
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: P7IBRhXmH+vqGkFsc21K1S8CrTJhOkinkvHIQ4+VI+o=
Subject key identifier: 7C:33:8A:33:98:7A:74:B0:2B:D2:1A:E9:63:8A:20:22:BA:90:56:60
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 09D2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 0960
Signing time: Mon 26 Oct 2026 20:26:02 +0000
Manifest this update: Mon 26 Oct 2026 20:26:01 +0000
Manifest next update: Mon 02 Nov 2026 20:26:01 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: NnaN5wvM+uicUcByhWA6mXA2rrBi5ErkrfIJvKBvKUw=)
2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: NBQabKoJ61OdWD6yytnri78eV79GGqtVtjZrPzmt/5c=)
3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: sqAvHqn4hHDZ/JC7867u96QUTmYkEWTJy8qukHimNso=)
4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: nJBtKbmjIDObVhJplk88U8/szQXpOrygsZiu6IEmPV0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 20:26:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2514 (0x9d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Oct 26 20:26:01 2026 GMT
Not After : Nov 2 20:26:01 2026 GMT
Subject: CN=6adfb75a-0a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:c5:83:61:61:d6:0d:01:81:e0:1e:10:45:
cd:29:86:dd:21:97:6e:08:ba:22:68:48:33:49:0d:
57:d6:0c:e6:84:26:a8:c8:64:70:c9:73:0a:61:56:
ae:aa:1b:9d:39:3b:f7:43:f4:57:45:16:05:b0:6c:
6c:e6:f8:4a:8d:71:01:4d:29:0f:58:fe:78:00:d3:
49:34:44:6b:de:1b:7d:40:35:e6:fe:29:bf:20:79:
b1:61:cd:6f:4e:ee:2d:4f:a2:cb:2d:d4:8a:b3:c8:
11:e3:56:8c:e0:0e:33:22:6d:de:18:95:3f:00:1b:
e1:d5:8c:b8:bd:b9:9b:9c:0e:fe:37:e0:6e:f2:a9:
e8:19:f5:ab:b5:8d:3a:f1:8b:89:c9:57:ac:a7:7b:
1f:90:5a:89:af:4f:84:e6:8f:cc:0d:e9:92:4b:63:
22:b9:af:95:76:ff:af:21:a4:7f:f6:b6:f9:06:dd:
57:37:54:fa:f7:fe:b5:f3:93:e2:00:8d:3c:26:b3:
bf:80:9b:ea:5e:0b:dd:61:9e:63:d3:17:a5:ca:05:
ed:d6:53:23:81:7e:a3:79:2b:0f:2c:e0:74:a7:1b:
86:2c:06:fb:e0:99:83:ce:99:78:46:b0:60:e5:a5:
f7:64:d0:7d:80:a7:cd:6d:e7:c5:e8:f8:d9:c9:18:
bd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:33:8A:33:98:7A:74:B0:2B:D2:1A:E9:63:8A:20:22:BA:90:56:60
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2e:96:be:12:76:74:1f:0a:da:f8:2a:97:18:b8:bf:a9:e7:
bb:99:37:f7:e8:3e:93:fc:22:16:66:29:8c:35:6d:15:92:93:
aa:30:bd:01:04:5b:88:28:35:2e:11:6e:c4:41:af:3b:49:ea:
b6:6e:85:67:c5:f8:17:6c:62:7e:08:92:61:4a:31:d5:c2:b0:
79:0f:35:ad:84:98:bb:14:88:2b:51:cc:7f:1e:d7:56:20:62:
eb:8b:ca:70:a0:09:0d:a2:fe:dd:30:71:1d:9d:d1:9f:a2:18:
ee:48:65:ff:06:7a:d6:be:e3:1c:bd:ec:c9:9f:22:97:68:3b:
f7:12:dc:79:48:f7:fe:12:03:1f:14:d3:ee:e9:37:80:8d:98:
5c:b6:f3:28:37:9d:a3:da:f2:ed:57:d0:ca:d8:26:a3:3e:03:
b4:f7:c4:c1:fa:03:b3:22:7f:70:99:ce:a6:cf:e8:94:a2:f3:
8b:8b:74:b0:57:cc:90:8c:50:76:b5:7d:1a:9f:e1:e7:a8:8a:
1d:ea:fc:f2:0e:7f:d0:07:6b:6e:1c:58:e5:7d:f5:e9:89:15:
7e:6d:d2:7a:b7:4d:30:e1:c5:a9:eb:e9:7d:20:cb:1d:0d:14:
f7:b9:a7:41:10:6c:34:04:a6:1d:3a:5c:84:d9:a7:fb:b8:54:
23:04:1c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:49:45 2026 by rpki-client