
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: 05J9XWJNYZwIjXch8Ll9kiOe+g+/p4Z5MOn6RdiO6G4=
Subject key identifier: CF:2E:37:03:B0:2E:FD:AC:48:7D:3A:D2:2E:FB:DF:D2:34:66:B6:2C
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 0282
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 0257
Signing time: Sun 01 Mar 2026 03:23:29 +0000
Manifest this update: Sun 01 Mar 2026 03:23:28 +0000
Manifest next update: Sun 08 Mar 2026 03:23:28 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: dX1PJPhmN51bNXXjZ93Ot+xB0u/7DSd+Snh7pp94r9E=)
2: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: YAG2MNWzPx3qv2gqkqHL4HomQQn9WRVJ3LMr6N4DzO8=)
3: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: VkPzYi2ZNs0vU05onLKrq1O6hJdtK/SNgO3aXYDbRas=)
4: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: vc7xFL7n/2DvUqwMvBAa7Bpo4jcv0S1d4kEos5vCVco=)
5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: p5sOlQdOsm0uuNV7G6DKNuM9BbnStZ2ZIjZVpc+0Hyo=)
6: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: OIJRm8GaBU5y1XIhl90QydPQzIYTf07qs+pUpIzxFiU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 03:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Mar 1 03:23:28 2026 GMT
Not After : Mar 8 03:23:28 2026 GMT
Subject: CN=69a3b131-6254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:5c:83:3c:d4:cb:fe:ba:d8:e9:c1:56:08:
73:ef:10:c2:4d:f6:aa:f1:e2:7b:00:51:76:de:71:
8f:f4:4d:fc:eb:35:9d:63:35:3f:5d:56:ff:8e:7c:
d3:c3:8a:d2:7b:a9:af:47:5c:7c:3c:a1:ff:91:eb:
e2:4d:aa:70:2a:82:48:bb:1b:8d:78:f8:47:5f:71:
9b:8b:5b:cc:da:d5:b1:a6:14:48:89:80:13:de:05:
5d:3d:e1:a3:0a:0e:90:38:27:79:9a:d8:2c:e1:1a:
02:73:d9:20:ee:4d:98:38:bb:8c:0a:56:9b:af:d0:
0d:fc:fb:7a:ed:73:1f:4a:93:61:07:02:48:5a:9d:
e7:10:6b:0b:3c:34:26:0a:2d:3e:db:4c:f7:32:9c:
4b:37:86:25:09:24:13:24:c7:0e:ec:9b:77:3f:24:
e4:66:48:57:63:9e:e4:8b:8f:50:1a:62:88:fc:af:
7f:f7:40:5e:9a:86:13:11:29:e2:9e:ad:7b:d2:b1:
38:03:b5:eb:a3:96:b3:0e:d5:80:27:2c:c9:bc:df:
25:5c:1c:50:1e:0a:08:ba:d4:77:a5:0b:ab:b7:15:
e1:4a:a2:ad:41:d3:05:f4:e9:e7:5f:53:3b:94:4b:
b8:3c:39:2a:f9:8e:82:21:ad:c6:3c:2d:06:b0:cf:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2E:37:03:B0:2E:FD:AC:48:7D:3A:D2:2E:FB:DF:D2:34:66:B6:2C
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:91:2e:1f:e2:f4:21:fe:d5:a5:12:c2:72:84:54:48:91:6e:
20:f0:df:03:a6:89:b7:32:8b:9d:01:2d:b2:2b:6d:df:3d:23:
c0:27:43:2f:8f:18:ee:c1:68:ea:11:a2:3b:c1:f1:2f:c6:51:
f2:9c:06:e8:36:b4:90:8f:79:86:90:6a:b5:4e:38:26:0d:aa:
8b:8b:66:ba:58:d1:5d:d6:d9:38:22:f7:a4:7d:59:ca:4b:a0:
66:52:61:d0:3f:b8:64:89:ea:0b:54:8e:bc:f0:fc:94:a9:aa:
f0:97:62:87:3e:d9:fc:19:d5:10:d8:3f:69:7f:9c:f1:07:96:
84:61:b6:b6:0a:52:01:6c:7f:cc:8f:c1:bd:a2:4b:5e:7b:ec:
be:d0:75:26:1d:60:51:df:df:65:05:f8:f7:34:22:c7:91:5f:
3e:b3:14:ab:a5:ec:74:bf:dc:2c:2b:0f:c7:ae:6a:3d:ea:14:
0f:05:99:60:06:01:50:b1:90:6b:4b:60:40:8c:54:32:3f:71:
42:9f:d8:c1:32:14:a7:5a:b0:70:11:29:0a:69:59:69:20:3d:
db:ce:6f:8d:0a:d6:28:01:3c:26:0a:db:1b:09:4d:c4:74:c2:
87:4b:f6:95:9f:f2:e8:97:eb:2d:05:1d:fb:04:ee:01:c4:83:
a2:71:c0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:23:31 2026 by rpki-client