
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier: adv5Q4cxVrKcz/0WDjs4xXmDrqQKiWV1p+GYxAgJD5k=
Subject key identifier: D8:0D:B3:FD:99:83:1A:02:60:35:72:F7:0B:53:8F:25:3D:C5:EB:CC
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 0B15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number: 0B0B
Signing time: Mon 28 Sep 2026 19:27:08 +0000
Manifest this update: Mon 28 Sep 2026 19:27:08 +0000
Manifest next update: Mon 05 Oct 2026 19:27:08 +0000
Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: Nnd9SYTmsVTcBeHgvuLYzsZTJnwXCXLzhS1Y7LZJHRs=)
2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 19:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: Sep 28 19:27:08 2026 GMT
Not After : Oct 5 19:27:08 2026 GMT
Subject: CN=6ababf8c-aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:aa:7d:39:98:e4:06:4b:18:a2:33:02:bf:
b7:84:ea:70:d4:4c:85:22:e7:98:b9:c1:f7:09:aa:
ae:2a:6e:ac:f6:b0:ba:c8:6d:a5:7f:c7:10:ad:2b:
10:b0:4d:2f:61:b5:bd:2c:63:e9:32:f8:44:3e:fa:
32:2a:b3:61:9b:9a:4e:7e:c4:d5:91:84:06:96:3c:
8b:99:81:bd:1c:19:1f:68:d8:d2:6b:26:6b:88:61:
fc:e0:92:5c:35:ef:bf:8a:24:f9:ac:31:9f:01:af:
91:66:c6:d2:2b:ad:7d:93:69:ff:48:d6:30:cb:11:
ce:0a:d6:39:2b:78:54:00:b2:78:5d:7b:12:c7:6d:
b1:fd:25:b6:ba:aa:74:22:59:59:cc:de:ac:06:8b:
26:38:46:cc:40:ee:af:ba:8f:8a:a6:0f:0f:9a:08:
d6:8b:d8:7a:6b:67:ed:e7:4a:fe:d1:0e:d7:83:39:
0f:3a:a1:bc:1e:bb:28:75:7e:24:8e:a2:3f:8c:45:
81:d8:b6:80:69:ea:1e:5c:ad:07:7c:1e:1e:73:1b:
a1:b0:c1:07:71:57:cf:ca:1c:60:52:46:e2:ff:3e:
69:65:0e:a4:73:11:d3:f6:8d:79:37:65:5c:1b:27:
5e:24:40:a8:c2:0d:10:98:7f:6b:45:fc:a6:a9:76:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0D:B3:FD:99:83:1A:02:60:35:72:F7:0B:53:8F:25:3D:C5:EB:CC
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:5e:15:5a:d6:cb:be:6c:3b:1d:7f:40:46:cf:23:f5:cf:
53:06:36:50:cd:48:4a:7a:5a:54:c1:83:f0:c9:83:d3:9e:8f:
0f:6a:de:e3:52:f1:ba:0e:70:05:a2:73:a2:d4:9a:a3:a9:1e:
82:42:4b:cb:a5:f8:28:10:c7:1a:9c:24:79:4c:37:3b:d0:aa:
ba:1e:87:7e:36:6e:a1:40:de:8c:55:2c:d4:7b:0f:d5:23:b1:
b7:53:b0:6b:59:4f:61:81:f5:e8:fc:d2:5d:32:c3:86:33:60:
a6:d0:70:8d:56:3d:42:0c:3b:f5:4b:ac:b0:94:c9:42:48:20:
31:15:23:9a:bf:b1:12:58:41:01:dc:63:4c:e6:fa:df:1e:c3:
c2:8b:92:b3:35:da:d7:ca:f4:a4:b3:b1:6d:0f:00:61:30:aa:
63:af:80:6d:0e:55:7b:af:f9:5d:b4:ad:46:c5:25:7d:82:40:
0d:21:ca:39:0a:c5:54:75:68:bc:e3:b9:d8:f6:bf:9f:f3:ee:
50:cf:41:7b:9f:5a:59:a8:8f:e7:f6:c4:8a:34:3a:b5:a5:d0:
99:95:ba:5c:f7:e9:b8:e5:22:f3:87:1a:c6:da:cc:bb:8b:60:
81:f3:bd:a4:a2:a2:9a:8f:f2:0e:a4:b0:cc:7b:f4:82:a6:d9:
31:40:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:26:06 2026 by rpki-client