
$ rpki-client -vvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier: CZ2/nSkrzkjWzpQFLlweZpzb1pCGQ72JQ2uljBWBL2E=
Subject key identifier: 73:BA:70:32:49:B4:66:BB:48:70:3F:43:08:2B:DC:F6:87:99:80:78
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 0AD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number: 0ACF
Signing time: Tue 02 Jun 2026 19:26:50 +0000
Manifest this update: Tue 02 Jun 2026 19:26:49 +0000
Manifest next update: Tue 09 Jun 2026 19:26:49 +0000
Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: FM9AlkRwmkuLDkvyR0TUlGRRoYLyDvk+v3fFPCJByA8=)
2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Jun 2026 15:18:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2777 (0xad9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: Jun 2 19:26:49 2026 GMT
Not After : Jun 9 19:26:49 2026 GMT
Subject: CN=6a1f2e7a-ecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:5f:ee:b8:63:ba:43:12:10:42:5b:ac:fa:
9e:d9:65:f9:ff:c4:f3:12:d9:5b:ad:15:e2:e8:45:
ea:1b:3a:16:16:3f:32:b9:b5:91:90:7e:e2:01:7b:
d9:06:d0:55:6e:77:3a:72:bb:11:41:a9:83:92:88:
79:50:f0:2b:38:47:f4:1b:58:46:c5:dd:3c:f1:6a:
94:9d:00:8b:7c:32:73:56:e3:25:1c:0e:b6:4a:69:
bb:5a:8e:25:fa:70:b2:a6:35:c0:45:d3:59:36:4e:
73:aa:05:bb:6b:49:f4:a2:0d:2f:5e:97:6d:83:bf:
b8:3f:d1:80:29:f6:68:b8:a5:0c:93:81:60:29:d3:
4e:22:7c:f3:9b:e4:99:3d:3c:ce:79:ac:5b:9c:ea:
d9:57:f1:fb:f3:ce:2c:92:b4:51:c7:d5:33:8f:af:
37:00:9b:f4:c0:0a:c8:0c:62:21:1b:8d:d6:30:0f:
fb:fb:00:4d:2c:96:12:31:64:7e:29:f2:3b:a2:f6:
ca:09:44:da:cb:79:9a:37:1e:51:f7:ad:0c:ef:c5:
6b:c8:33:3e:21:f3:9a:c5:49:39:0d:88:34:1b:5b:
9c:f5:22:89:16:f7:81:eb:1c:37:e4:6b:62:cd:e1:
28:fc:c7:ed:df:41:73:cd:93:85:df:44:ef:53:6f:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BA:70:32:49:B4:66:BB:48:70:3F:43:08:2B:DC:F6:87:99:80:78
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:99:8b:84:59:db:79:5d:c0:da:f0:46:af:4b:76:eb:bf:de:
78:d6:e8:12:79:d6:11:0e:68:af:00:2a:24:5a:d8:cf:4c:dc:
bf:25:37:16:52:ff:f7:40:34:5d:5b:ee:1e:d1:c1:6c:dd:14:
db:5d:0f:47:71:19:d1:7d:c4:9b:42:cf:40:49:a5:37:0b:ac:
8c:c3:3b:06:95:2f:63:8b:19:da:26:77:6b:89:08:bd:94:8f:
1d:23:76:5c:a8:d3:95:00:c3:37:25:d2:66:6d:84:fa:3b:d6:
8e:15:13:ef:b7:63:03:43:47:1c:d7:45:35:84:32:72:4f:02:
7a:5b:54:f2:89:5a:13:f9:25:34:97:18:6f:24:a0:a3:8c:32:
19:67:10:45:b3:f3:27:2b:e1:29:fe:2c:8c:be:69:78:b4:a2:
86:19:64:3c:df:58:de:0b:3b:ef:63:07:91:84:a9:96:dd:69:
bd:db:06:52:27:3f:5f:ff:94:76:ee:58:b9:29:c9:d2:da:23:
01:fe:7a:b1:4a:11:c2:d7:e2:61:a1:24:c4:4e:92:44:79:cd:
56:14:12:39:79:74:29:58:66:e7:85:d2:e1:84:e4:27:0d:bd:
65:d6:fc:37:88:74:88:c6:60:20:3a:e6:bb:a8:d2:d5:3c:f8:
50:96:5b:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0E3QTYxMTAvBgNVBAUTKDkwN0IwMzhBREVDN0MzRkE5QzY0OTMwRTY0MTlCMkZC
QkFCOUM4MUMwHhcNMjYwNjAyMTkyNjQ5WhcNMjYwNjA5MTkyNjQ5WjAYMRYwFAYD
VQQDEw02YTFmMmU3YS1lY2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwnlf7rhjukMSEEJbrPqe2WX5/8TzEtlbrRXi6EXqGzoWFj8yubWRkH7iAXvZ
BtBVbnc6crsRQamDkoh5UPArOEf0G1hGxd088WqUnQCLfDJzVuMlHA62Smm7Wo4l
+nCypjXARdNZNk5zqgW7a0n0og0vXpdtg7+4P9GAKfZouKUMk4FgKdNOInzzm+SZ
PTzOeaxbnOrZV/H7884skrRRx9Uzj683AJv0wArIDGIhG43WMA/7+wBNLJYSMWR+
KfI7ovbKCUTay3maNx5R960M78VryDM+IfOaxUk5DYg0G1uc9SKJFveB6xw35Gti
zeEo/Mft30FzzZOF30TvU2+4ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHO6cDJJ
tGa7SHA/Qwgr3PaHmYB4MB8GA1UdIwQYMBaAFJB7A4rex8P6nGSTDmQZsvu6ucgc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQTdBNi80REI5NDQzQTcz
QjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdfcWNaSk1PWkJteS03cTV5
QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tIc0RpdDdId19xY1pKTU9aQm15LTdxNXlCdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QTdBNi80REI5NDQzQTczQjYxMUVBOUI4QzFGNUNDNEY5QUUwMi9rSHNEaXQ3SHdf
cWNaSk1PWkJteS03cTV5QncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwJmLhFnbeV3A2vBGr0t267/eeNboEnnWEQ5orwAqJFrYz0zcvyU3FlL/90A0
XVvuHtHBbN0U210PR3EZ0X3Em0LPQEmlNwusjMM7BpUvY4sZ2iZ3a4kIvZSPHSN2
XKjTlQDDNyXSZm2E+jvWjhUT77djA0NHHNdFNYQyck8CeltU8olaE/klNJcYbySg
o4wyGWcQRbPzJyvhKf4sjL5peLSihhlkPN9Y3gs772MHkYSplt1pvdsGUic/X/+U
du5YuSnJ0tojAf56sUoRwtfiYaEkxE6SRHnNVhQSOXl0KVhm54XS4YTkJw29Zdb8
N4h0iMZgIDrmu6jS1Tz4UJZbEg==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:48:30 2026 by rpki-client