
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
File: DHxNa-htVb5Ey0rZZmbBU1GT93I.mft (raw, json)
Hash identifier: 404veQsnH7JU8xnjZdAlP4Bx6XMGakn/gKwmHfcrQY0=
Subject key identifier: 0D:3F:41:36:71:31:BB:C8:38:2B:98:E7:53:2A:56:E2:3F:AA:3D:96
Authority key identifier: 0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
Certificate issuer: /CN=A9123CA4/serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Certificate serial: 0212
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
Manifest number: 020A
Signing time: Wed 19 Aug 2026 03:42:47 +0000
Manifest this update: Wed 19 Aug 2026 03:42:47 +0000
Manifest next update: Wed 26 Aug 2026 03:42:47 +0000
Files and hashes: 1: DHxNa-htVb5Ey0rZZmbBU1GT93I.crl (hash: PoUEx2lQ0s2XO9lQMkpn3pRnVsV18HogjEoWV+2JMmg=)
2: 300438B6C03511EFA42E9085C4F9AE02.roa (hash: bPTiYTxBxLwgfGF9jUdmUbDxjsKoq1F4YRnN4H89Q34=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 03:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123CA4, serialNumber=0C7C4D6BE86D55BE44CB4AD96666C1535193F772
Validity
Not Before: Aug 19 03:42:47 2026 GMT
Not After : Aug 26 03:42:47 2026 GMT
Subject: CN=6a852637-b322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:59:a2:98:81:7d:7f:6e:7f:bd:4a:57:67:
5b:c2:10:4f:b3:37:44:72:e8:5d:b1:49:f2:87:7d:
8b:fd:bf:5d:25:57:dc:01:11:69:ad:0f:9f:cd:10:
b5:89:c2:13:2a:4f:ce:08:3c:70:25:23:20:ab:2c:
8d:68:f7:9b:19:d8:cd:c0:89:36:1d:1a:9a:5e:3e:
9d:44:05:51:93:49:1f:77:0c:e8:74:62:f5:e6:c1:
95:51:00:4a:04:c1:6b:d6:05:2c:85:71:6b:43:23:
25:7d:35:e0:8b:53:c1:d9:17:36:50:98:8e:4e:19:
d9:8d:39:ce:b0:40:ac:f9:10:30:a3:0b:37:06:bc:
7d:5e:78:bd:7d:cd:4c:eb:e6:d5:4a:64:30:67:82:
9e:a6:23:ab:9a:33:94:27:a3:18:d2:99:dc:76:2e:
0c:b7:fa:cd:89:b4:b5:b3:55:4c:7e:fc:3e:ba:d2:
0c:14:2b:f8:02:93:42:a0:70:b0:e9:83:ef:b0:dc:
b3:0d:9b:02:51:4f:dd:ab:8d:32:11:6b:00:a2:ac:
59:d3:fc:57:73:c5:7e:aa:9d:1e:75:36:5b:7d:f1:
16:84:00:9f:aa:41:97:49:56:37:13:5a:ad:75:a9:
f1:90:55:69:e8:b1:3b:3f:2d:b4:08:38:74:4b:6d:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:41:36:71:31:BB:C8:38:2B:98:E7:53:2A:56:E2:3F:AA:3D:96
X509v3 Authority Key Identifier:
keyid:0C:7C:4D:6B:E8:6D:55:BE:44:CB:4A:D9:66:66:C1:53:51:93:F7:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHxNa-htVb5Ey0rZZmbBU1GT93I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123CA4/B7516B1089B611EE99512A6DC4F9AE02/DHxNa-htVb5Ey0rZZmbBU1GT93I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:72:82:87:d5:31:c9:d3:b8:b2:c5:5f:a2:be:ca:ad:5b:df:
a6:42:ce:39:6b:01:08:f7:ea:19:ac:c1:1e:77:f7:07:e8:40:
6a:b3:c6:bc:b6:9e:63:19:06:0e:f7:f8:90:bf:43:d2:70:08:
7a:37:e0:d6:f9:07:74:f7:68:90:16:74:a3:f6:83:db:cc:59:
e2:17:8e:ac:c4:57:d3:21:ba:df:a0:cc:fe:c1:76:c5:45:1c:
13:3b:90:bd:dd:ec:95:2a:10:2a:74:01:83:f5:2d:a5:48:8e:
c1:fa:f4:25:b5:ae:1f:89:16:31:a2:61:38:30:05:83:f6:8f:
e1:39:33:07:21:82:80:48:04:be:4c:8a:9c:72:7c:c8:eb:40:
02:fb:6d:3a:7e:8c:8e:21:ec:b2:59:24:4c:2f:68:05:46:49:
91:24:d7:41:70:31:d2:e4:a5:aa:ea:eb:d7:b8:75:83:a8:f9:
ed:bb:cf:b2:8a:37:22:26:75:57:43:99:c3:6a:03:fd:2c:81:
a2:36:99:34:60:44:2a:a5:a2:d1:5a:1b:c6:59:de:bc:3b:49:
45:7c:d4:27:79:cf:f0:11:ae:dc:56:ce:c2:bc:0d:f6:3b:e8:
bd:33:a3:a6:50:54:68:81:5d:34:2c:24:30:f9:25:35:67:a1:
f6:c1:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:07 2026 by rpki-client