
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json)
Hash identifier: dpAgvBhT8BKoKC7VErryfJNfCfdiqBn80wxNp9r5XYk=
Subject key identifier: C4:80:4C:CE:2D:BA:C0:BB:38:90:68:78:6F:9C:2A:3E:36:43:52:57
Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Certificate serial: 25D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
Manifest number: 25B6
Signing time: Sat 04 Apr 2026 15:40:40 +0000
Manifest this update: Sat 04 Apr 2026 15:40:39 +0000
Manifest next update: Sat 11 Apr 2026 15:40:39 +0000
Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: SvhJABQQzRtvEd9GOMKGRTdS5r19oeR876Rzv+MfDEo=)
2: 657B47B61C2F11E880C4ED7BC4F9AE02.roa (hash: 1ghEv7poKGW1kihPQdkAbm84XN1Xrk7KTTqEVU0zlnI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 15:40:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9681 (0x25d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Validity
Not Before: Apr 4 15:40:39 2026 GMT
Not After : Apr 11 15:40:39 2026 GMT
Subject: CN=69d130f8-cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:00:52:22:6f:3e:76:7c:36:a7:90:20:4b:
90:5d:ab:22:16:c0:f6:cb:9e:be:10:f3:38:51:2d:
cc:da:ca:77:83:3e:0f:98:f7:ed:f0:b8:cc:9d:8b:
ce:8a:f1:fe:54:be:b0:a7:3a:d7:96:a4:df:46:c2:
8f:99:d9:61:78:12:6b:a5:be:94:c0:0d:8b:11:cc:
d7:ca:f9:c6:b7:dc:da:99:91:72:d4:8c:a7:95:dc:
dd:f0:05:10:c0:7a:fe:74:f2:c5:13:2a:a7:42:61:
c4:93:6a:14:bc:3a:73:85:96:39:ff:42:90:2b:04:
b4:e6:d6:e8:68:ce:a2:00:f6:df:7f:fe:3d:c8:29:
4b:dd:f5:c5:1a:d8:fd:e7:50:96:28:59:20:e3:96:
c9:ab:e4:f5:d6:46:f4:23:85:7d:c4:75:2a:ef:87:
05:81:fa:e2:97:51:51:35:9e:8d:a1:8b:a1:41:65:
da:e7:bb:45:5d:cb:d1:ca:1f:45:24:b2:c3:b1:ea:
bf:d8:ec:cf:bc:e5:50:8e:c8:5b:da:fb:78:fe:3a:
90:bd:4d:f5:c6:7b:ed:86:ea:bf:6d:e4:3e:1d:32:
8a:8e:5d:38:35:48:44:be:a1:49:0d:0c:ad:92:7b:
55:88:3c:cf:86:be:32:f2:10:02:e0:70:5d:c1:25:
1c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:80:4C:CE:2D:BA:C0:BB:38:90:68:78:6F:9C:2A:3E:36:43:52:57
X509v3 Authority Key Identifier:
keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7d:ea:e6:45:55:c0:fb:c8:16:e1:72:26:d0:2e:3b:e3:5b:
f4:82:c5:86:4f:4d:39:e1:30:b2:4f:8f:ff:64:94:85:ba:96:
4c:44:da:6d:04:e9:84:e5:2e:f7:2b:6b:a0:45:bd:c9:c2:a1:
d4:dd:4d:a6:33:5f:24:6f:a1:bc:99:54:bd:57:7a:7a:f4:3c:
39:d1:93:78:a4:d3:3b:4c:70:f8:36:80:14:71:57:84:bc:10:
fc:c8:2b:e0:86:f7:1b:04:5a:bc:7e:01:b1:0e:9c:3a:cd:7b:
b0:9e:28:15:d8:7f:90:4e:71:eb:20:04:26:82:70:40:a9:ba:
09:2d:d4:29:cc:b3:0d:8f:cf:68:87:34:09:d0:02:fb:6f:6f:
37:9f:d1:21:97:c7:9a:64:2f:6a:eb:9e:4b:45:3a:5a:a5:3b:
d4:a7:15:d5:f2:ab:ea:71:8c:bd:77:5f:71:37:71:ce:a9:9d:
00:02:12:f3:7c:d8:89:96:50:f0:69:44:5a:7a:b1:c0:70:55:
9f:97:59:e0:1f:20:9b:1b:c2:89:2f:84:87:c1:13:d4:42:92:
d4:71:67:b0:ec:dc:36:2b:7c:65:5c:88:8b:b0:54:a3:30:95:
04:84:56:cd:2a:05:48:61:04:43:5c:80:1f:8c:b1:e2:db:9d:
e7:2a:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:36 2026 by rpki-client