
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: GzNnHuGttU5xITSnW3eTjspG7eeIq3xD9JGiTZylg5I=
Subject key identifier: C3:26:2C:76:FA:E3:EA:9D:E7:F5:FE:E6:3C:CF:8E:90:C0:48:6C:50
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0A42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A2C
Signing time: Sun 12 Apr 2026 19:38:57 +0000
Manifest this update: Sun 12 Apr 2026 19:38:57 +0000
Manifest next update: Sun 19 Apr 2026 19:38:57 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: Es79zW96cdvFHc8Y0HLPSdYNY1VL3CAMfhNFA9v6Xnc=)
2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: ILtcBpKUIMyb1sUrv3wjwkYLjHTXDdZBLqBGymf477E=)
3: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: tdt9eteTC9tYcmoaSUex2GA2F4pEXRQmVpOqMgTTHvY=)
4: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 19:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2626 (0xa42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Apr 12 19:38:57 2026 GMT
Not After : Apr 19 19:38:57 2026 GMT
Subject: CN=69dbf4d1-e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:c9:f6:74:96:15:b7:84:c2:3d:cd:6f:4e:
35:0f:45:39:3e:f6:f4:0a:37:ed:aa:f5:ba:f7:60:
ea:8e:d4:9e:93:bc:41:75:68:2a:67:85:b8:77:b4:
c0:0c:72:60:7d:16:ca:22:0d:12:a0:28:5e:79:54:
a3:97:e5:ef:4f:da:ab:88:23:8c:fd:50:66:16:2f:
44:a6:9d:d2:08:30:48:3a:2e:fe:92:25:6b:b5:c8:
c6:82:ad:8e:e1:91:5d:21:b8:d4:b6:34:ed:27:d6:
22:69:70:4d:de:ad:5b:e6:5d:2b:80:eb:1c:ba:ee:
69:d0:9b:08:4d:f7:57:4a:87:41:65:c0:d8:38:66:
66:3b:1c:87:2a:7e:c3:5a:74:8b:bb:3b:2f:5e:d8:
98:23:78:b2:95:c0:00:6b:97:f4:39:2e:53:e0:c6:
7c:cd:17:b3:09:a3:28:47:52:c0:5e:d4:d7:f3:61:
ee:83:c6:bb:8c:c9:8c:7d:2b:bc:65:e3:99:12:89:
fc:b8:af:73:c5:aa:05:84:92:83:ad:88:d5:bf:97:
9f:e2:72:4a:b2:52:30:32:45:ea:d2:f8:50:48:6c:
6f:6c:bc:21:02:5f:ca:07:47:e7:51:6c:6e:81:c3:
4b:e9:9c:06:cd:59:b5:72:fc:10:42:ff:95:03:f3:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:26:2C:76:FA:E3:EA:9D:E7:F5:FE:E6:3C:CF:8E:90:C0:48:6C:50
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a5:44:e3:85:b4:10:a6:08:d1:ad:b9:cc:b7:e5:ef:79:f8:
b4:82:d9:dc:e0:19:aa:b5:8f:54:82:5f:c1:ef:e7:78:35:20:
61:d0:75:07:74:00:8c:ae:25:c9:59:0f:96:51:e9:a1:dc:33:
4f:b0:87:3b:1d:89:a8:ed:b9:9d:5f:b9:ec:73:61:6d:23:c5:
3e:c2:1a:ba:88:00:f3:38:b3:c6:c3:89:c3:b9:95:fe:58:31:
20:cb:74:5a:40:1b:3c:2c:a8:ed:1c:ee:c0:8f:bc:e6:47:0a:
5e:01:81:40:64:f4:c0:c7:c7:e0:43:28:e1:c7:e5:2e:57:d3:
be:f0:0e:5f:78:1c:51:ce:7d:16:20:a0:2a:e3:c9:0c:76:91:
97:b2:3b:ca:e7:9a:25:b4:d8:1a:3d:fb:de:b5:f4:52:f8:41:
58:0e:ba:39:c1:7e:bd:88:2a:77:df:87:1f:ad:1e:90:c2:5f:
9b:f8:b2:e8:6b:f2:72:11:52:54:c9:a1:16:f9:a2:77:f0:33:
e8:3b:1c:0f:6d:5c:cf:5a:a6:86:98:5a:a0:9d:10:6e:66:ef:
5a:98:11:14:21:d1:8e:15:bd:55:4f:02:f5:d7:59:6a:e9:db:
ed:a9:13:b1:ab:11:d7:2b:d8:89:1a:91:a8:7d:ba:b7:2a:a9:
de:57:34:43
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4ODMxMTAvBgNVBAUTKDkyOTBDNDNEM0E5MjY3ODI5Qjk2MUNFRkU5QzExM0Iy
RkU0MDQ3MTgwHhcNMjYwNDEyMTkzODU3WhcNMjYwNDE5MTkzODU3WjAYMRYwFAYD
VQQDEw02OWRiZjRkMS1lNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQrJ9nSWFbeEwj3Nb041D0U5Pvb0CjftqvW692DqjtSek7xBdWgqZ4W4d7TA
DHJgfRbKIg0SoCheeVSjl+XvT9qriCOM/VBmFi9Epp3SCDBIOi7+kiVrtcjGgq2O
4ZFdIbjUtjTtJ9YiaXBN3q1b5l0rgOscuu5p0JsITfdXSodBZcDYOGZmOxyHKn7D
WnSLuzsvXtiYI3iylcAAa5f0OS5T4MZ8zRezCaMoR1LAXtTX82Hug8a7jMmMfSu8
ZeOZEon8uK9zxaoFhJKDrYjVv5ef4nJKslIwMkXq0vhQSGxvbLwhAl/KB0fnUWxu
gcNL6ZwGzVm1cvwQQv+VA/MxawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMmLHb6
4+qd5/X+5jzPjpDASGxQMB8GA1UdIwQYMBaAFJKQxD06kmeCm5Yc7+nBE7L+QEcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qjg4My82MkFDRkNBRThE
RkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0S2JsaHp2NmNFVHN2NUFS
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2twREVQVHFTWjRLYmxoenY2Y0VUc3Y1QVJ4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Qjg4My82MkFDRkNBRThERkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0
S2JsaHp2NmNFVHN2NUFSeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXqVE44W0EKYI0a25zLfl73n4tILZ3OAZqrWPVIJfwe/neDUgYdB1B3QAjK4l
yVkPllHpodwzT7CHOx2JqO25nV+57HNhbSPFPsIauogA8zizxsOJw7mV/lgxIMt0
WkAbPCyo7RzuwI+85kcKXgGBQGT0wMfH4EMo4cflLlfTvvAOX3gcUc59FiCgKuPJ
DHaRl7I7yueaJbTYGj373rX0UvhBWA66OcF+vYgqd9+HH60ekMJfm/iy6GvychFS
VMmhFvmid/Az6DscD21cz1qmhphaoJ0QbmbvWpgRFCHRjhW9VU8C9ddZaunb7akT
sasR1yvYiRqRqH26tyqp3lc0Qw==
-----END CERTIFICATE-----
Generated at Mon Apr 13 08:09:04 2026 by rpki-client