
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: JPPIu21nOAvp9PKhlaBksusCkgvyAKKcIbAxIDJYThY=
Subject key identifier: B3:80:58:45:A5:5A:4F:AB:74:D7:58:83:FE:DE:39:D3:A0:60:8A:2F
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 02A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 0271
Signing time: Fri 17 Apr 2026 02:09:21 +0000
Manifest this update: Fri 17 Apr 2026 02:09:21 +0000
Manifest next update: Fri 24 Apr 2026 02:09:21 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: dSM0k5ChNjIsUn/MCENzMqtEdjM7W6Iv+PsJrDW86tU=)
2: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: lCUoUv+f43f2WVQxLTt9/x7joh+RYHOTSuRXDeNCXQ8=)
3: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Gdu+/km9OM7ctxIRapvlJ9L445WBOrHYSmYqVRl94Tk=)
4: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: 2aqoL9qe8tIo9qlQGinuDss/0nrnNaVd49bC6qwXz1M=)
5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: gPmOaoN+l9WJ/rTZGr8yHo6MmYAS6GPMF/52rd8LuYY=)
6: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: OhRPWyMKqFduA9uJzaW+9hsoRlZdED+15N0UsPHGwsQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 02:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Apr 17 02:09:21 2026 GMT
Not After : Apr 24 02:09:21 2026 GMT
Subject: CN=69e19651-caf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:5d:d4:9b:a4:cb:a9:63:af:5e:f0:9f:dd:
39:c6:6c:78:9f:7b:04:54:23:20:9c:71:3f:5f:76:
4c:de:2a:86:e9:f4:95:b9:48:50:f1:67:8c:e1:92:
ac:fb:19:72:2c:1e:34:e7:08:49:ed:32:f1:68:6a:
83:7d:41:f0:3c:b7:d5:aa:d9:b8:0c:15:a1:bc:a3:
d0:f7:ab:08:97:87:6a:92:97:a7:c2:63:ac:e8:1e:
e1:99:a2:7b:fa:f1:3c:e9:b3:41:ea:39:65:60:a3:
8c:10:bb:20:7b:6e:a9:4e:58:cb:48:ed:07:3a:70:
3c:18:fe:71:35:d5:8d:a5:53:99:09:bd:80:b1:84:
13:2e:8b:d7:7d:28:00:b1:cf:db:49:23:5d:53:88:
f9:f0:0f:16:f9:88:20:ba:58:d9:66:1d:41:cf:cd:
94:d0:f1:b0:e3:29:e6:eb:8e:39:b2:49:00:1f:b3:
3d:69:81:e8:35:48:6f:f8:2b:11:9d:58:77:29:08:
c3:14:97:0a:e1:3c:a8:0c:e0:b9:bc:35:27:1c:b7:
80:77:09:e8:a2:1c:94:11:01:89:31:b2:29:e1:1a:
40:2b:f4:e9:f9:d6:7e:20:a2:f0:62:b9:a1:5c:8c:
37:1c:c0:c5:86:71:ee:27:ab:8a:d6:48:97:9d:31:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:80:58:45:A5:5A:4F:AB:74:D7:58:83:FE:DE:39:D3:A0:60:8A:2F
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:b0:c4:99:68:53:d1:db:6b:ac:f7:d8:d3:a0:10:c2:9d:77:
dc:5c:80:be:f7:ec:6a:34:c0:40:e9:3c:cd:7f:08:c8:e5:9a:
10:67:3c:f0:ef:cd:52:e3:6e:4e:57:1a:32:c0:33:8d:51:66:
54:e5:cb:ba:4e:c2:50:28:55:39:06:a1:78:17:a9:b3:14:73:
e8:cb:e1:90:0e:d4:d9:1d:b9:61:d4:da:de:c7:e7:d6:f8:2c:
4c:38:70:8b:5e:91:a4:6f:75:2f:8e:eb:eb:aa:f5:cf:83:99:
1b:f9:e2:ff:35:34:71:59:36:3e:66:23:64:a1:08:19:47:59:
88:99:b7:d1:05:cd:0b:af:15:45:47:95:76:9d:c5:4b:a7:b9:
0d:dc:c2:cc:9d:25:da:55:f5:27:c8:49:60:4a:0a:02:48:f1:
16:c3:da:3f:e6:1e:75:34:18:21:de:be:f5:34:54:c2:03:3b:
75:ec:b9:9b:61:68:a5:00:30:37:48:a5:c5:5f:1b:c4:ea:83:
81:99:a7:e6:de:90:5b:6c:2b:52:a6:c9:96:31:af:c0:17:ed:
3a:84:ed:bf:61:69:c3:af:12:f9:20:a9:9d:13:2e:aa:0e:9e:
a0:9f:23:a0:15:fc:57:74:aa:5a:c5:25:33:1c:ed:54:8f:a8:
97:ec:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:41 2026 by rpki-client