
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: PQAErM4SswrWJ2WyNKT3Zm9OYpwtbjCAvBFzZtvYiig=
Subject key identifier: 9B:5C:C1:D9:DA:22:B0:B0:34:C2:77:F9:28:EE:EE:F2:F8:19:80:8F
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0A91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A78
Signing time: Fri 04 Sep 2026 19:29:40 +0000
Manifest this update: Fri 04 Sep 2026 19:29:40 +0000
Manifest next update: Fri 11 Sep 2026 19:29:40 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: pjE0TgNAKIQUKMaoyndfWVTOsFQQRTbhNou/fKAqdj0=)
2: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: 9wUzSPF8YYBe+S5WNNXB2eNiXEXSPWj1vAoisvUHqWg=)
3: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: 3lYOlPOEsGvMDlpSCEL0lC4I+BLuIPoKZMsYKUnntbI=)
4: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: RO8XU965Q2nWRURA/ptYvwo209Xqp/A7iL8PIgGHC18=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 19:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2705 (0xa91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Sep 4 19:29:40 2026 GMT
Not After : Sep 11 19:29:40 2026 GMT
Subject: CN=6a9b1c24-90bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e7:98:d2:b1:59:b5:99:b8:a1:c2:5e:53:5c:
1d:8f:09:e0:ed:7d:cb:f9:b4:a3:c6:6a:7a:a3:7a:
da:a7:39:4d:51:55:b8:8f:35:d0:a2:2e:42:8c:71:
8b:27:7c:72:6b:0f:a5:6a:cb:fb:b0:8d:7b:12:cf:
44:bd:a4:bb:1a:7a:c6:c5:b3:df:39:dc:ed:2f:ec:
1d:b7:ba:25:54:6b:a4:e4:47:ea:a3:fe:64:2c:87:
fb:52:f1:89:80:a1:45:d0:02:24:dd:5c:24:92:ca:
a5:c0:0a:6d:ae:c6:4a:eb:25:63:d2:ee:7f:8a:c6:
ae:d4:8d:df:ae:04:63:69:c2:e6:d6:b2:15:1b:c9:
a7:50:74:c1:73:81:dd:cc:d8:cc:f3:0f:6a:dd:a8:
51:cc:2f:0e:c5:12:83:06:a7:7d:56:0b:16:cb:75:
9d:96:29:52:de:c7:54:f8:b7:12:d0:d6:1e:c5:ca:
d3:8f:aa:c0:d7:45:7a:99:0e:c6:4b:92:15:1e:0b:
b8:fe:78:52:61:b5:ec:86:e1:d4:c8:31:e8:68:e5:
76:db:8b:08:88:59:7a:d0:4c:1c:3c:f2:85:ca:5b:
8c:67:b5:ed:a0:2a:15:6b:d9:d6:22:26:95:eb:33:
bb:30:0b:8c:d4:40:72:57:3a:9e:c0:78:ec:2d:3a:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5C:C1:D9:DA:22:B0:B0:34:C2:77:F9:28:EE:EE:F2:F8:19:80:8F
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:33:5f:97:18:08:5f:a8:ee:b2:12:b0:fc:9a:04:14:c9:8f:
28:5c:95:32:1e:5f:9b:68:b3:8a:0d:30:d8:5a:04:c9:2e:06:
99:10:85:e2:93:c5:a6:b9:84:d2:dd:03:24:a2:f3:8f:0c:8b:
81:9b:a6:ae:3e:f4:92:91:7c:8e:d4:e6:fc:48:aa:49:a6:b3:
2c:4b:d9:77:5b:b8:e3:72:19:75:4f:bf:ae:5e:09:6b:36:3e:
1a:95:3a:eb:d8:ff:7e:66:4a:e1:c0:5c:8f:27:70:c8:a7:e6:
f8:7b:25:5d:68:79:67:dc:e3:fa:35:b4:23:40:f3:06:1d:2e:
00:0f:39:da:10:03:f9:5c:ef:44:59:3b:8f:a9:7c:a8:96:20:
4c:8f:c6:d2:fc:04:6d:33:d0:3b:bf:90:01:b1:03:2e:9a:44:
80:5c:da:01:bd:56:4c:16:50:fe:3f:65:9d:14:0a:d8:e3:c3:
59:83:45:d1:44:a7:74:0d:70:e6:d5:af:75:74:41:a3:a0:fb:
11:f7:17:99:67:92:67:d7:a5:00:e8:68:b1:15:84:2b:00:97:
9b:35:4f:d9:fa:d4:76:3f:9d:51:7b:e6:2c:26:e3:2f:ce:ad:
e4:84:0e:75:82:ba:8a:96:c3:fc:fe:4b:9a:22:37:e4:0c:5e:
af:cd:01:97
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4ODMxMTAvBgNVBAUTKDkyOTBDNDNEM0E5MjY3ODI5Qjk2MUNFRkU5QzExM0Iy
RkU0MDQ3MTgwHhcNMjYwOTA0MTkyOTQwWhcNMjYwOTExMTkyOTQwWjAYMRYwFAYD
VQQDEw02YTliMWMyNC05MGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAieeY0rFZtZm4ocJeU1wdjwng7X3L+bSjxmp6o3rapzlNUVW4jzXQoi5CjHGL
J3xyaw+lasv7sI17Es9EvaS7GnrGxbPfOdztL+wdt7olVGuk5Efqo/5kLIf7UvGJ
gKFF0AIk3VwkksqlwAptrsZK6yVj0u5/isau1I3frgRjacLm1rIVG8mnUHTBc4Hd
zNjM8w9q3ahRzC8OxRKDBqd9VgsWy3WdlilS3sdU+LcS0NYexcrTj6rA10V6mQ7G
S5IVHgu4/nhSYbXshuHUyDHoaOV224sIiFl60EwcPPKFyluMZ7XtoCoVa9nWIiaV
6zO7MAuM1EByVzqewHjsLTqsHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJtcwdna
IrCwNMJ3+Sju7vL4GYCPMB8GA1UdIwQYMBaAFJKQxD06kmeCm5Yc7+nBE7L+QEcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qjg4My82MkFDRkNBRThE
RkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0S2JsaHp2NmNFVHN2NUFS
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2twREVQVHFTWjRLYmxoenY2Y0VUc3Y1QVJ4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Qjg4My82MkFDRkNBRThERkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0
S2JsaHp2NmNFVHN2NUFSeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAMjNflxgIX6jushKw/JoEFMmPKFyVMh5fm2izig0w2FoEyS4GmRCF4pPFprmE
0t0DJKLzjwyLgZumrj70kpF8jtTm/EiqSaazLEvZd1u443IZdU+/rl4JazY+GpU6
69j/fmZK4cBcjydwyKfm+HslXWh5Z9zj+jW0I0DzBh0uAA852hAD+VzvRFk7j6l8
qJYgTI/G0vwEbTPQO7+QAbEDLppEgFzaAb1WTBZQ/j9lnRQK2OPDWYNF0USndA1w
5tWvdXRBo6D7EfcXmWeSZ9elAOhosRWEKwCXmzVP2frUdj+dUXvmLCbjL86t5IQO
dYK6ipbD/P5LmiI35Axer80Blw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:31:20 2026 by rpki-client