
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier: Z9MfwMbN2H56CeTu4RTZvxbZxmIg/GcZ/3xtGOwTC70=
Subject key identifier: 5C:7D:71:C2:67:F1:F8:B3:1F:88:3A:E2:1C:FD:95:70:71:13:41:FE
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial: 0108
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number: FC
Signing time: Wed 25 Mar 2026 05:30:21 +0000
Manifest this update: Wed 25 Mar 2026 05:30:21 +0000
Manifest next update: Wed 01 Apr 2026 05:30:21 +0000
Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: ca0oUxPAh2RRp+YWd3E2JLJpSQfQDrM4avCdSLOcNYI=)
2: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
3: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
4: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:30:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Validity
Not Before: Mar 25 05:30:21 2026 GMT
Not After : Apr 1 05:30:21 2026 GMT
Subject: CN=69c372ed-276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:52:ad:b3:66:8f:56:f5:7c:03:be:8c:64:
32:99:32:81:42:73:b0:f8:e8:57:1c:e7:50:60:1e:
96:df:74:ba:53:ab:69:34:f2:ea:ad:a3:c5:6d:e0:
b2:90:52:fa:bd:25:52:9e:26:f3:58:a3:a3:dd:e6:
9e:29:30:dd:81:3a:56:54:57:e3:9d:70:f4:44:27:
ff:10:4c:d8:03:36:7b:70:fc:80:4c:6c:af:23:e3:
aa:82:47:4f:4f:31:3c:43:9c:39:24:cb:27:56:30:
8d:c3:69:03:b6:52:d1:77:f7:39:fd:5e:46:0b:b2:
53:3a:4c:ce:8e:6e:d1:e1:3b:9c:3c:aa:47:bc:0f:
78:31:4c:a5:41:62:3f:d8:b0:b4:fd:99:d0:26:62:
71:a5:d3:7c:bf:72:60:f1:6f:5c:5b:90:8f:f0:42:
73:4e:85:c1:cc:63:db:ef:b1:b7:76:20:81:ce:5c:
05:47:1f:d1:b4:85:9e:db:2d:ef:df:e0:77:74:d7:
52:b1:cd:fa:4a:f8:c2:4a:64:39:79:7c:2c:3c:1a:
0c:0e:c1:15:ff:05:a6:33:a1:8a:70:72:be:c9:de:
ca:18:1e:98:32:e1:19:bf:4c:36:c3:26:10:10:4e:
18:ff:23:ba:68:4c:ec:41:5a:ee:ad:34:a8:58:d4:
b8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7D:71:C2:67:F1:F8:B3:1F:88:3A:E2:1C:FD:95:70:71:13:41:FE
X509v3 Authority Key Identifier:
keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:27:65:07:c9:ad:70:14:4d:89:20:d0:35:cf:3d:50:80:d2:
f8:e9:d1:95:a4:b6:4a:fc:a7:07:3b:80:ee:4c:54:ec:09:45:
b1:88:44:5d:ae:cf:e1:04:29:1c:9a:f8:8e:ca:93:50:ab:b8:
f8:ce:80:57:a7:35:5e:8e:2f:09:23:74:52:76:4e:e3:fc:a7:
3f:d1:bc:40:2b:03:e3:0c:dc:cb:dd:c0:52:ec:73:43:b9:b2:
f1:9f:d8:11:46:8f:b0:09:59:be:0d:31:5d:9e:b3:90:b0:1a:
ac:56:c7:25:f0:cf:84:01:6f:84:7c:a1:b2:d8:93:1e:b7:bd:
e8:dc:9e:35:ad:6e:55:67:69:49:0a:3b:2a:ad:7b:99:81:e4:
b1:09:0f:75:b6:ae:d5:30:41:13:66:f7:14:7a:59:9f:80:33:
6a:01:5d:17:5f:30:13:2e:ff:1d:c5:f7:2a:ef:92:71:99:4e:
a7:60:30:67:ea:23:1a:71:9d:df:11:a8:df:c9:f5:10:66:f7:
f4:99:12:55:80:9c:08:dd:75:ff:e2:86:33:99:49:8d:06:5c:
06:ad:bd:14:04:79:01:35:dc:10:4c:fb:52:ca:0b:24:1f:5b:
8c:c5:ae:97:6f:3a:2d:6e:c5:6d:95:28:96:9c:df:a3:57:d1:
45:4f:fb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:53 2026 by rpki-client