
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: iUrFR3Ae/gkDV+THlkIsxvPsH45j0NEgq4NtXvfFDq8=
Subject key identifier: 3F:DB:EF:08:EA:99:C6:EB:36:60:79:40:62:C8:D6:68:52:4D:06:1F
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0A38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A22
Signing time: Tue 24 Mar 2026 19:32:51 +0000
Manifest this update: Tue 24 Mar 2026 19:32:51 +0000
Manifest next update: Tue 31 Mar 2026 19:32:51 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: Q1eKm+fmydzaoGmva0eAKU8qda4PZF3S6qumNBRxe14=)
2: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: tdt9eteTC9tYcmoaSUex2GA2F4pEXRQmVpOqMgTTHvY=)
3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=)
4: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: ILtcBpKUIMyb1sUrv3wjwkYLjHTXDdZBLqBGymf477E=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 19:32:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2616 (0xa38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Mar 24 19:32:51 2026 GMT
Not After : Mar 31 19:32:51 2026 GMT
Subject: CN=69c2e6e3-81d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:8d:5c:06:3d:41:ea:4b:4e:02:de:cc:c5:
7f:d4:8f:64:8d:a6:51:18:27:7e:61:1b:62:6b:1d:
fc:c6:fb:ef:2f:e5:07:98:17:05:4d:31:a6:79:6f:
4b:b3:61:93:d2:a1:7b:b4:b8:4b:0e:c3:bf:82:22:
d8:78:91:67:b6:fe:42:c8:da:e2:48:f0:b0:cf:8e:
68:6f:03:ad:32:0e:78:e9:43:6d:6e:24:db:f9:cc:
ac:73:68:a7:ae:9f:95:8d:85:52:e8:06:a8:32:b5:
5d:7e:a8:95:0a:1f:d7:36:fa:24:6e:de:cc:0d:3d:
3b:92:7c:f4:4a:c9:d3:cd:78:bd:15:a5:a8:6d:e5:
99:7b:21:aa:e4:b6:87:93:d4:f7:42:a8:3c:f6:3c:
85:0a:5d:af:13:18:05:47:28:b6:b4:aa:1b:66:84:
fe:94:a5:59:26:0a:41:3c:fc:cf:8e:5f:9f:04:53:
ce:b7:6d:a4:c0:81:0d:e5:1f:93:23:f4:61:3e:1f:
73:bc:20:4e:e1:98:8f:c1:8a:1c:9e:a5:a0:60:9f:
56:63:f4:d7:fb:3e:fb:67:4b:ad:41:0b:7a:90:b2:
f4:ac:92:ad:de:3f:18:5b:1b:58:a7:aa:87:6e:6e:
bd:c1:c9:59:7f:b7:f9:81:b2:eb:ad:1f:9c:10:13:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DB:EF:08:EA:99:C6:EB:36:60:79:40:62:C8:D6:68:52:4D:06:1F
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cb:cc:89:81:a5:ab:80:98:70:50:a5:a0:9c:c5:cf:90:5c:
ee:35:62:6a:34:66:42:45:e6:3b:51:55:be:8f:8a:f9:2e:3e:
18:4b:22:9c:98:97:a3:bb:e5:48:f6:49:3d:e5:8a:00:77:79:
17:72:5d:0f:88:db:78:3c:ed:de:51:33:b2:b5:15:b2:d8:56:
63:4e:71:69:27:30:8f:d5:79:c7:5e:8f:b4:22:51:4d:e9:86:
0b:6f:41:ee:05:b0:40:64:31:6f:4f:e2:85:b5:ac:01:cc:44:
20:db:b9:5e:27:9d:7c:6e:f9:c7:77:ff:c2:48:63:6b:20:65:
ae:a0:48:38:3f:43:32:45:ac:b4:75:e5:c6:17:92:0a:c4:28:
84:ee:bb:76:87:43:53:9a:c0:56:d4:63:54:eb:58:5c:65:5c:
9b:bb:a6:09:3e:77:bb:e4:6d:36:27:e2:07:dc:70:5a:c8:19:
6e:d5:f9:32:1e:2f:92:11:c5:3c:0c:4f:c9:2d:58:7a:7f:1d:
81:ef:b9:3b:64:7c:61:2c:c5:34:0b:64:d5:ea:3f:92:94:65:
95:85:c2:fd:91:9e:70:b5:10:6b:24:3c:e2:fe:2c:bc:1b:2b:
28:da:ce:5d:17:9a:d7:fa:47:b9:25:94:d8:62:4d:ce:a6:44:
f3:fc:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:42:46 2026 by rpki-client