
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier: b6UhkluY6fE4fdE5Dh1v0Ok93pOo9INibzMPAeIhpq4=
Subject key identifier: BD:8A:AF:62:58:24:7E:3B:3B:74:5E:53:A7:0B:1B:94:6C:C1:B3:5B
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 0B19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number: 0B0F
Signing time: Tue 06 Oct 2026 19:26:10 +0000
Manifest this update: Tue 06 Oct 2026 19:26:09 +0000
Manifest next update: Tue 13 Oct 2026 19:26:09 +0000
Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: ZWURIaJ2XYwVqUCqRcdVYQXc988ERR9xkQNsZnH/jxY=)
2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2841 (0xb19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: Oct 6 19:26:09 2026 GMT
Not After : Oct 13 19:26:09 2026 GMT
Subject: CN=6ac54b52-d60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:48:63:bb:6f:27:15:a5:90:da:1c:00:59:
ec:d1:f1:af:82:f8:e6:95:2d:77:56:28:6d:d1:bd:
76:52:0d:df:6f:08:d7:77:2f:64:be:7f:54:0d:95:
4c:40:45:e3:ba:f0:7b:46:ab:89:88:d0:97:1c:06:
a4:dc:80:fb:9e:2c:30:66:bf:63:4b:b1:80:ca:35:
b0:78:5a:eb:3a:c6:b9:32:cd:69:f5:f3:d2:4a:76:
7f:fb:21:08:d5:54:5f:d6:14:f8:ae:a3:63:7b:06:
68:e3:24:d1:3c:13:39:34:3f:12:9d:4e:12:8e:a8:
26:f0:c7:51:a5:cf:44:96:e4:83:94:2d:70:ba:60:
85:9f:f6:99:92:de:48:8d:08:77:2b:63:c2:a9:cb:
bb:2b:cc:94:00:74:a7:d0:8e:d4:d0:47:a3:1c:3e:
c7:b2:f6:cc:8c:2a:76:8c:f6:eb:10:8d:db:14:a2:
bb:2d:44:8b:10:7f:50:99:55:13:bf:b4:13:f0:0d:
65:e8:50:9f:16:4f:89:a5:2e:3a:6e:b5:1b:2c:80:
a1:88:72:0b:56:70:97:39:79:d7:af:e5:e2:2d:ef:
b6:1c:09:8e:b3:0b:75:22:2d:47:c0:96:75:29:f1:
7f:27:7b:3b:13:70:98:18:02:08:21:b1:17:06:e3:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8A:AF:62:58:24:7E:3B:3B:74:5E:53:A7:0B:1B:94:6C:C1:B3:5B
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c2:fd:07:63:1c:5e:e7:02:8d:62:03:47:be:2b:96:53:87:
be:4e:c8:b9:36:c3:3d:ea:57:fa:53:43:2a:9d:fb:b2:62:47:
dd:0e:24:63:cf:9d:59:a1:bb:ff:1d:d5:12:61:f4:49:a8:52:
be:56:2c:c0:f6:4b:ca:d2:9d:6b:dd:e0:b3:95:7c:a2:3f:f0:
4c:2a:07:3d:84:aa:ef:4a:29:5a:34:b0:30:f1:4f:64:9c:e8:
20:a8:39:f4:bc:c2:82:f9:55:de:69:de:91:f3:65:f1:63:f6:
f7:2c:26:e7:04:c1:79:e1:00:82:56:ef:04:0f:0f:b1:b2:3e:
ba:2b:10:df:9e:f2:ed:98:e3:5f:3d:c8:f4:30:54:c5:99:8e:
41:b7:03:04:bb:e3:54:d0:a7:49:59:60:59:2c:8e:59:57:49:
1a:d9:86:03:51:4d:0b:c6:fe:4c:da:7f:81:60:25:78:5e:31:
d0:cd:94:d6:d6:fc:30:0b:f1:e2:58:01:e4:27:f6:88:b4:ac:
18:c7:ca:97:4a:c2:a4:22:fd:ae:5d:ae:9b:c1:63:23:4a:7a:
3d:88:a8:fe:c6:31:b6:3f:d3:20:2f:19:05:de:6f:8a:45:7b:
82:f7:4a:bb:97:50:6a:bb:5f:a5:84:a8:1d:49:c4:3b:72:c9:
68:fe:c5:e9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjYxMDA2MTkyNjA5WhcNMjYxMDEzMTkyNjA5WjAYMRYwFAYD
VQQDEw02YWM1NGI1Mi1kNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtolIY7tvJxWlkNocAFns0fGvgvjmlS13Viht0b12Ug3fbwjXdy9kvn9UDZVM
QEXjuvB7RquJiNCXHAak3ID7niwwZr9jS7GAyjWweFrrOsa5Ms1p9fPSSnZ/+yEI
1VRf1hT4rqNjewZo4yTRPBM5ND8SnU4Sjqgm8MdRpc9EluSDlC1wumCFn/aZkt5I
jQh3K2PCqcu7K8yUAHSn0I7U0EejHD7HsvbMjCp2jPbrEI3bFKK7LUSLEH9QmVUT
v7QT8A1l6FCfFk+JpS46brUbLIChiHILVnCXOXnXr+XiLe+2HAmOswt1Ii1HwJZ1
KfF/J3s7E3CYGAIIIbEXBuPe3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL2Kr2JY
JH47O3ReU6cLG5RswbNbMB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf
cWNaSk1PWkJteS03cTV5QncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAfML9B2McXucCjWIDR74rllOHvk7IuTbDPepX+lNDKp37smJH3Q4kY8+dWaG7
/x3VEmH0SahSvlYswPZLytKda93gs5V8oj/wTCoHPYSq70opWjSwMPFPZJzoIKg5
9LzCgvlV3mnekfNl8WP29ywm5wTBeeEAglbvBA8PsbI+uisQ357y7ZjjXz3I9DBU
xZmOQbcDBLvjVNCnSVlgWSyOWVdJGtmGA1FNC8b+TNp/gWAleF4x0M2U1tb8MAvx
4lgB5Cf2iLSsGMfKl0rCpCL9rl2um8FjI0p6PYio/sYxtj/TIC8ZBd5vikV7gvdK
u5dQartfpYSoHUnEO3LJaP7F6Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:38:53 2026 by rpki-client