
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier: NdNkynqf5BA0UHbQUoUSaNxiC3koKQyDWWNCpI3GRio=
Subject key identifier: E5:B1:D2:3A:69:8E:16:90:85:3B:D9:FF:BB:18:D3:AC:DC:64:5D:70
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 0ACE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number: 0AC4
Signing time: Tue 12 May 2026 19:30:01 +0000
Manifest this update: Tue 12 May 2026 19:30:01 +0000
Manifest next update: Tue 19 May 2026 19:30:01 +0000
Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: h+Iu7cDDj79Em1kECksBZQ0kLEJRAjWcfv8aPcfMMaE=)
2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 19:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2766 (0xace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: May 12 19:30:01 2026 GMT
Not After : May 19 19:30:01 2026 GMT
Subject: CN=6a037fb9-0419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:97:b4:3c:51:d5:ec:1e:4f:1e:0e:7d:b2:
d3:09:fa:23:46:42:0a:22:b3:ca:1d:e9:17:b0:6a:
ec:dd:3f:4c:d9:9c:b2:e4:f2:2f:4e:b8:26:b8:7e:
89:7f:6f:11:40:b0:21:ca:b3:2e:1b:90:f0:29:2c:
51:bf:92:7b:7f:75:ff:36:e8:5f:4e:b9:0d:b5:89:
04:23:2b:a3:bb:ae:2f:53:15:bd:1e:bd:39:65:ac:
0b:2f:e5:af:49:15:db:a4:0d:e5:a5:22:40:73:04:
a3:31:1f:ef:76:42:cd:97:df:25:71:e6:35:c1:c8:
d5:2e:e3:ae:a3:32:c3:e4:fe:82:2c:cc:f0:b4:1b:
3d:d0:bf:66:54:78:f1:f6:7e:73:a6:98:af:d5:59:
a7:8e:f0:0c:6e:6a:c9:33:81:38:e6:31:9c:cc:bd:
72:b0:fe:12:55:54:1f:27:23:8f:f9:40:76:b5:e8:
45:1c:3c:c7:34:8c:91:c3:62:9a:4b:ce:28:47:08:
9a:7d:ac:62:d5:ef:21:71:c9:87:aa:19:27:90:fc:
ad:83:e7:93:66:ca:5c:23:82:9e:46:18:22:e7:69:
00:b4:d5:f2:26:bd:15:a6:1a:74:e5:69:8d:8f:ac:
3e:97:c7:d5:9e:d3:24:59:16:d7:e4:fe:df:ab:f6:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:D2:3A:69:8E:16:90:85:3B:D9:FF:BB:18:D3:AC:DC:64:5D:70
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:cc:df:b9:9e:7d:ad:b9:96:27:d4:04:a7:39:17:69:21:5f:
3b:9c:eb:27:78:75:94:c2:c7:f1:83:be:fe:35:b6:2f:dc:da:
95:c6:63:e6:2d:d4:da:0e:ad:7d:86:fc:ce:1e:b9:ee:01:56:
e3:74:df:6e:68:57:30:23:d5:a3:01:8f:fd:40:dd:b8:7e:a1:
82:52:a3:79:e3:75:3e:31:1b:46:ad:5c:8c:36:a4:0f:a6:4d:
cf:11:b7:d4:c4:7b:bb:66:2e:52:88:81:b0:9a:96:8e:06:ef:
95:de:13:b4:9e:ab:b5:43:27:80:84:df:e6:30:b7:59:3a:f3:
28:c7:4b:5b:a3:cf:f7:dc:06:a9:74:28:01:7a:af:28:0d:3d:
b8:91:33:d2:e6:d7:ec:60:fe:53:f6:16:d8:ac:b1:3e:11:94:
e4:ee:a3:ff:ff:a2:5a:2f:0e:ab:e9:0a:ff:3f:2f:c7:05:ff:
5d:48:b6:b5:7d:2d:31:bc:7d:ed:07:92:73:fa:f4:53:3a:74:
d4:5b:82:2b:51:4d:56:74:2e:67:96:10:7c:8b:36:d4:01:2a:
46:3e:f0:9b:25:7e:c5:f9:e8:a2:3d:52:33:34:9b:00:21:7f:
cc:65:0e:3c:ea:55:45:eb:3e:ce:97:3c:17:80:7d:3d:2c:d5:
bd:80:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:01 2026 by rpki-client