
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
File: kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft (raw, json)
Hash identifier: p08gA5q9tV5SUyfuT0MHbmDFnH/L8CayC8F2G02qieg=
Subject key identifier: 3F:70:7C:4C:B6:0D:83:A5:50:B7:7F:75:EF:7E:B4:C9:A4:9B:FD:24
Authority key identifier: 90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
Certificate issuer: /CN=A913A7A6/serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Certificate serial: 0B17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
Manifest number: 0B0D
Signing time: Fri 02 Oct 2026 19:34:00 +0000
Manifest this update: Fri 02 Oct 2026 19:34:00 +0000
Manifest next update: Fri 09 Oct 2026 19:34:00 +0000
Files and hashes: 1: kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl (hash: dIqaTL4pilHgWQEZJMkd0CNGVYn/NfXckLW/ImIEWGo=)
2: D4AECB7A701611EF824F7281C4F9AE02.roa (hash: gSKNogEshZnmN/3zaUCV8zHvFUQUbigi4NIpUM9EKFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 19:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2839 (0xb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913A7A6, serialNumber=907B038ADEC7C3FA9C64930E6419B2FBBAB9C81C
Validity
Not Before: Oct 2 19:34:00 2026 GMT
Not After : Oct 9 19:34:00 2026 GMT
Subject: CN=6ac00728-7b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:ee:4d:a9:cf:4e:20:51:a7:aa:2c:69:ce:
16:ca:1f:3d:8a:d8:73:3a:8e:07:1b:cf:91:09:28:
16:b1:10:8a:c5:22:3e:9b:e6:da:2d:0f:d7:4f:ec:
9e:8b:cf:16:a3:0d:ab:24:fc:40:b5:a9:5b:e1:a8:
b8:20:f6:48:ad:80:30:a8:5b:c3:9b:71:2d:75:ac:
f2:1a:e1:58:ab:5c:95:d2:55:ba:fc:1e:81:4d:e1:
02:aa:b2:f4:03:49:fe:25:8e:80:a1:d6:8a:61:5a:
74:18:5e:63:b3:87:e2:b6:41:62:36:57:07:29:12:
9f:c9:68:f1:1b:73:1f:86:75:72:4c:11:69:89:e2:
96:d9:91:9f:ef:ac:d4:35:88:7d:77:da:fe:03:97:
b4:6a:6d:71:f3:60:d7:b9:ac:14:1f:90:3e:b5:cb:
cd:f2:83:9f:76:eb:b8:28:a0:d8:d7:4c:f8:2f:5b:
73:07:3f:ad:f1:45:6f:ba:41:73:4f:f8:2d:c9:70:
be:f0:14:92:9f:86:f4:e7:fb:bf:77:53:77:da:a4:
a6:f0:eb:a9:d0:64:22:51:f5:c3:68:73:99:6d:7e:
29:9c:c0:8f:b2:83:41:43:56:6b:43:79:21:cb:4d:
59:5e:bd:81:5e:53:d0:eb:e8:8d:2e:ef:8e:2f:a9:
1c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:70:7C:4C:B6:0D:83:A5:50:B7:7F:75:EF:7E:B4:C9:A4:9B:FD:24
X509v3 Authority Key Identifier:
keyid:90:7B:03:8A:DE:C7:C3:FA:9C:64:93:0E:64:19:B2:FB:BA:B9:C8:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kHsDit7Hw_qcZJMOZBmy-7q5yBw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A7A6/4DB9443A73B611EA9B8C1F5CC4F9AE02/kHsDit7Hw_qcZJMOZBmy-7q5yBw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:11:12:06:ec:55:8a:5f:20:d7:cd:1b:2c:59:66:75:4a:
67:d4:dd:f3:e3:fc:c1:77:a7:28:42:cd:91:f3:bb:86:de:fb:
98:40:e2:4c:8d:e6:4f:6d:c4:ac:41:e9:a0:33:da:ce:0a:d8:
d8:49:1d:e8:e6:c6:25:48:57:81:1f:71:34:32:05:1b:33:2a:
bb:9c:b6:12:c3:91:59:ad:31:70:e7:12:3c:15:b3:39:8d:ca:
05:8f:d6:ae:f5:60:78:a3:a3:b3:00:c9:9b:0b:b5:b1:ab:d1:
18:e1:2d:ca:e3:92:e9:32:b4:89:0d:31:cc:e3:f0:4f:e4:e9:
2e:f0:e2:e8:5d:fb:15:9a:41:7d:c9:8d:38:c7:f9:9f:19:7d:
72:ab:ca:28:26:62:7e:61:9e:59:91:fd:49:53:6a:ac:f2:06:
ea:eb:e3:ec:b8:67:8b:c1:18:88:95:df:6e:af:be:15:1b:c2:
f7:3d:d5:e2:da:9e:fc:ff:06:24:9c:29:2f:08:2a:19:c5:73:
67:48:49:43:fa:77:ae:f6:ed:57:4b:33:75:27:e7:cc:0c:1e:
88:1b:97:5c:a9:4f:95:78:d6:80:db:63:a6:9b:95:66:01:15:
b8:ea:ea:aa:12:e5:ba:6d:98:88:92:07:8c:09:40:31:2c:93:
00:65:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:33:57 2026 by rpki-client