e0:
87:68:95:19:e7:5b:58:87:98:1d:4b:a5:0c:12:04:88:73:dc:
97:e6:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 01:11:26 2026 by rpki-client