
$ rpki-client -vvf rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
File: cDaiAHf_h_76NADX-QdrfhmDiy4.mft (raw, json)
Hash identifier: nNHQwi/dsic/3L74EB5bdk613wSC4Rp0+8Sg0ibJR6E=
Subject key identifier: 8C:6E:97:E8:EC:FB:45:9D:22:6D:4F:BD:02:3B:69:B8:54:D2:2D:4B
Authority key identifier: 70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
Certificate issuer: /CN=A913F124/serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
Manifest number: 0295
Signing time: Fri 17 Apr 2026 01:26:27 +0000
Manifest this update: Fri 17 Apr 2026 01:26:27 +0000
Manifest next update: Fri 24 Apr 2026 01:26:27 +0000
Files and hashes: 1: cDaiAHf_h_76NADX-QdrfhmDiy4.crl (hash: iUv4WPdYxyKP/96vrse65AyhLkLuJUIt/EXwj7fSgPc=)
2: B13C376049EC11ED9EAEAC0CC4F9AE02.roa (hash: NdDZZRgK9g6DqkIOgNxd6KDbkad4VeSpXexgW2KxCEc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913F124, serialNumber=7036A20077FF87FEFA3400D7F9076B7E19838B2E
Validity
Not Before: Apr 17 01:26:27 2026 GMT
Not After : Apr 24 01:26:27 2026 GMT
Subject: CN=69e18c43-a93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:21:10:c8:a2:27:95:9f:16:0c:c1:b5:83:c2:
0b:8c:2c:ad:45:80:53:de:5a:4b:ae:c6:50:27:bf:
95:45:94:03:58:a3:bf:a1:b2:e1:d4:f5:af:58:62:
dd:33:b7:da:de:56:3b:93:ef:d9:38:2c:7b:84:cb:
bd:85:1c:0d:86:4b:c3:15:bb:7a:4f:60:c9:96:1f:
d1:ce:87:fb:9e:f4:10:77:0b:e0:b3:9c:46:b4:7e:
21:ee:f2:71:b9:b0:45:5f:df:f5:c3:65:ef:dc:e5:
13:1d:e0:1e:af:64:64:00:b7:3a:07:39:cc:ee:14:
0c:9c:9b:34:ad:32:ff:fb:da:09:6b:cf:af:4f:c1:
e4:4f:02:08:c2:16:89:0e:bd:e5:40:5f:79:2b:c1:
8d:f5:f3:89:bd:a0:d4:c4:00:03:81:77:0a:cb:d9:
4d:c3:2c:d0:53:31:10:c2:d9:a4:8a:89:19:e4:8c:
ad:8e:35:46:a7:82:a3:a6:12:c5:f7:78:2f:cd:f4:
b4:2f:c5:ef:fd:d5:2f:08:3f:f9:c4:f0:7e:29:ce:
db:a4:fb:02:01:de:c3:14:b7:29:bf:74:d8:cb:7b:
cd:e5:4e:f5:c7:45:b2:ae:10:95:8f:12:85:25:e7:
7d:f7:e7:d6:04:fd:f0:1f:5a:0a:48:b0:a0:56:bf:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6E:97:E8:EC:FB:45:9D:22:6D:4F:BD:02:3B:69:B8:54:D2:2D:4B
X509v3 Authority Key Identifier:
keyid:70:36:A2:00:77:FF:87:FE:FA:34:00:D7:F9:07:6B:7E:19:83:8B:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cDaiAHf_h_76NADX-QdrfhmDiy4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F124/5655DA7649E811ED943C4984C4F9AE02/cDaiAHf_h_76NADX-QdrfhmDiy4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:47:41:c6:ef:d2:b7:e3:d5:da:b9:b8:b5:19:61:5c:d8:df:
b0:83:f6:c9:c0:78:3f:52:a4:7f:0f:e4:5d:d3:ea:49:5b:94:
0e:70:67:ea:8b:50:fa:eb:23:35:2d:33:2c:6a:34:ae:fe:a0:
72:4b:a7:1b:7a:4f:bd:4d:41:bf:b9:53:bf:12:10:1b:32:2b:
cc:97:f5:58:d0:e0:9d:32:aa:83:82:fa:8b:d4:7d:25:82:e4:
46:be:9c:71:9b:d5:3f:10:18:17:cb:c1:5f:9d:aa:47:1d:83:
88:d5:90:d0:f4:4c:41:9b:33:66:eb:92:8d:24:bc:24:f0:b1:
d0:66:20:4c:36:10:97:53:d8:ea:9c:c0:d8:0a:60:81:60:43:
76:cb:c8:a3:38:24:b9:50:91:53:38:06:b2:d7:50:29:fc:9d:
ce:46:85:49:dd:9f:14:21:04:be:fd:56:b7:01:b6:11:c8:8b:
30:54:5e:1d:a8:8d:f7:16:c5:d4:7c:b6:ac:b7:ca:18:32:f2:
8f:92:1a:e0:ce:94:b1:f3:61:69:b8:f5:37:3e:f1:ef:e0:06:
ac:c0:d9:65:49:2b:c5:dc:c7:c1:e8:06:31:64:1b:96:c6:ab:
ac:55:4f:20:4c:1f:ab:1a:e6:a0:fb:96:a6:ec:c0:d7:45:33:
d2:71:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:33 2026 by rpki-client