
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
File: k-dhjM_iZIDXknoYcbrYP--d9IQ.mft (raw, json)
Hash identifier: t5d2T4IPXcnGilW7WpE0QwVSr3F1FEj7PDmqZx4+mVA=
Subject key identifier: A6:9C:AD:E2:6E:96:22:C8:AA:30:3F:F1:B9:F1:BF:64:E8:9D:A4:8B
Authority key identifier: 93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
Certificate issuer: /CN=A915F438/serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Certificate serial: 2612
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
Manifest number: 25F5
Signing time: Tue 28 Jul 2026 15:49:13 +0000
Manifest this update: Tue 28 Jul 2026 15:49:13 +0000
Manifest next update: Tue 04 Aug 2026 15:49:13 +0000
Files and hashes: 1: k-dhjM_iZIDXknoYcbrYP--d9IQ.crl (hash: TK68KqYVJMIfTwoK/7sUGAa9cNM5oCYUpSmdnsdVqo0=)
2: HJcBrTXPZGVzHql6WzM0Jfe1s9M.asa (hash: sXUu9jf6RoX6yjR1BZkPbpniLdCE9QRG2OhNISy6O7M=)
3: D872E50C86EE11F19E006003A7EE528E.roa (hash: OdA0q8Xqcugi+KRO0TZSlo4VkUhBeRX9z+VAyH1oHuw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9746 (0x2612)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F438, serialNumber=93E7618CCFE26480D7927A1871BAD83FEF9DF484
Validity
Not Before: Jul 28 15:49:13 2026 GMT
Not After : Aug 4 15:49:13 2026 GMT
Subject: CN=6a68cf79-2cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:aa:2b:d0:f7:ac:58:bb:d0:5e:18:2a:cd:
e0:75:db:8e:1d:fc:d0:cb:b1:a4:b4:8b:d0:a5:01:
26:40:6e:54:82:98:2f:35:36:e4:56:ef:bd:0c:ae:
57:79:21:93:97:7a:4b:30:39:52:de:d2:41:ec:d2:
68:3f:68:9b:b1:60:71:8a:51:72:9f:dc:59:c4:19:
f0:f2:76:be:c2:47:95:0a:fc:b5:00:e9:92:b6:8b:
b5:13:38:cf:12:d2:f7:c2:69:75:b0:33:b4:0d:e1:
28:d4:d7:34:a7:79:30:c3:03:29:87:76:35:40:28:
2e:4d:0e:df:39:06:b1:92:0e:0f:f1:e1:fc:b4:a7:
09:37:6c:15:5c:a3:96:0a:32:f9:53:aa:4d:ba:cd:
de:4f:22:18:ce:56:cb:4a:98:01:b6:41:8a:64:c8:
a8:90:4d:2d:2a:56:bc:b7:4f:5b:c0:67:ef:46:50:
5f:b9:86:12:e6:81:e4:48:5e:74:1a:dd:31:2f:db:
c1:5a:bd:18:a1:84:07:9b:3b:2b:d5:d1:f9:53:86:
08:9b:67:93:60:2c:c2:c2:1f:6c:71:7f:46:32:a4:
ce:86:e8:5b:88:c9:4b:2a:ed:46:30:af:8b:66:5e:
45:37:e7:8d:26:6d:78:40:60:08:aa:10:39:5e:3a:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9C:AD:E2:6E:96:22:C8:AA:30:3F:F1:B9:F1:BF:64:E8:9D:A4:8B
X509v3 Authority Key Identifier:
keyid:93:E7:61:8C:CF:E2:64:80:D7:92:7A:18:71:BA:D8:3F:EF:9D:F4:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k-dhjM_iZIDXknoYcbrYP--d9IQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F438/B7EF53FE2B4E11E5ACBBDF3AC4F9AE02/k-dhjM_iZIDXknoYcbrYP--d9IQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:27:0c:9f:9b:3f:aa:1a:99:85:69:75:44:82:15:63:7e:5c:
38:9a:c2:a8:3b:e8:2d:c9:95:00:01:0f:57:a1:fb:b7:8b:ab:
3a:2d:ea:19:d3:1a:c3:8e:c9:f0:f8:5f:e6:ad:d2:80:16:0a:
a4:dc:a9:77:e4:5b:8f:36:89:cb:1e:c7:b0:b5:49:0a:49:ea:
44:11:eb:95:e3:5d:20:12:47:d9:13:d5:d6:6b:8f:89:34:d1:
72:a0:ae:60:c6:e2:d0:ca:f0:d7:54:1a:97:c2:c5:7f:80:88:
f9:ba:fe:85:4f:17:3e:a0:30:19:53:70:44:7c:01:a0:79:a8:
07:7e:7f:f4:54:91:84:8c:d6:f9:fa:a6:fd:4f:a4:ab:f5:cc:
18:33:ad:bd:e0:5f:45:bf:94:87:e7:9d:c7:5e:34:14:6c:ec:
14:86:5a:04:72:1b:c2:31:18:3d:aa:dc:f3:36:99:7a:99:39:
41:41:86:43:44:18:27:68:b6:c7:86:8c:fa:76:35:5c:1a:ea:
4d:d0:9f:36:ac:31:1c:60:88:24:27:3d:c9:31:65:35:52:8d:
b8:43:dc:ee:83:37:7f:c3:01:4a:28:f3:02:9e:20:da:fd:a3:
d5:28:9d:3c:1a:46:62:90:10:c2:87:ba:0c:1f:f9:76:98:5b:
9c:ea:31:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:48:19 2026 by rpki-client