
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: I5P6z4DDZJoDq7LzI8hpxz4CdsOmuMDuxB1rzouSQrA=
Subject key identifier: 2B:86:54:1B:0C:FC:99:80:8A:19:FC:EF:E9:60:C0:DB:AF:64:B4:0B
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0A59
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A43
Signing time: Thu 28 May 2026 19:33:36 +0000
Manifest this update: Thu 28 May 2026 19:33:35 +0000
Manifest next update: Thu 04 Jun 2026 19:33:35 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: UhOJPV8DzVoXT2uRapydFMQBTVoAEawKaaYI9PSu/9w=)
2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: ILtcBpKUIMyb1sUrv3wjwkYLjHTXDdZBLqBGymf477E=)
3: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=)
4: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: tdt9eteTC9tYcmoaSUex2GA2F4pEXRQmVpOqMgTTHvY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 19:33:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2649 (0xa59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: May 28 19:33:35 2026 GMT
Not After : Jun 4 19:33:35 2026 GMT
Subject: CN=6a189890-adb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:85:98:82:2b:8e:33:ba:8e:10:63:b6:9b:c8:
9c:81:ea:9f:c6:f6:9f:9d:3b:8f:f5:18:f3:5f:4d:
3d:a2:24:d1:43:20:81:f5:c1:1a:98:56:92:3c:7a:
1c:22:52:c1:22:e7:30:33:ff:bb:b7:65:53:1d:0b:
30:99:f2:9b:e9:d6:77:a9:58:82:9f:91:af:36:85:
4d:9a:c5:c3:c4:59:fb:dc:63:4e:30:35:8e:66:19:
6d:f1:6b:9f:9a:53:1d:65:ff:7d:2d:ba:b4:74:8e:
6f:1a:5c:f8:8a:e2:aa:ee:b5:3a:5b:05:2b:ab:d4:
16:43:fd:6c:9d:fb:22:68:42:5c:84:fa:97:19:9e:
9b:df:1e:3b:82:f1:17:61:7a:13:6a:a4:ea:78:b7:
bb:18:28:eb:12:e9:ec:3a:77:92:ec:d5:c3:bc:92:
60:ac:c9:38:ff:b2:02:45:99:aa:0b:5e:69:91:94:
71:6d:55:5f:7e:b4:94:2c:da:00:42:3a:8b:95:a6:
58:6e:0b:b9:1a:77:70:bc:ad:c0:92:b7:a4:de:70:
b1:53:8f:83:a4:80:98:f7:07:f1:82:d1:7b:c6:9c:
92:4f:ae:d2:6a:79:de:c2:82:2d:09:d4:b9:43:2b:
29:6c:85:27:7e:7b:17:f7:fd:11:76:85:b8:d2:fc:
34:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:86:54:1B:0C:FC:99:80:8A:19:FC:EF:E9:60:C0:DB:AF:64:B4:0B
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:f6:5f:49:3b:1f:40:9d:e3:eb:39:da:55:2c:2f:1a:9f:62:
cf:63:7a:f1:7e:c5:0e:25:9a:45:33:01:32:c5:8e:96:14:00:
5d:61:7e:f9:5d:c2:b3:cf:5e:b8:e8:63:02:67:4d:fc:f7:0b:
46:e2:85:5e:ea:56:06:27:5a:8f:e9:a0:1e:ed:bc:25:6f:a8:
e2:d4:3f:6d:d2:9e:3e:72:50:db:67:6d:a6:4e:13:1c:b6:fb:
69:03:b7:8e:d8:c5:3c:4b:8b:dd:99:36:df:a5:78:62:09:d5:
97:c7:e0:e1:60:1d:f0:b9:6c:ac:0e:bf:ee:9e:a4:10:f6:33:
60:0d:dc:82:71:37:8c:51:40:b4:8c:64:08:99:59:6a:62:0d:
d7:63:d8:87:d4:40:ac:1f:7a:59:a2:10:37:0b:da:33:22:d6:
08:00:ad:4b:1e:ac:7c:67:b4:60:17:e5:7d:e7:38:40:71:4c:
4f:ef:ef:c2:85:18:fd:37:e8:97:ec:06:fe:37:20:af:3e:96:
92:6c:0a:53:c2:72:05:61:6d:2a:0d:42:ab:a9:53:7d:33:36:
5d:d1:d8:cf:ab:e8:95:95:63:5a:f0:3b:b8:65:00:69:7d:87:
5a:a0:9f:ee:b2:8c:55:29:e5:a8:ca:99:19:6b:74:b7:a8:2c:
7e:ac:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 12:30:38 2026 by rpki-client