
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: v4D2wwl8EHshugMG9F+JNCt/nO0gBlYCyhSdcej7kX8=
Subject key identifier: 45:D5:10:FF:A5:D1:D0:91:D8:5B:1E:48:3E:5B:71:AF:E2:D6:AD:F9
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 02D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 02A2
Signing time: Thu 23 Jul 2026 03:05:07 +0000
Manifest this update: Thu 23 Jul 2026 03:05:06 +0000
Manifest next update: Thu 30 Jul 2026 03:05:06 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: 8vR0IPeUJa5MsKjWBDgFZsULNBBmQxHbnFsHUFJ3t+U=)
2: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: OhRPWyMKqFduA9uJzaW+9hsoRlZdED+15N0UsPHGwsQ=)
3: 8A04741C68A311F19B45E58A7847A888.roa (hash: 5V4OEah4mKyaGcX20wD1WmEBPoGeOJlAllUfd1W2fB8=)
4: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: lCUoUv+f43f2WVQxLTt9/x7joh+RYHOTSuRXDeNCXQ8=)
5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: gPmOaoN+l9WJ/rTZGr8yHo6MmYAS6GPMF/52rd8LuYY=)
6: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Gdu+/km9OM7ctxIRapvlJ9L445WBOrHYSmYqVRl94Tk=)
7: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: 2aqoL9qe8tIo9qlQGinuDss/0nrnNaVd49bC6qwXz1M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Jul 23 03:05:06 2026 GMT
Not After : Jul 30 03:05:06 2026 GMT
Subject: CN=6a6184e2-692f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:15:e3:b6:17:ad:e2:af:0b:27:bd:3c:eb:
37:e2:f2:d4:44:04:0d:8a:11:11:f9:21:89:46:14:
ca:86:e4:a0:d0:04:41:1f:ac:61:f6:5f:4b:c7:93:
43:e3:a3:53:ac:26:e0:0d:4a:98:38:f6:85:9b:42:
cd:dc:80:b7:b1:94:38:7e:af:bd:e1:04:b7:d1:f5:
d2:5a:ac:5b:31:34:e1:9d:55:c0:87:bd:08:b4:47:
ad:13:c1:cd:00:1a:53:32:63:c2:75:74:a5:fd:66:
4c:33:9b:68:26:c0:cc:37:c3:db:d5:7e:76:1f:33:
f4:c8:23:30:7f:f6:0b:9d:9f:81:03:5d:38:a3:f6:
f0:73:b6:36:a1:9e:46:a1:d7:a4:a6:dd:ad:36:7f:
ce:c7:b6:93:90:8a:b0:5d:5f:95:7d:42:7a:5b:d2:
ef:ef:9e:d1:84:be:dd:f0:38:01:13:41:06:25:55:
27:f4:a1:66:50:ba:5b:a9:23:03:a5:5d:8f:ab:e4:
36:0c:86:47:3a:1c:16:80:3e:89:25:fb:93:53:2a:
f1:c1:53:be:2c:e6:d2:89:8e:c4:7c:7f:9b:f6:8f:
69:5b:c4:f1:05:ee:4f:b3:a9:1e:d8:48:b2:af:7b:
4b:1b:f7:8c:4b:28:fa:27:23:bf:2a:b5:b3:3d:59:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D5:10:FF:A5:D1:D0:91:D8:5B:1E:48:3E:5B:71:AF:E2:D6:AD:F9
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b8:9f:da:66:a4:6f:e8:94:e8:a5:7b:43:d9:25:6f:04:3d:
c0:6c:c8:b9:5f:42:5b:bb:41:ab:20:0a:23:e6:b4:f0:ad:81:
f2:47:4f:3a:23:a4:50:2a:4c:a9:a3:dc:2f:ef:05:b0:a0:b8:
e4:b6:37:1d:db:56:2a:59:45:90:61:4b:ac:95:6a:b1:0d:da:
11:3d:04:55:75:98:e8:c7:ca:c3:7c:e4:87:cc:88:60:f5:f0:
54:a1:85:cb:04:2c:a6:e3:93:e1:ea:80:29:83:c1:61:1a:25:
de:b3:43:45:be:2b:6f:fb:67:8f:80:4b:60:6a:73:37:dc:ac:
8e:65:f2:43:0f:12:a6:57:79:65:c2:fb:fc:e7:5e:0a:06:80:
e4:0d:b5:3c:a3:58:80:a3:2a:a1:2f:10:91:01:5f:09:5e:f2:
11:2d:d5:d1:a7:3b:b7:4c:5f:e8:fe:6a:b4:6d:bf:43:ec:22:
b9:8a:f0:9b:5a:e1:29:b6:f6:b3:04:77:65:dc:a3:88:86:ad:
44:7e:b6:9b:c3:03:f3:50:76:b7:c7:e5:4f:1f:96:93:5e:ad:
d4:2b:87:69:af:44:3e:37:c8:bc:8b:e3:2c:9c:72:58:3d:ea:
da:e6:83:5c:33:ad:7e:e2:4a:d7:10:95:4f:b1:de:1b:26:9b:
a9:18:5f:71
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZEREIxMTAvBgNVBAUTKDBDNzY5REE0NDk4MkY2MTY1MDM2Mjk0M0U2REZFRjk1
MUI5Nzc3RkEwHhcNMjYwNzIzMDMwNTA2WhcNMjYwNzMwMDMwNTA2WjAYMRYwFAYD
VQQDEw02YTYxODRlMi02OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAojEV47YXreKvCye9POs34vLURAQNihER+SGJRhTKhuSg0ARBH6xh9l9Lx5ND
46NTrCbgDUqYOPaFm0LN3IC3sZQ4fq+94QS30fXSWqxbMTThnVXAh70ItEetE8HN
ABpTMmPCdXSl/WZMM5toJsDMN8Pb1X52HzP0yCMwf/YLnZ+BA104o/bwc7Y2oZ5G
odekpt2tNn/Ox7aTkIqwXV+VfUJ6W9Lv757RhL7d8DgBE0EGJVUn9KFmULpbqSMD
pV2Pq+Q2DIZHOhwWgD6JJfuTUyrxwVO+LObSiY7EfH+b9o9pW8TxBe5Ps6ke2Eiy
r3tLG/eMSyj6JyO/KrWzPVkAtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXVEP+l
0dCR2FseSD5bca/i1q35MB8GA1UdIwQYMBaAFAx2naRJgvYWUDYpQ+bf75Ubl3f6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkREQi9FMUNEQ0REMkJF
MUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzloWlFOaWxENXRfdmxSdVhk
X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRfby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi9ESGFkcEVtQzlo
WlFOaWxENXRfdmxSdVhkX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAurif2makb+iU6KV7Q9klbwQ9wGzIuV9CW7tBqyAKI+a08K2B8kdPOiOkUCpM
qaPcL+8FsKC45LY3HdtWKllFkGFLrJVqsQ3aET0EVXWY6MfKw3zkh8yIYPXwVKGF
ywQspuOT4eqAKYPBYRol3rNDRb4rb/tnj4BLYGpzN9ysjmXyQw8Spld5ZcL7/Ode
CgaA5A21PKNYgKMqoS8QkQFfCV7yES3V0ac7t0xf6P5qtG2/Q+wiuYrwm1rhKbb2
swR3ZdyjiIatRH62m8MD81B2t8flTx+Wk16t1CuHaa9EPjfIvIvjLJxyWD3q2uaD
XDOtfuJK1xCVT7HeGyabqRhfcQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:06 2026 by rpki-client