
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File: dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier: NqBKYIRCk1LmsgSXYJGCjEmSs87lnSqQZl4W1Cs4IkI=
Subject key identifier: BE:0E:26:5B:CF:EF:F5:3A:B0:7C:19:23:B1:23:B3:FF:82:03:16:B1
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer: /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial: 0674
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number: 065C
Signing time: Sun 26 Apr 2026 22:38:05 +0000
Manifest this update: Sun 26 Apr 2026 22:38:04 +0000
Manifest next update: Sun 03 May 2026 22:38:04 +0000
Files and hashes: 1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: B/KERAUdCKD+XMwssW24cEBIovldV9XblG0SXmGoRHg=)
2: 77A20CBE5BDC11F0BE617A76C4F9AE02.roa (hash: YSObMkEBXS6AGJ0rnW9kv0JoHduUwC+6vftJJjp6P4c=)
3: C2B9483E5BDC11F0AA574A7AC4F9AE02.roa (hash: rn2+8W21dCl6lnIgpMbqK+DXRVpz1iSyuq7a+y1/Ps0=)
4: B00A7E6A5BDC11F098C0ED78C4F9AE02.roa (hash: f58Ln8YgOMKXm+UFFvevk+7pdNWbPHPbGAfBZzTmoKo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 03 May 2026 22:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1652 (0x674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Validity
Not Before: Apr 26 22:38:04 2026 GMT
Not After : May 3 22:38:04 2026 GMT
Subject: CN=69ee93cd-d4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:0b:76:29:fc:d8:3b:31:91:e2:14:23:89:
d1:fa:6f:24:c5:25:5e:ae:36:a1:07:d8:0c:0c:c4:
c0:73:cd:98:42:c5:72:3f:8e:6f:06:91:05:a1:d3:
59:ac:96:f8:64:3c:ee:d2:0f:12:13:f1:35:a8:d2:
cc:f7:21:4d:2e:ce:eb:b1:f4:b4:de:d1:95:06:50:
b4:73:3a:1e:6b:71:70:ca:22:eb:cb:d1:28:eb:fb:
cf:a5:6d:9a:f8:39:cc:39:c6:ef:26:25:99:a8:06:
1c:2e:73:70:41:0c:ea:34:da:c0:26:89:5e:14:96:
da:86:df:96:04:3a:54:91:50:57:ad:c1:74:d3:69:
48:10:9c:ae:ce:ca:0e:6c:20:80:d1:31:7c:01:1c:
03:87:8a:4b:ff:26:13:21:0c:2d:cc:bd:9d:0c:91:
6f:11:30:59:5d:c2:8d:f4:5d:9f:4d:1a:94:aa:55:
42:7d:e6:51:03:80:67:20:c7:a8:f7:ea:18:37:57:
cc:d7:26:ac:13:78:f0:10:26:93:f7:75:25:ca:32:
9f:d8:a5:8a:fa:5f:37:08:7b:bd:27:4e:41:c2:7f:
28:c6:13:8f:e5:a5:34:bd:f8:61:c3:0e:67:3e:c3:
21:92:ee:a6:36:e0:27:a5:52:d0:a3:40:a4:3c:a5:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:26:5B:CF:EF:F5:3A:B0:7C:19:23:B1:23:B3:FF:82:03:16:B1
X509v3 Authority Key Identifier:
keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:e1:4e:3c:cf:09:ac:61:95:2d:6f:30:e2:91:09:64:8f:27:
1d:23:64:e6:63:f3:b7:10:6b:5a:04:d8:cb:ef:48:f6:66:ea:
0c:90:e2:60:20:af:fa:5b:50:f6:3a:5d:79:e5:83:63:c0:36:
c4:67:fb:69:80:f2:09:03:d3:d2:6f:8b:ed:d6:5e:9a:31:1d:
10:fd:da:3e:73:3a:23:d9:27:a7:ae:68:a9:e5:36:a8:10:f3:
54:be:e0:81:4d:cf:8b:2e:28:bb:a8:18:f7:f5:4f:4f:13:2b:
cb:51:6c:28:13:61:89:fa:73:98:bf:87:89:d7:20:96:61:05:
aa:fc:00:96:05:aa:1b:0a:73:2e:24:53:18:ea:df:61:61:2b:
21:48:12:8e:a2:0a:99:97:d9:a2:cc:d9:8b:52:3a:81:f5:12:
c4:4a:79:ca:3c:f5:18:86:13:1c:e7:3f:7b:5e:a1:de:b9:6f:
9d:2e:37:ba:96:7c:9a:f3:c5:fa:65:19:c4:ec:2f:d0:9c:bf:
89:63:99:99:c4:85:c4:a3:4d:8e:45:5d:8c:ca:60:54:f4:da:
46:96:7f:a8:64:a6:b1:e2:0f:c4:33:66:29:c3:c4:4c:46:c4:
40:42:43:96:03:93:73:f4:20:50:3d:14:d3:0c:22:41:46:2b:
7a:27:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 12:41:53 2026 by rpki-client