
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
File: DHadpEmC9hZQNilD5t_vlRuXd_o.mft (raw, json)
Hash identifier: +Lmg0FOvyBL52m8LA8AP76bP5742OfFNzKC3O7t0aCE=
Subject key identifier: D8:65:C8:0B:46:D8:7B:9A:49:89:F1:58:43:40:96:51:28:1F:60:19
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 029A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
Manifest number: 0265
Signing time: Wed 25 Mar 2026 01:53:59 +0000
Manifest this update: Wed 25 Mar 2026 01:53:58 +0000
Manifest next update: Wed 01 Apr 2026 01:53:58 +0000
Files and hashes: 1: DHadpEmC9hZQNilD5t_vlRuXd_o.crl (hash: +L9HO01yiU3WnHuwMe4Mg5in3I9W8z98E8IvMZmnoek=)
2: 976A9C302BAF11F0B6DD613FC4F9AE02.roa (hash: Gdu+/km9OM7ctxIRapvlJ9L445WBOrHYSmYqVRl94Tk=)
3: 9A79B41A633811EE9D258E2EC4F9AE02.roa (hash: 2aqoL9qe8tIo9qlQGinuDss/0nrnNaVd49bC6qwXz1M=)
4: 67425BB07A7F11EFB5653840C4F9AE02.roa (hash: OhRPWyMKqFduA9uJzaW+9hsoRlZdED+15N0UsPHGwsQ=)
5: 98ABC1DC2BAF11F0B6DD613FC4F9AE02.roa (hash: gPmOaoN+l9WJ/rTZGr8yHo6MmYAS6GPMF/52rd8LuYY=)
6: 2C5C63329E5311EE8D49694BC4F9AE02.roa (hash: lCUoUv+f43f2WVQxLTt9/x7joh+RYHOTSuRXDeNCXQ8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:53:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Mar 25 01:53:58 2026 GMT
Not After : Apr 1 01:53:58 2026 GMT
Subject: CN=69c34036-4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ff:f6:f3:82:a5:b7:76:89:4c:4b:2d:45:d0:
b1:c2:02:5c:15:9c:dc:1a:90:6b:1d:9f:5c:8e:60:
9a:ee:28:00:53:2f:49:48:c3:8c:7e:66:b3:17:b6:
e6:06:4e:90:85:a8:5f:18:4e:3d:ce:0d:d2:a6:66:
e3:37:0a:8a:13:2d:56:2a:97:fd:f5:92:41:5f:29:
f0:bd:ce:ff:24:ba:f2:0c:0e:67:97:47:10:eb:be:
51:23:1a:51:2c:d6:6d:fd:bc:38:ac:ee:e8:78:73:
29:8a:95:89:68:2b:83:7c:45:d4:22:7d:ce:77:af:
1f:9c:58:dd:4d:93:70:63:fe:eb:47:d2:5c:b1:b7:
12:fa:c2:0b:ce:fd:f4:83:ab:5b:eb:91:2e:a9:1b:
48:8a:a6:5e:20:a3:4c:b8:90:43:db:28:54:81:fb:
95:21:1f:82:76:be:53:c7:dd:b0:ae:20:d7:e9:1d:
82:ee:58:8b:90:81:04:b0:9e:04:32:9f:6c:1c:1f:
ab:f4:32:b1:a6:8e:c1:09:29:c5:d6:e0:b7:d3:93:
2c:9b:c4:5e:dd:e4:aa:33:bb:e1:24:a7:74:8f:60:
e2:33:00:c6:08:6d:1b:dd:f8:94:18:a8:93:30:0a:
f9:0f:18:93:0d:57:71:bc:bb:8e:5f:a9:30:35:f9:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:65:C8:0B:46:D8:7B:9A:49:89:F1:58:43:40:96:51:28:1F:60:19
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:7b:0c:82:d3:a7:7d:69:86:d7:24:ed:8c:23:fb:20:11:c8:
a5:a8:ae:cb:f3:ac:2a:2d:bb:a4:93:65:2e:15:31:03:4f:07:
b7:ca:c1:a3:84:72:da:b8:88:9d:c7:04:69:03:37:a9:74:70:
29:00:fb:be:2e:b2:e6:4f:0f:ce:7f:3d:d1:25:d6:f2:89:eb:
59:43:db:3d:a3:81:12:d2:28:08:05:c9:06:8a:2b:85:ca:60:
f8:f1:4e:b7:8f:01:3d:d7:75:d2:e2:2d:df:2d:15:e4:67:81:
12:c9:1f:ad:17:9e:cd:5f:1b:50:a1:1f:91:90:6d:d2:b5:b1:
bc:94:b1:60:22:b5:9b:eb:8c:05:b7:b9:1e:cb:8f:86:5d:5f:
9f:ef:ef:ef:3c:e6:fd:a6:5b:af:9c:22:ab:4d:2d:4b:f4:e8:
14:4b:70:39:81:3a:71:3d:9c:e1:a1:55:7a:b6:7e:45:3d:5f:
b5:d5:d9:5f:6d:b5:3a:5f:58:00:f3:bb:92:5a:13:61:a3:cf:
57:1f:28:0b:21:9d:dd:3e:83:57:a7:53:19:5e:ab:04:cf:79:
3d:de:e2:1c:75:a4:af:80:8c:56:c8:f4:60:fb:36:52:e6:41:
60:66:b3:72:28:9c:b0:21:9b:61:30:02:ca:6c:d8:e6:cd:aa:
6b:37:b9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:19 2026 by rpki-client