
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
File: kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft (raw, json)
Hash identifier: oSk+ZOu5Lb/hPd41ChA2SDpK81199Jim+nIaBDoJlBA=
Subject key identifier: C6:03:BE:95:60:68:9C:DC:15:C3:7A:A0:A1:54:92:32:F2:C8:ED:9C
Authority key identifier: 92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
Certificate issuer: /CN=A919B883/serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Certificate serial: 0AA3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
Manifest number: 0A8A
Signing time: Sat 10 Oct 2026 19:37:42 +0000
Manifest this update: Sat 10 Oct 2026 19:37:42 +0000
Manifest next update: Sat 17 Oct 2026 19:37:42 +0000
Files and hashes: 1: kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl (hash: riMQ9T6IEXAjUnUzc9rKMKeN0fjFPF6YbhD8QYjUNm8=)
2: EA74C41E84D911EF9E11D46FC4F9AE02.roa (hash: 3lYOlPOEsGvMDlpSCEL0lC4I+BLuIPoKZMsYKUnntbI=)
3: BB7C684E8E0011EA90489A40C4F9AE02.roa (hash: RO8XU965Q2nWRURA/ptYvwo209Xqp/A7iL8PIgGHC18=)
4: EC4788308DFD11EA8AAFBB36C4F9AE02.roa (hash: 9wUzSPF8YYBe+S5WNNXB2eNiXEXSPWj1vAoisvUHqWg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 19:37:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919B883, serialNumber=9290C43D3A9267829B961CEFE9C113B2FE404718
Validity
Not Before: Oct 10 19:37:42 2026 GMT
Not After : Oct 17 19:37:42 2026 GMT
Subject: CN=6aca9406-3a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:4b:14:6c:cf:76:fd:88:19:2d:c5:38:38:
65:e7:65:16:6c:ec:4d:de:76:39:15:20:0e:7f:0e:
13:d0:8e:1e:de:6d:2a:41:8e:0b:12:92:34:6d:2b:
4a:5a:56:4a:2b:bc:0d:25:4b:b1:58:15:91:d7:a0:
f9:63:b2:d9:d7:10:81:bf:ec:01:f7:a8:01:35:d8:
44:cf:0c:2d:8d:20:bb:47:96:af:37:b0:37:fb:f6:
19:bf:71:e7:99:28:ed:65:8a:4a:20:43:9d:a9:53:
ca:79:28:1e:53:44:0c:3e:6e:c6:73:1e:0a:3c:fb:
26:d5:5f:1a:4e:5c:8c:36:3a:c1:91:d9:0c:06:2a:
d1:ae:95:12:52:56:1a:0a:cf:af:73:92:f3:5a:f7:
6d:72:b7:bc:4d:56:72:31:b5:cb:cb:4b:f9:21:1a:
eb:6f:06:f7:f5:a6:6f:94:9b:b0:4c:24:f1:a1:61:
df:75:01:6a:5d:6f:e8:fb:3e:6c:7e:81:d8:4f:7f:
68:41:fd:cb:a8:ff:1b:33:f6:71:53:be:d1:c1:b4:
fb:a7:08:bc:39:46:b8:f9:ff:1f:f7:cb:25:ea:6c:
85:43:6d:f1:11:0e:05:86:ca:27:66:e4:b6:59:2f:
7f:1d:26:62:1f:44:af:61:19:9b:b6:30:cc:ea:8e:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:03:BE:95:60:68:9C:DC:15:C3:7A:A0:A1:54:92:32:F2:C8:ED:9C
X509v3 Authority Key Identifier:
keyid:92:90:C4:3D:3A:92:67:82:9B:96:1C:EF:E9:C1:13:B2:FE:40:47:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kpDEPTqSZ4Kblhzv6cETsv5ARxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B883/62ACFCAE8DFD11EAA396A936C4F9AE02/kpDEPTqSZ4Kblhzv6cETsv5ARxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:36:df:dd:8a:a1:97:d0:5e:41:ca:c0:c9:e1:f8:e6:9f:ed:
d5:55:94:f9:99:28:6c:96:39:93:f1:42:2a:4d:57:90:40:19:
31:db:80:0b:0c:d3:10:4c:6d:01:94:e8:23:33:29:9e:9e:ac:
6b:c7:17:78:1a:52:4d:de:40:a6:db:0e:cf:88:e7:06:47:64:
32:e6:50:28:95:46:76:bd:68:15:c7:6c:38:bf:c7:0f:95:f5:
84:3b:1d:48:3f:ed:2b:ed:a3:b2:42:9e:cb:65:44:eb:39:b0:
06:dc:d2:42:b1:ac:bf:62:ae:77:e8:26:f1:70:b7:ec:d6:a0:
a6:81:b7:85:b6:57:ca:85:86:bc:f7:6e:25:31:5c:e7:8b:1b:
be:d9:77:43:e0:57:21:9d:29:94:8d:fb:d1:09:08:39:e5:a6:
ef:38:32:10:8e:a6:8e:9b:95:e2:b1:12:35:09:65:70:7c:3d:
dc:85:d6:78:c2:98:35:31:63:97:d9:4d:7d:9f:33:95:c8:eb:
29:4f:89:94:59:0a:63:f1:a6:0f:9d:f5:0f:e5:a0:be:fa:e8:
b5:0a:ac:0a:3e:1e:f5:a2:cc:00:38:f4:2a:2d:6a:a9:fa:97:
0c:0f:7e:48:15:08:84:40:ef:33:00:bb:83:2f:52:b3:4e:9c:
fc:b7:1f:45
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUI4ODMxMTAvBgNVBAUTKDkyOTBDNDNEM0E5MjY3ODI5Qjk2MUNFRkU5QzExM0Iy
RkU0MDQ3MTgwHhcNMjYxMDEwMTkzNzQyWhcNMjYxMDE3MTkzNzQyWjAYMRYwFAYD
VQQDEw02YWNhOTQwNi0zYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruBLFGzPdv2IGS3FODhl52UWbOxN3nY5FSAOfw4T0I4e3m0qQY4LEpI0bStK
WlZKK7wNJUuxWBWR16D5Y7LZ1xCBv+wB96gBNdhEzwwtjSC7R5avN7A3+/YZv3Hn
mSjtZYpKIEOdqVPKeSgeU0QMPm7Gcx4KPPsm1V8aTlyMNjrBkdkMBirRrpUSUlYa
Cs+vc5LzWvdtcre8TVZyMbXLy0v5IRrrbwb39aZvlJuwTCTxoWHfdQFqXW/o+z5s
foHYT39oQf3LqP8bM/ZxU77RwbT7pwi8OUa4+f8f98sl6myFQ23xEQ4FhsonZuS2
WS9/HSZiH0SvYRmbtjDM6o5/KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYDvpVg
aJzcFcN6oKFUkjLyyO2cMB8GA1UdIwQYMBaAFJKQxD06kmeCm5Yc7+nBE7L+QEcY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qjg4My82MkFDRkNBRThE
RkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0S2JsaHp2NmNFVHN2NUFS
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2twREVQVHFTWjRLYmxoenY2Y0VUc3Y1QVJ4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Qjg4My82MkFDRkNBRThERkQxMUVBQTM5NkE5MzZDNEY5QUUwMi9rcERFUFRxU1o0
S2JsaHp2NmNFVHN2NUFSeGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACjbf3Yqhl9BeQcrAyeH45p/t1VWU+ZkobJY5k/FCKk1XkEAZMduACwzTEExt
AZToIzMpnp6sa8cXeBpSTd5AptsOz4jnBkdkMuZQKJVGdr1oFcdsOL/HD5X1hDsd
SD/tK+2jskKey2VE6zmwBtzSQrGsv2Kud+gm8XC37NagpoG3hbZXyoWGvPduJTFc
54sbvtl3Q+BXIZ0plI370QkIOeWm7zgyEI6mjpuV4rESNQllcHw93IXWeMKYNTFj
l9lNfZ8zlcjrKU+JlFkKY/GmD531D+WgvvrotQqsCj4e9aLMADj0Ki1qqfqXDA9+
SBUIhEDvMwC7gy9Ss06c/LcfRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:53:26 2026 by rpki-client