
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: uue4qOdwm0sni40hoviFpJVnCse5uOo4VDZvRxe3Cpk=
Subject key identifier: 3F:A4:4B:A8:BA:9B:C1:82:90:61:44:28:49:27:3C:76:66:5F:2B:D1
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0996
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 0929
Signing time: Sun 26 Jul 2026 21:08:42 +0000
Manifest this update: Sun 26 Jul 2026 21:08:42 +0000
Manifest next update: Sun 02 Aug 2026 21:08:42 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: OlNcXV0HHr1CoeLa0sK2/tYGc4NNp5Y8tQ5pAjSldIE=)
2: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: sqAvHqn4hHDZ/JC7867u96QUTmYkEWTJy8qukHimNso=)
3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: sWtpHi+KcoLaI/4doCj7r6NxoDBWWhUZmIdc3W8LnsQ=)
4: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: SAYeJIBkz/kzzoo/WzZOB1S2IsHRqyLqdtZQYsw3u4I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 02 Aug 2026 21:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2454 (0x996)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Jul 26 21:08:42 2026 GMT
Not After : Aug 2 21:08:42 2026 GMT
Subject: CN=6a66775a-a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:6d:6c:d4:aa:a2:e2:5b:fd:39:76:62:0c:
46:20:88:2a:7b:6e:1d:94:ed:d0:04:31:ae:38:cd:
28:21:3b:3a:64:1f:59:b0:eb:51:04:d8:94:df:de:
3e:58:ca:73:1b:f7:55:78:0a:2b:06:82:74:b4:75:
04:48:7a:d8:eb:3b:62:5a:3c:4b:04:34:5f:c9:bb:
ee:06:3a:32:37:b8:55:29:0c:88:d3:80:ab:2e:8b:
d7:c9:24:a0:cf:f3:b4:7a:69:ea:ab:54:f9:67:7d:
85:de:e8:e0:8b:d5:04:17:d7:33:7d:fc:77:14:29:
84:01:29:92:ed:75:42:ad:61:e0:b1:6b:a2:5f:5f:
8a:51:5d:58:9c:b2:7b:4b:7c:bc:aa:ce:da:6f:47:
f1:7a:4d:d0:d7:b0:f5:6a:bc:dd:e2:e7:08:6b:bd:
38:8a:7a:13:bb:a2:0b:14:16:14:5b:d3:b3:59:0a:
23:a5:f2:bb:c5:21:e5:83:35:24:0e:42:4f:11:8a:
41:f1:17:22:be:9e:e0:b0:0f:79:61:bb:8b:e0:93:
4c:6e:22:a9:de:49:9b:18:9c:d9:75:ca:c1:e8:4d:
37:8f:7f:d4:77:12:84:3c:45:98:d2:50:da:35:f8:
3c:33:23:85:0c:7e:3b:78:b3:95:c2:74:02:cb:4c:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A4:4B:A8:BA:9B:C1:82:90:61:44:28:49:27:3C:76:66:5F:2B:D1
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:b2:37:86:03:04:57:0f:96:f8:bd:7b:bc:61:da:58:93:59:
9e:2f:2d:59:d0:60:84:81:51:09:47:24:8d:e7:d3:9c:2f:fd:
0f:68:26:65:d6:68:31:cb:96:40:f8:ef:48:98:e6:30:19:3d:
df:e8:85:4c:ef:ef:c2:f5:83:3b:5e:fe:b8:e9:c6:e7:0a:74:
fa:2b:0a:6f:24:72:78:f1:29:60:13:17:39:00:8e:cb:d1:8c:
ca:9f:8e:ae:99:de:62:2f:c4:40:6c:b2:19:7d:85:17:a6:79:
38:c5:1e:9c:00:b0:a2:91:c5:85:be:dc:fa:cc:a7:5e:25:4e:
99:17:56:6f:ce:2b:51:88:56:83:42:fd:6d:fb:b9:df:83:7f:
09:3c:a5:73:c0:e2:be:6a:88:28:96:67:aa:8c:b1:33:52:63:
50:3d:90:40:52:9f:3b:24:22:de:de:ea:2c:a8:d1:06:17:53:
63:54:44:73:5a:53:53:5e:00:61:31:ad:3e:2b:bd:48:8a:b9:
4e:ca:ed:52:ab:e8:0a:d0:1f:44:46:a5:5a:9d:9b:d0:d5:95:
5e:4a:e3:7f:8b:2a:5b:b2:90:1b:ef:74:5c:24:90:77:08:1b:
45:ab:f0:a1:73:12:e6:2c:9f:31:93:ad:94:08:65:d6:bb:a3:
e2:74:61:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx
MDY2MDkwQTcwHhcNMjYwNzI2MjEwODQyWhcNMjYwODAyMjEwODQyWjAYMRYwFAYD
VQQDEw02YTY2Nzc1YS1hM2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlRtbNSqouJb/Tl2YgxGIIgqe24dlO3QBDGuOM0oITs6ZB9ZsOtRBNiU394+
WMpzG/dVeAorBoJ0tHUESHrY6ztiWjxLBDRfybvuBjoyN7hVKQyI04CrLovXySSg
z/O0emnqq1T5Z32F3ujgi9UEF9czffx3FCmEASmS7XVCrWHgsWuiX1+KUV1YnLJ7
S3y8qs7ab0fxek3Q17D1arzd4ucIa704inoTu6ILFBYUW9OzWQojpfK7xSHlgzUk
DkJPEYpB8Rcivp7gsA95YbuL4JNMbiKp3kmbGJzZdcrB6E03j3/UdxKEPEWY0lDa
Nfg8MyOFDH47eLOVwnQCy0xIDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+kS6i6
m8GCkGFEKEknPHZmXyvRMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy
N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTE5Ny84NEIyRUM5OEYyN0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBr
dTJ4WmVURnVWSWtRWmdrS2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAA7I3hgMEVw+W+L17vGHaWJNZni8tWdBghIFRCUckjefTnC/9D2gmZdZoMcuW
QPjvSJjmMBk93+iFTO/vwvWDO17+uOnG5wp0+isKbyRyePEpYBMXOQCOy9GMyp+O
rpneYi/EQGyyGX2FF6Z5OMUenACwopHFhb7c+synXiVOmRdWb84rUYhWg0L9bfu5
34N/CTylc8DivmqIKJZnqoyxM1JjUD2QQFKfOyQi3t7qLKjRBhdTY1REc1pTU14A
YTGtPiu9SIq5TsrtUqvoCtAfREalWp2b0NWVXkrjf4sqW7KQG+90XCSQdwgbRavw
oXMS5iyfMZOtlAhl1ruj4nRhTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 03:16:09 2026 by rpki-client