
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: k4oFSJew23xBWSPIW2Zn9cMOStriEJDujPkoB5CWExo=
Subject key identifier: E4:00:48:F2:EB:E9:55:8A:B3:D0:BF:9B:24:8C:DE:A3:FF:10:C5:18
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 09B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 0944
Signing time: Thu 10 Sep 2026 20:25:29 +0000
Manifest this update: Thu 10 Sep 2026 20:25:28 +0000
Manifest next update: Thu 17 Sep 2026 20:25:28 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: ZLzDaFEvuJyJtIQBmOCyhT6504IKZizeFibEKvIydOk=)
2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: SAYeJIBkz/kzzoo/WzZOB1S2IsHRqyLqdtZQYsw3u4I=)
3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: sqAvHqn4hHDZ/JC7867u96QUTmYkEWTJy8qukHimNso=)
4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: sWtpHi+KcoLaI/4doCj7r6NxoDBWWhUZmIdc3W8LnsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 20:25:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2481 (0x9b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: Sep 10 20:25:28 2026 GMT
Not After : Sep 17 20:25:28 2026 GMT
Subject: CN=6aa31238-3f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:3a:a4:8e:f5:59:02:36:54:bc:ed:5d:55:
41:4c:cf:8f:08:e5:17:f2:5d:6f:1e:70:66:10:4e:
26:25:cc:a5:37:ee:02:54:d5:7b:ec:f3:c6:f2:9f:
da:f1:42:73:68:f7:ba:ef:fd:3b:c8:9b:6b:ed:49:
77:ca:63:76:b3:98:e9:88:eb:03:ce:f6:58:c7:c7:
92:d3:d3:ad:26:d0:3a:dd:54:13:4a:a8:3b:b6:97:
2e:18:78:b7:21:a7:da:6e:a5:b4:23:41:40:a5:ac:
bc:88:d9:b4:91:e2:74:03:ea:e5:d5:38:46:48:f2:
e6:6b:c6:52:03:1b:4e:88:bd:f1:92:59:20:7a:84:
1d:ab:87:76:6e:fc:0a:63:29:d0:e4:ef:b2:59:7a:
62:59:89:58:73:30:29:71:f2:6c:4e:1a:80:fe:39:
b4:6e:68:50:8f:7c:75:f9:b8:30:4f:0e:2d:04:4e:
11:1a:fb:6a:d2:0d:09:29:df:6e:3a:32:2c:c4:c7:
2f:b4:84:b5:81:c3:6b:5d:fd:76:71:52:3b:b5:17:
a0:75:9f:f6:f4:29:33:66:b6:f5:f8:e9:18:b3:91:
b9:f5:6a:b7:84:cf:8c:c3:07:1e:39:d3:f9:8f:61:
6b:fe:05:3e:19:a6:e3:a7:27:60:c0:13:f7:98:cb:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:00:48:F2:EB:E9:55:8A:B3:D0:BF:9B:24:8C:DE:A3:FF:10:C5:18
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:e4:75:b4:c4:d5:0a:a9:92:4d:32:40:7a:89:fb:dc:ec:
4d:e2:38:88:c2:46:a2:22:ef:46:98:61:88:89:ae:ed:dd:ea:
02:54:07:f5:3f:1d:4d:9f:a2:e5:80:f2:73:18:62:06:dc:f6:
f8:86:07:05:cb:ec:06:51:45:6f:31:df:fb:22:a8:21:16:03:
2d:f4:b4:38:c9:e8:9f:7d:26:91:1f:15:37:e1:13:62:3e:ed:
34:cb:26:1d:ea:d8:29:2c:51:59:32:4a:25:0c:22:02:96:b4:
07:66:17:aa:9f:9e:db:00:ba:03:19:bc:48:fa:56:bd:38:78:
7b:0f:93:ff:c7:04:09:97:83:cc:00:fb:9b:d0:57:8b:58:9b:
a4:8f:3e:0a:83:1e:9e:44:30:e0:93:83:c0:d9:9a:16:cc:42:
fc:cd:5a:d2:1f:03:fa:b6:7b:e4:48:ed:47:f1:5c:ce:b5:53:
87:48:4e:a9:45:3a:6d:da:cf:ef:d4:75:c3:8e:79:4e:7f:f1:
f9:92:b9:b4:9c:60:bb:69:90:c6:4f:02:bd:ae:e3:6b:6c:b6:
d4:05:a7:8d:88:d5:43:55:c5:ce:79:d3:96:10:a3:73:c0:7a:
85:17:c7:4f:42:91:dc:18:e4:4a:6e:68:d1:49:37:98:9a:81:
42:81:5b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:42 2026 by rpki-client