
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: JHhjlOFrjydtpo6aRmeFjGN+mMhcl5R8ksX8qzjV0rk=
Subject key identifier: 42:AA:B2:3A:B2:1A:D0:3B:C5:70:55:AC:8B:31:DC:A9:F6:AA:92:28
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0943
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 08DE
Signing time: Sat 14 Mar 2026 20:17:05 +0000
Manifest this update: Sat 14 Mar 2026 20:17:04 +0000
Manifest next update: Sat 21 Mar 2026 20:17:04 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: OpFGF0flFitWkhZh35vbs6WVppooZPvY6iITPDXTAg8=)
2: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: MfBYIfef5q6axAJciYZD+YSWEevAKozoCGz/YdfVQD8=)
3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: Uo8Q/y2S0AomO+yycZEREAugFGcv/hV1i0jWeHXdlLc=)
4: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 8+dd8R1o75QRLyHuuzSXOMP23xZFljZU1QgoZzaoaIA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Mar 2026 14:50:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2371 (0x943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Mar 14 20:17:04 2026 GMT
Not After : Mar 21 20:17:04 2026 GMT
Subject: CN=69b5c241-142b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:48:b7:56:4a:9a:fa:45:7e:77:72:aa:6d:
82:1c:d4:90:72:5e:f7:d6:f5:0d:6e:b7:ee:17:d3:
fc:29:28:8a:ee:e4:57:2b:29:cf:36:2b:95:01:57:
bb:78:a9:a2:ce:dd:01:8c:6c:ba:32:5e:6c:af:8e:
55:6d:f1:9f:53:9d:9f:e1:78:d4:1e:c0:a3:ad:f3:
a7:d5:50:fb:6d:fe:74:62:2e:4c:34:58:4f:c5:39:
76:c4:55:b7:01:0c:28:90:5f:33:04:5f:87:90:af:
01:e0:d8:c6:84:8d:eb:4f:e0:08:99:3c:c9:c3:7c:
33:1f:f7:7f:fd:11:7b:b6:fb:41:b7:b6:b0:63:89:
46:e5:1d:c7:ad:85:96:8b:b8:4b:2e:fe:ea:53:d4:
91:c5:b3:9d:25:06:2a:3c:dc:fd:11:3a:9e:32:30:
55:c4:05:d6:6d:87:da:c5:3b:fb:d4:d7:6c:23:f3:
d6:87:76:1d:d0:7b:e1:23:4f:10:3a:4c:37:da:1f:
be:c6:48:40:ed:45:f5:92:93:f3:30:ce:0a:87:d9:
19:2b:0f:a2:10:00:60:51:a4:43:22:ca:87:8f:38:
a0:04:08:ad:e0:d9:23:3f:77:eb:48:bb:61:cd:4b:
6f:75:c3:a1:7e:19:64:65:81:6e:a0:fe:6b:6e:d2:
db:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AA:B2:3A:B2:1A:D0:3B:C5:70:55:AC:8B:31:DC:A9:F6:AA:92:28
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:63:78:03:c2:9b:8d:cc:e1:7c:24:05:02:d7:e8:36:0c:a1:
95:f6:54:80:96:ce:41:e9:55:f0:49:1c:34:6c:4a:10:e8:b1:
bd:87:78:31:74:eb:87:6b:15:6c:91:27:08:83:40:e2:3f:b9:
77:e6:6a:0d:27:bf:35:f9:5d:c4:7c:82:57:60:2e:88:65:6e:
e2:ea:60:7d:96:d0:49:61:f9:ba:30:ef:40:93:41:49:dd:ec:
b8:78:26:ba:7e:d6:92:01:f3:d5:e7:cc:d9:fa:a7:06:b2:2c:
1b:9b:10:29:fa:b9:bd:ec:b3:95:52:b1:f7:97:74:d4:69:86:
06:b5:67:37:a9:d4:f9:69:4b:fd:e9:42:11:64:29:18:b7:df:
61:6b:26:67:b7:e3:1c:cd:d8:3a:07:74:95:26:66:22:2b:f0:
8d:a7:e6:3a:05:8b:37:ad:17:60:59:e6:15:d5:65:11:8c:0f:
cc:16:8f:82:75:10:d9:7e:19:47:46:65:1c:ac:c9:02:31:65:
31:4d:ba:95:24:e4:97:22:fd:1b:00:76:69:48:dd:4a:0c:2a:
ad:43:06:dd:61:48:7f:c8:eb:20:f7:71:04:c6:62:7d:b2:ac:
2b:e5:d9:c7:72:21:30:10:ac:3b:46:15:9c:33:b8:65:0b:38:
e2:30:50:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 21:56:10 2026 by rpki-client