
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: UtLmyPmiuGy/Ymms0FL55xwkIm+FM/uOlUqyZ0/TpD0=
Subject key identifier: 54:8E:D8:7E:14:73:2F:8E:11:DF:83:D1:A7:3B:54:FA:50:2B:65:78
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0A74
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A5E
Signing time: Mon 20 Jul 2026 20:03:00 +0000
Manifest this update: Mon 20 Jul 2026 20:03:00 +0000
Manifest next update: Mon 27 Jul 2026 20:03:00 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: dqspPqLIF31Nv1y6YiDkf+6xM+sATcZfJt1QWLjnzaA=)
2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: ILtcBpKUIMyb1sUrv3wjwkYLjHTXDdZBLqBGymf477E=)
3: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: tdt9eteTC9tYcmoaSUex2GA2F4pEXRQmVpOqMgTTHvY=)
4: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 20:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2676 (0xa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Jul 20 20:03:00 2026 GMT
Not After : Jul 27 20:03:00 2026 GMT
Subject: CN=6a5e7ef4-7b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:3c:97:f7:b4:16:70:0c:8e:96:42:f7:29:
7a:4c:d2:42:2f:a7:e5:ce:c7:10:8e:4a:8e:d4:04:
0a:97:f8:cc:8e:37:4b:bc:e7:87:ee:1b:7f:aa:ee:
46:e1:6e:c7:73:b9:39:d0:a6:70:98:b0:67:7e:ed:
ea:ea:71:c3:b6:f5:30:95:92:a4:c0:4f:04:89:cb:
8b:2b:3c:cd:df:84:39:99:e7:4c:d0:54:20:8c:29:
60:67:89:d4:fc:1f:7e:d1:a4:07:db:cb:9b:dc:bb:
dc:13:4e:b5:dd:a1:4a:e7:cc:77:c1:71:fd:eb:60:
df:41:cd:b1:9f:83:0b:45:df:73:ff:56:b7:ff:4d:
e1:f8:61:35:b2:0d:bb:2a:a4:ff:68:e1:8d:94:b1:
32:51:91:39:f7:ec:21:f2:e5:32:46:18:71:c3:aa:
48:e5:30:94:01:23:4b:98:99:d5:bd:fd:3a:9f:bc:
b5:b6:24:72:71:8c:67:67:bb:a1:3f:66:d2:a2:9e:
8d:05:10:ac:c1:3e:1b:f8:c2:16:31:9f:7e:6b:65:
b2:e5:95:00:55:c8:68:fa:62:8e:7b:0a:a3:f8:79:
e7:5b:57:60:30:8a:96:64:8b:5d:78:19:2f:a2:1b:
8b:5b:60:da:5f:ec:04:30:26:29:6e:4e:79:69:05:
ff:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8E:D8:7E:14:73:2F:8E:11:DF:83:D1:A7:3B:54:FA:50:2B:65:78
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:9d:9e:13:18:29:29:a4:42:dd:26:e8:43:93:23:18:2e:6f:
d9:83:77:1b:74:51:30:79:3d:06:8f:b8:95:b3:5d:f8:da:9f:
f4:ab:6f:19:a8:3f:fa:ce:c0:9c:a4:b2:b7:1c:4b:22:b1:3f:
1d:f1:4c:f9:e6:7f:e4:fc:da:c7:71:06:fb:4c:01:ad:72:18:
77:6b:75:3a:e0:ee:c0:28:17:24:da:bb:47:7b:57:cf:df:8b:
08:1f:24:46:c2:34:56:d0:a0:7f:dc:c7:ce:9b:d8:c3:11:62:
46:6c:9a:15:10:5b:d0:b2:58:57:5f:13:b0:29:ec:24:1a:77:
8d:0c:08:27:85:cb:22:06:8d:c6:3b:56:f3:d2:71:39:ac:ab:
55:da:c4:02:83:53:5a:0d:28:43:41:7b:00:08:04:66:f0:76:
85:6d:a4:72:ab:b7:99:33:d9:c7:c0:50:a1:be:8f:57:91:50:
d9:b5:75:93:de:7f:00:46:0a:3d:4b:3a:ac:83:2c:82:fb:39:
47:4c:02:7b:cb:fc:d3:d2:9e:30:af:24:df:94:05:e7:20:4e:
0e:a4:a1:d9:64:4e:3c:7e:16:4a:56:d8:04:ab:74:74:ab:57:
c9:bf:ae:39:07:ed:d2:93:27:b9:6f:b4:ba:f4:43:c3:a6:b6:
22:ab:f0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:06:23 2026 by rpki-client