
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: Xy6POXb/G+YFkMm+aDi3aOnYZMZvkjqUCt3tHWyQWDw=
Subject key identifier: 27:E0:93:0D:0D:83:AE:FD:6E:6C:62:B9:90:DD:65:08:C6:BD:55:04
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0A44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A2E
Signing time: Thu 16 Apr 2026 19:38:57 +0000
Manifest this update: Thu 16 Apr 2026 19:38:57 +0000
Manifest next update: Thu 23 Apr 2026 19:38:57 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: HIGqHsopIJq+Uipe3vzAN6jaODrutiJoBw7NbL0CyMM=)
2: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: ILtcBpKUIMyb1sUrv3wjwkYLjHTXDdZBLqBGymf477E=)
3: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: tdt9eteTC9tYcmoaSUex2GA2F4pEXRQmVpOqMgTTHvY=)
4: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: paT4d9t1hAPjA3Bx2I1y5IKq0oxlBuTqZwqH8gxt6VE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2628 (0xa44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Apr 16 19:38:57 2026 GMT
Not After : Apr 23 19:38:57 2026 GMT
Subject: CN=69e13ad1-ade2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:2c:bd:60:e3:56:94:60:72:0f:c9:76:16:
d5:67:e8:ef:37:ff:49:8f:a9:6f:0a:37:75:31:f9:
2f:81:b7:4b:cb:e4:f8:e5:98:4e:23:e7:8d:05:fe:
7c:10:d9:ac:0b:13:d2:5b:46:14:7c:4c:67:04:9b:
5f:4a:4b:25:7e:a1:0c:ec:24:7b:86:5d:b8:21:15:
18:8f:3e:c9:bd:bd:c6:1d:81:9c:44:0a:e1:61:f2:
aa:13:0d:d5:09:61:c0:33:36:12:72:cf:de:e6:47:
27:54:e6:1c:65:94:b0:f2:69:23:8c:fb:ea:c1:86:
18:b7:a0:c7:aa:86:2f:00:5d:ed:21:d7:76:fc:da:
7b:00:1a:b5:2e:29:32:f9:a0:37:1e:6d:8b:50:40:
ac:f9:98:69:39:58:60:5a:89:9d:3e:40:5c:b3:e2:
d9:c1:64:7c:6a:78:8c:af:c4:1b:c8:3c:04:95:5c:
ff:f3:c0:03:21:29:b2:ed:13:06:0e:7b:c1:b2:fd:
50:3a:b1:39:1a:ba:35:30:3a:b8:ef:e0:95:59:69:
cf:2a:cd:1d:29:f0:5e:0a:ac:16:29:41:8b:f1:d0:
db:41:2c:80:b5:c9:6e:1f:49:f9:0b:d5:67:18:30:
fd:17:c8:2d:fa:c9:cd:40:cd:83:60:01:ce:25:2d:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:93:0D:0D:83:AE:FD:6E:6C:62:B9:90:DD:65:08:C6:BD:55:04
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:60:99:15:d0:34:73:7f:d4:d7:ba:99:5e:7f:1d:48:cf:
1c:cf:1a:dc:c4:5d:47:fc:b3:3d:16:ff:ce:38:18:17:0c:e0:
8a:c9:21:88:df:fa:c6:94:e8:53:55:95:1b:78:61:76:c4:b0:
9e:c4:8c:2a:c6:49:0c:8a:82:d8:1e:c9:0f:50:32:a4:e7:9b:
2a:90:22:d5:3c:4b:19:5e:6e:74:2a:f2:a3:78:d5:81:07:59:
88:87:af:71:d8:de:ae:df:57:7e:e8:62:c8:95:86:17:56:fa:
1e:84:33:92:fb:e9:9f:4a:95:f2:7d:f0:13:42:85:8d:d4:c0:
85:c9:80:6e:96:c5:89:1e:28:b0:92:b0:5f:e5:a2:6e:3b:06:
df:bb:6b:0a:7f:69:e6:b5:9b:34:da:89:29:b7:11:ef:8b:09:
0c:e8:3c:41:01:81:cb:bd:cc:a3:8a:69:ac:c6:6b:4f:c0:40:
39:39:88:77:69:44:27:da:5a:6b:ac:7c:fe:22:4f:72:4b:f1:
c3:b2:60:14:4b:d5:29:ba:d0:81:0e:43:78:54:5d:32:4f:38:
e3:74:d5:ac:b5:0d:e3:4c:f0:9c:83:49:23:6d:5d:96:fb:1c:
6d:e3:50:c3:77:72:b7:c5:2f:0d:fb:12:dd:76:1f:11:29:2a:
f1:96:32:3f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4ODMxMTAvBgNVBAUTKDkyOTBDNDNEM0E5MjY3ODI5Qjk2MUNFRkU5QzExM0Iy
RkU0MDQ3MTgwHhcNMjYwNDE2MTkzODU3WhcNMjYwNDIzMTkzODU3WjAYMRYwFAYD
VQQDEw02OWUxM2FkMS1hZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA11wsvWDjVpRgcg/JdhbVZ+jvN/9Jj6lvCjd1MfkvgbdLy+T45ZhOI+eNBf58
ENmsCxPSW0YUfExnBJtfSkslfqEM7CR7hl24IRUYjz7Jvb3GHYGcRArhYfKqEw3V
CWHAMzYScs/e5kcnVOYcZZSw8mkjjPvqwYYYt6DHqoYvAF3tIdd2/Np7ABq1Liky
+aA3Hm2LUECs+ZhpOVhgWomdPkBcs+LZwWR8aniMr8QbyDwElVz/88ADISmy7RMG
DnvBsv1QOrE5Gro1MDq47+CVWWnPKs0dKfBeCqwWKUGL8dDbQSyAtcluH0n5C9Vn
GDD9F8gt+snNQM2DYAHOJS1q5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfgkw0N
g679bmxiuZDdZQjGvVUEMB8GA1UdIwQYMBaAFJKQxD06kmeCm5Yc7+nBE7L+QEcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qjg4My82MkFDRkNBRThE
RkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0S2JsaHp2NmNFVHN2NUFS
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2twREVQVHFTWjRLYmxoenY2Y0VUc3Y1QVJ4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Qjg4My82MkFDRkNBRThERkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0
S2JsaHp2NmNFVHN2NUFSeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACyVgmRXQNHN/1Ne6mV5/HUjPHM8a3MRdR/yzPRb/zjgYFwzgiskhiN/6xpTo
U1WVG3hhdsSwnsSMKsZJDIqC2B7JD1AypOebKpAi1TxLGV5udCryo3jVgQdZiIev
cdjert9XfuhiyJWGF1b6HoQzkvvpn0qV8n3wE0KFjdTAhcmAbpbFiR4osJKwX+Wi
bjsG37trCn9p5rWbNNqJKbcR74sJDOg8QQGBy73Mo4pprMZrT8BAOTmId2lEJ9pa
a6x8/iJPckvxw7JgFEvVKbrQgQ5DeFRdMk8443TVrLUN40zwnINJI21dlvscbeNQ
w3dyt8UvDfsS3XYfESkq8ZYyPw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:46:19 2026 by rpki-client