
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json)
Hash identifier: Pp09BXcHUCm5ziiWjVpL0qiuhMOAzdXbJHBJEl4+5xw=
Subject key identifier: 0C:45:AC:FA:01:47:A3:2D:59:CB:CB:FF:69:EE:15:1F:9A:F9:E5:E6
Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
Manifest number: 0130
Signing time: Tue 07 Jul 2026 06:45:57 +0000
Manifest this update: Tue 07 Jul 2026 06:45:57 +0000
Manifest next update: Tue 14 Jul 2026 06:45:57 +0000
Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: Q3q0IdyYr4YSpT284eMTytKk5iW41JdOKphbwv3fKQI=)
2: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: 9kbxY7GStAtFWFHK4CxfmaeBQ9+u1bor9LZiasl/Umo=)
3: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: E7TlvkUoTphr1MZbzvUv/cwDmCu/Xr2dNOXdFLK7X2o=)
4: B2BB920001CE11F182556E3A746F56BC.roa (hash: jrD4pqdoiKJI9NO9x+4SiaHnYuar82tQXf2WpPGDnIU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 06:45:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13
Validity
Not Before: Jul 7 06:45:57 2026 GMT
Not After : Jul 14 06:45:57 2026 GMT
Subject: CN=6a4ca0a5-33d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:73:fd:cb:bb:e3:20:59:3a:10:f9:e7:00:
ce:2f:b6:6a:65:c7:00:e0:b8:59:b8:da:c8:88:f2:
f6:79:b0:97:1a:22:f7:19:5a:6b:4a:a4:c3:f4:e0:
6d:a2:65:88:b7:dd:db:6f:3e:39:a8:32:d1:b6:9e:
40:86:10:be:b6:65:83:a5:11:da:c1:ed:68:3a:d9:
e4:bf:c8:ca:9e:48:90:c5:fb:5d:c1:84:30:62:5a:
7f:ef:4a:1d:a6:b4:47:65:0f:51:bd:4d:bc:34:6c:
6d:ab:9e:66:af:88:30:ba:1a:3a:19:7f:f3:5f:b8:
cf:47:ec:f0:0e:d9:cf:1f:32:f5:5f:08:92:9f:a8:
04:06:98:7c:6b:cb:c8:9a:d0:75:16:68:15:b5:cb:
12:f7:45:7e:8a:07:96:c3:cd:b2:07:f1:11:2b:b4:
9c:a3:f2:21:e8:8c:48:be:ff:e0:ec:4e:64:6f:96:
3f:63:03:22:87:6d:b0:b5:92:39:66:c6:b8:e1:14:
7c:ae:d5:c1:64:57:39:0a:03:8d:cb:64:ce:fb:fa:
68:b5:a6:dc:4b:79:48:1c:72:80:43:14:a4:56:99:
1a:40:f9:c4:f1:e9:99:d9:26:5d:30:28:12:87:89:
52:f1:b1:7c:80:c2:d3:7c:90:90:e4:6d:4b:eb:74:
84:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:45:AC:FA:01:47:A3:2D:59:CB:CB:FF:69:EE:15:1F:9A:F9:E5:E6
X509v3 Authority Key Identifier:
keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:f8:f8:3f:e3:1b:b7:07:e4:26:ac:9d:1b:0a:9e:a9:7a:52:
fd:17:ca:a6:4c:39:d0:08:96:80:64:6b:af:5d:47:6c:34:d3:
48:ca:09:a4:48:ec:08:e5:a0:4a:99:70:83:3b:19:26:c7:73:
9c:fe:a8:71:d3:29:a9:b6:5b:34:fa:a7:9f:b2:1d:8e:96:37:
38:d6:35:03:ca:15:6e:9d:fc:2f:26:6b:a5:61:12:fc:27:24:
8c:19:e8:32:68:a7:01:b1:b7:2b:ba:28:7b:38:5e:b8:79:b0:
6a:fe:56:24:e2:34:9f:59:ea:2a:7e:fe:a0:18:97:fc:6f:91:
90:d3:68:f7:70:dd:68:be:3b:b5:9f:ee:c4:38:f9:44:cd:0a:
01:f2:16:3e:b4:28:de:a4:a4:3d:51:75:ac:28:cb:16:82:5d:
58:82:bb:dc:f8:c6:db:0f:ce:7e:ef:92:57:91:a8:87:4e:59:
da:65:f9:ce:85:87:2d:d5:79:89:a6:cf:29:4a:d6:31:d6:2e:
58:27:cf:3d:03:47:b1:93:28:0b:0e:b4:37:b7:58:88:6e:c9:
4e:1d:39:68:b9:69:61:e3:fa:f1:b8:f2:26:cf:78:5f:f9:22:
fb:fe:b7:26:43:a0:87:da:53:d0:72:93:81:3a:4b:da:fb:e3:
f6:06:98:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:04 2026 by rpki-client