
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json)
Hash identifier: nvPDrhaa8nplb12NELIbK/0Mp3txN+AiAly4nsA/8Jo=
Subject key identifier: 48:27:11:78:EA:4D:8B:C6:4B:5D:90:F4:94:65:21:F4:28:9A:C9:40
Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Certificate serial: 25CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
Manifest number: 25B1
Signing time: Thu 26 Mar 2026 15:44:32 +0000
Manifest this update: Thu 26 Mar 2026 15:44:32 +0000
Manifest next update: Thu 02 Apr 2026 15:44:32 +0000
Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: K8Hgqgc+0WkL6Q9RN+Q2B2oagCMmeWd6YGKEapujVVQ=)
2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: 1ghEv7poKGW1kihPQdkAbm84XN1Xrk7KTTqEVU0zlnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 15:44:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9676 (0x25cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Validity
Not Before: Mar 26 15:44:32 2026 GMT
Not After : Apr 2 15:44:32 2026 GMT
Subject: CN=69c55460-7e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:7a:f4:8a:5b:e4:01:1a:04:f7:d8:47:63:
a2:f6:8f:4c:cf:c5:f9:e3:76:0c:5f:82:cf:d0:29:
49:7c:6a:d9:6f:25:65:ab:d3:a2:c2:8e:4f:55:62:
5b:64:72:28:22:9c:1f:f2:3c:24:6b:7c:23:6f:18:
8e:f8:36:e8:9f:dd:ad:ce:cc:bc:fe:8c:61:7e:ee:
8f:af:bb:b6:bf:3b:92:7a:b6:91:51:ed:9b:6f:38:
dd:d6:fd:cc:c0:bc:2a:39:99:7d:36:26:82:c7:36:
01:b1:d8:bc:27:6c:c2:28:47:50:ec:6e:00:7b:27:
a9:3a:fb:d7:04:f5:6a:dd:07:77:ab:b3:44:0a:de:
ef:a4:f3:77:e5:b4:21:54:03:5e:f1:e3:08:bb:a6:
a3:24:90:a1:0c:e8:d8:c1:f6:c3:c1:5c:17:d9:2a:
5c:37:46:c4:d0:99:71:3b:00:c1:87:38:e3:eb:67:
57:58:4f:1f:27:4e:de:b4:20:0f:1f:60:6d:05:77:
34:d3:99:37:15:84:8c:81:ca:82:1a:de:f3:2f:aa:
aa:85:af:54:15:58:09:ec:7f:95:ac:40:29:47:19:
ae:37:ee:ab:96:3d:0f:6e:d1:81:65:6e:89:85:c6:
2b:df:50:ae:84:8b:9b:e8:43:15:d0:91:b5:0a:61:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:27:11:78:EA:4D:8B:C6:4B:5D:90:F4:94:65:21:F4:28:9A:C9:40
X509v3 Authority Key Identifier:
keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:d7:96:84:e6:d2:1b:82:0a:38:e2:1f:0f:7f:af:39:26:c6:
68:71:68:8a:51:09:39:c8:cd:57:94:59:18:b2:83:c0:d2:76:
56:19:d6:09:69:6b:fe:44:a8:69:3f:9f:b2:6d:37:a3:e4:50:
8b:f5:36:87:a3:48:06:33:89:4f:df:bb:2b:b3:ac:2f:b6:d4:
62:d8:5f:42:6b:dd:4c:0a:4d:b7:ef:6f:d1:bb:b8:f8:3d:71:
39:c0:ff:1f:e5:a2:f3:2d:c7:52:0f:92:50:ac:4c:54:a6:8e:
ca:84:96:f7:02:10:37:e7:b3:57:50:02:3c:1f:f3:4f:b3:c3:
a2:19:1d:17:39:12:c3:71:58:db:3a:99:e0:bf:cf:34:e2:3c:
37:83:71:a5:a4:6c:d2:73:c0:aa:18:e8:fb:d9:ff:fe:3c:2a:
fd:fc:9f:3d:f6:94:71:aa:c5:5c:57:af:f5:10:cd:08:fd:dc:
38:a6:b2:53:41:ad:fa:e8:ee:28:08:36:18:b8:33:b2:25:74:
dc:07:73:f0:e9:ce:eb:b2:1a:5f:2a:1b:2a:47:0d:76:2a:1e:
95:f0:67:88:fa:b7:34:c2:c9:49:49:3b:f0:96:f5:db:69:8a:
ef:6f:a4:e2:ad:c3:65:9d:19:1e:2e:d0:df:1c:c8:a6:c9:b6:
be:a2:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 12:03:58 2026 by rpki-client