
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: DCwKVEH7x+V1FJdOxdpyudWHFqK3yty/D6D5w8ds0pQ=
Subject key identifier: D3:46:8B:E7:AD:CA:48:2C:6A:BD:5B:B7:27:17:62:B6:29:10:B2:AD
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0AA1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A88
Signing time: Tue 06 Oct 2026 19:41:18 +0000
Manifest this update: Tue 06 Oct 2026 19:41:18 +0000
Manifest next update: Tue 13 Oct 2026 19:41:18 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: QsdlPleypqQfpk2t95cwU0fNh/d/UYhFCOEG6rI6meo=)
2: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: 3lYOlPOEsGvMDlpSCEL0lC4I+BLuIPoKZMsYKUnntbI=)
3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: 9wUzSPF8YYBe+S5WNNXB2eNiXEXSPWj1vAoisvUHqWg=)
4: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: RO8XU965Q2nWRURA/ptYvwo209Xqp/A7iL8PIgGHC18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2721 (0xaa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Oct 6 19:41:18 2026 GMT
Not After : Oct 13 19:41:18 2026 GMT
Subject: CN=6ac54ede-9274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7a:ce:3b:a2:ed:2c:63:f4:e1:d0:d6:fd:13:
6e:f3:8e:27:fd:06:95:bd:cc:45:a7:62:73:11:23:
04:f6:d8:2c:04:c0:b2:23:65:59:54:c1:d5:65:28:
26:a4:2d:e6:ed:94:b8:e0:d6:78:84:d1:f0:50:f2:
ae:39:79:0f:df:ab:0a:bd:74:e8:e5:83:24:67:16:
9b:f9:dc:af:f8:7d:ca:18:df:86:46:60:5e:5d:02:
00:8d:e8:58:9c:81:af:23:e1:ea:d6:25:83:71:7e:
49:a8:96:58:c4:7e:4e:c2:82:e0:d4:1a:1f:e2:b9:
df:4a:45:37:21:0e:3c:6a:84:7b:5b:d4:72:ac:17:
43:10:0f:61:f4:87:da:58:b6:49:be:62:c1:89:c5:
f5:3b:b3:7c:53:d8:4e:ec:ff:dc:91:59:ea:a2:6e:
52:7c:8e:fb:b2:28:bd:8e:a1:ba:ae:08:6b:85:91:
ba:42:c7:f7:b9:fc:07:cd:b4:5a:61:f8:a9:69:00:
f6:60:69:61:08:25:a2:e7:5e:b1:70:34:44:0f:67:
29:8e:03:a6:60:54:b3:c3:eb:87:71:3a:b7:58:79:
02:ff:9b:0b:7e:2e:86:53:61:48:62:68:c1:20:03:
9b:29:c5:f4:1f:8e:90:49:6b:5b:0e:8f:9f:82:e6:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:46:8B:E7:AD:CA:48:2C:6A:BD:5B:B7:27:17:62:B6:29:10:B2:AD
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:94:27:0b:33:a1:f4:36:c4:6b:d2:64:0d:23:3c:2c:3c:84:
c5:33:41:9d:6b:55:e1:60:e4:8a:4e:57:66:f2:9a:dc:56:9c:
80:3d:82:a5:da:67:97:7e:22:8d:8b:a8:f1:49:64:53:94:bf:
4b:95:01:65:50:b2:33:fd:43:8e:b9:df:f3:c6:b7:70:98:12:
f5:25:44:3e:ee:d0:bb:95:15:41:b8:78:f1:fc:5b:8f:6c:94:
21:7a:54:76:c2:a4:9f:17:b2:f0:32:24:f0:7e:d9:a3:e2:9e:
f3:e9:67:bb:94:4c:a4:1f:4a:78:04:12:80:05:5a:92:ea:36:
b6:6b:d0:7f:b8:d2:f8:bb:6c:a5:a6:34:19:92:22:92:88:95:
9f:ba:86:fb:03:fd:9a:df:37:c3:dd:df:60:f7:eb:16:8e:9e:
2f:39:b7:1a:24:ec:bf:d3:4a:aa:db:3d:80:31:17:3e:9c:f8:
61:f4:bd:a3:c3:1b:4f:1b:17:3b:e3:e5:5d:30:44:13:92:95:
04:d5:ce:4c:e1:b7:75:7f:80:53:e7:da:55:7b:df:32:1b:6d:
25:ee:ef:0f:84:b7:30:7e:f8:8f:f5:23:b3:fb:6c:bf:08:1b:
fd:af:75:e8:8d:d1:32:69:61:91:c7:e7:2a:80:5c:1e:a5:63:
9f:ea:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:17:49 2026 by rpki-client