
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File: aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier: NU4MikAGDgfo/kuUsvkctu2AVwDUT1lAbGC7yIAO9j8=
Subject key identifier: 88:6B:42:0D:09:21:1C:B8:D5:C0:DC:C1:2F:B2:BE:0B:A8:C6:2E:17
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer: /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial: 0964
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number: 08FE
Signing time: Tue 12 May 2026 20:41:31 +0000
Manifest this update: Tue 12 May 2026 20:41:31 +0000
Manifest next update: Tue 19 May 2026 20:41:31 +0000
Files and hashes: 1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: bt+0nJQjFiaGr7MDp2pmTN4bEujpAg1zI7Rj4OF+lls=)
2: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: Uo8Q/y2S0AomO+yycZEREAugFGcv/hV1i0jWeHXdlLc=)
3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: MfBYIfef5q6axAJciYZD+YSWEevAKozoCGz/YdfVQD8=)
4: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: HSoL53wcuF162+Jp6uFyYtOESNj0gd6QJK8BOXEE1V0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 20:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2404 (0x964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Validity
Not Before: May 12 20:41:31 2026 GMT
Not After : May 19 20:41:31 2026 GMT
Subject: CN=6a03907b-b200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:dd:da:0d:db:01:20:49:c5:9b:21:4f:cf:8a:
a5:30:83:1f:94:98:62:e3:33:39:cb:9f:46:70:a3:
09:c0:bb:b5:ca:62:4c:0f:44:7f:de:60:7d:f4:7f:
de:89:72:73:df:c9:59:65:93:50:9f:15:14:61:37:
87:3a:df:bc:8a:33:c1:f4:4a:6b:3d:0f:6a:e8:0e:
01:28:e1:5f:b5:ff:43:7e:83:44:9d:a8:cd:a4:74:
48:49:56:57:4a:ce:88:a3:15:cd:74:57:0a:8f:b7:
a4:46:a7:ba:67:7e:3a:2e:9e:b0:58:db:cf:a2:12:
2c:b3:67:57:bd:3e:61:59:79:43:dc:7c:dc:88:75:
8c:0f:7d:fa:8a:dd:fe:d6:ff:14:d1:62:12:aa:28:
cf:04:57:2d:98:5f:fc:ce:77:c0:f5:c8:7c:e6:74:
28:b1:e4:1c:9e:f4:f9:ea:1b:54:41:55:0f:5d:e8:
64:6d:df:98:50:3a:93:72:a6:4b:bc:0b:4d:61:d8:
a6:ef:9e:aa:c9:f5:a5:02:77:b3:89:a5:89:3e:06:
9d:ff:b4:34:68:4d:6b:b9:15:a4:40:74:07:87:19:
3a:fb:cf:2a:67:06:c6:b7:45:09:8e:a6:1a:39:cf:
71:92:97:b6:3f:13:c6:b7:ba:8e:99:5f:99:d7:17:
f1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:42:0D:09:21:1C:B8:D5:C0:DC:C1:2F:B2:BE:0B:A8:C6:2E:17
X509v3 Authority Key Identifier:
keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:74:75:fc:61:49:79:8e:19:59:f9:e1:2b:18:de:e5:79:b8:
19:60:f6:69:58:a4:87:ed:55:cf:1b:67:87:9a:c9:75:4e:df:
4a:a8:5f:a6:60:78:12:2c:61:2e:47:83:6a:4a:f3:86:fc:7a:
4e:79:f9:62:77:1c:b3:97:2b:df:91:13:5d:8a:ea:e7:7a:25:
7f:49:b1:cd:1d:c6:98:f6:6d:9c:37:d6:c7:2b:55:fe:32:28:
1e:61:de:8b:d3:e8:e9:bb:7c:4a:f7:b3:13:99:6e:f8:d2:e0:
8e:84:33:c2:7b:90:f8:b9:87:3d:28:75:c2:f2:cf:43:a8:73:
2f:0b:3e:95:15:e5:11:0c:f7:86:c2:87:fc:14:9a:24:44:a1:
1d:9e:59:61:39:80:38:e3:30:9a:2c:44:96:53:87:39:db:c8:
2f:ae:cd:0a:da:76:43:04:92:7d:4b:b1:2a:97:d3:e0:7e:ce:
5b:b5:85:32:93:d4:df:fc:ce:60:7e:6f:10:1b:b8:e6:de:e0:
8e:8d:2e:01:ef:10:97:53:ed:dd:c1:19:6a:1f:51:34:8a:d4:
19:96:fd:8e:e3:b0:fe:64:82:33:1b:7a:e1:ca:fb:f6:0b:f6:
d7:3c:a2:98:9c:f8:c1:e6:81:9b:fc:bf:9e:f6:2e:e4:53:d8:
16:95:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:51 2026 by rpki-client