
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: PveqfbNLpHbL26JbiL/DKwnq/LPJ98AByB9f7qyEJ3o=
Subject key identifier: 03:6C:04:BE:1B:FB:E3:72:29:E1:4B:C3:15:3C:67:F6:44:17:0C:7D
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0AAD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A94
Signing time: Fri 30 Oct 2026 19:36:45 +0000
Manifest this update: Fri 30 Oct 2026 19:36:45 +0000
Manifest next update: Fri 06 Nov 2026 19:36:45 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: sFpcRA6orrbZs6EGBHPzYUGfAkW5zF/9Nmo0BkTw+yk=)
2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: RO8XU965Q2nWRURA/ptYvwo209Xqp/A7iL8PIgGHC18=)
3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: 9wUzSPF8YYBe+S5WNNXB2eNiXEXSPWj1vAoisvUHqWg=)
4: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: 3lYOlPOEsGvMDlpSCEL0lC4I+BLuIPoKZMsYKUnntbI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 19:36:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2733 (0xaad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Oct 30 19:36:45 2026 GMT
Not After : Nov 6 19:36:45 2026 GMT
Subject: CN=6ae4f1cd-0af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:b7:15:f8:21:af:46:ce:ad:0c:6e:d4:2e:
b2:8d:6a:27:09:07:da:df:80:18:90:e3:b5:32:63:
aa:69:5d:23:89:77:cc:5f:97:2f:c7:8b:ef:87:d2:
aa:a3:f0:f0:cf:aa:8b:2e:00:8c:f4:84:a6:dd:43:
b4:4a:0c:49:c3:60:32:9e:ec:95:0f:1c:d3:3b:53:
5c:ce:7d:a1:1c:ea:7c:2b:74:a3:60:85:ef:89:c4:
3d:b5:22:04:b9:96:13:4c:35:17:e3:77:fe:1e:5b:
23:e4:5f:db:03:68:85:54:5a:44:f5:82:7f:d9:bb:
45:ca:bb:81:aa:d5:4e:db:12:d0:7d:ee:15:4a:1e:
0b:dc:06:2f:7b:66:91:4a:f4:f8:fa:0c:25:73:24:
30:70:88:ce:3a:5d:bd:56:8b:19:ad:80:7b:dc:8d:
e8:7a:43:51:fb:81:65:76:bb:10:03:c9:15:24:e3:
8f:0f:cc:c8:5d:0d:90:09:c7:08:01:08:bb:e5:1b:
83:7f:ea:27:f1:4c:ac:52:1d:69:b8:0d:31:32:fe:
57:b1:52:7c:7e:65:10:ce:f8:68:8b:51:ed:19:1b:
db:42:a3:15:98:02:ec:d1:9c:a9:08:67:e0:29:60:
1d:13:5f:e7:5b:88:54:2f:56:d9:b9:b5:52:aa:4e:
a7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6C:04:BE:1B:FB:E3:72:29:E1:4B:C3:15:3C:67:F6:44:17:0C:7D
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:62:67:c2:f7:8f:cd:ad:ca:20:86:b5:e5:d8:25:ff:f3:26:
ea:d4:89:63:58:e9:be:ad:a6:03:90:68:b7:42:a1:a2:d8:58:
a2:7c:86:63:4f:bf:88:d0:a6:d2:e1:f6:86:79:9f:37:74:05:
70:8f:7a:42:4f:d1:e5:c3:4d:e4:f4:d1:e4:c9:70:a2:e5:c8:
34:ca:02:98:da:fe:7b:0c:99:89:8c:bc:6d:9c:89:43:8a:2d:
d5:83:9a:69:c6:98:e1:6a:9b:39:89:84:1e:85:a1:b1:cf:95:
2b:8f:4a:f3:26:21:e7:f5:95:af:72:37:8a:50:f6:d3:a2:fe:
da:f2:c8:86:b9:63:f8:f8:95:3a:fe:0d:73:0c:d7:8c:2a:9e:
d6:c7:ca:d0:d7:41:bb:71:80:bd:b5:9f:86:12:20:6c:8e:8c:
07:14:75:23:b9:f0:4c:66:e4:9c:70:a6:b1:08:54:4b:bd:ec:
50:de:49:cc:17:fc:32:2c:6b:42:8e:a5:0f:83:80:a7:27:31:
2c:34:bf:95:ae:5c:cd:25:54:5c:97:90:7c:26:01:92:ab:7e:
55:78:44:88:81:98:5f:b4:9c:e9:57:ae:27:50:5a:59:6c:5e:
6d:f8:c7:4e:46:23:1b:e6:1f:88:44:17:93:64:43:79:7b:9c:
f4:89:a6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 10:56:20 2026 by rpki-client