
$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json)
Hash identifier: H0m/XdYjaKb/May+E63Xtn3j59gFOHBgLF1CQjqpVF8=
Subject key identifier: 8F:CC:54:2C:80:11:BE:8D:BD:9B:1D:C8:61:0C:DF:72:86:2F:92:72
Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Certificate serial: 0754
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
Manifest number: 074B
Signing time: Wed 22 Jul 2026 22:22:50 +0000
Manifest this update: Wed 22 Jul 2026 22:22:50 +0000
Manifest next update: Wed 29 Jul 2026 22:22:50 +0000
Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: hmZVpjWCVuMwIEFeGhL+0sI6k9dPMLlOcXNESzd83uw=)
2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 22:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1876 (0x754)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Validity
Not Before: Jul 22 22:22:50 2026 GMT
Not After : Jul 29 22:22:50 2026 GMT
Subject: CN=6a6142ba-ef23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:23:8e:01:1a:64:70:b0:8b:18:14:df:9c:
bd:6c:53:8e:fc:fd:35:5c:9c:c1:22:72:81:cf:09:
f0:8d:f2:56:4a:e1:56:b2:f3:ff:bc:33:0b:b2:c1:
11:49:c3:c9:02:5f:ea:ee:18:68:23:0b:38:ba:56:
33:e7:f9:ec:7b:09:44:4f:f4:64:d5:2a:22:e8:82:
89:30:55:f0:a5:07:22:70:10:6c:df:8f:f8:1d:8c:
6c:f7:a4:6c:9a:e2:37:0e:a1:e9:c4:2e:1b:2e:e8:
3c:41:2a:1f:ee:c1:34:1b:6d:e5:4e:b1:33:86:0e:
9b:31:8b:8a:54:a4:7d:b9:a3:de:ef:59:2d:69:b7:
98:7d:7c:54:1f:82:46:65:ce:7c:c4:88:8b:99:01:
13:95:31:ec:d3:69:5a:c4:b9:dd:bb:63:0f:b7:d1:
fc:2c:8b:db:e7:b0:0f:49:c0:90:f0:5d:d1:f7:1e:
0a:f0:9d:34:a2:f1:84:e9:e2:ad:d4:1c:f3:e4:e9:
36:a8:cb:70:a6:9a:0e:2f:9d:f4:52:75:bb:95:8c:
f6:40:7a:0a:3f:c6:f7:b9:79:d9:99:c3:91:96:f9:
85:06:80:57:d2:7b:e6:f8:22:8c:13:f2:8d:24:f2:
91:2e:ef:b2:b2:20:44:5c:08:16:58:dd:76:b2:ee:
1c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:54:2C:80:11:BE:8D:BD:9B:1D:C8:61:0C:DF:72:86:2F:92:72
X509v3 Authority Key Identifier:
keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:ec:47:1a:94:13:37:46:6c:3a:db:bb:36:39:b2:f7:8a:
b9:59:c4:b1:f2:c1:9f:49:e4:fb:2a:4d:21:98:b6:ca:28:48:
37:f4:af:ad:1f:6e:96:f8:a1:5c:56:01:e5:75:7f:70:f6:1c:
94:0c:a4:6e:ba:60:ed:16:ee:c7:d5:2c:00:84:72:49:7d:d7:
c5:aa:a8:69:9b:a4:ac:95:e6:ba:7c:e7:49:ae:34:29:75:79:
13:8b:c7:9f:96:42:62:0e:60:cf:a1:84:cb:98:64:3f:39:da:
fa:f5:b1:92:41:1d:b4:68:74:4a:d7:28:49:15:fb:ee:ea:c6:
62:7b:e3:88:ce:92:55:3f:78:f8:73:5b:69:4b:a1:05:5d:30:
6a:de:27:f8:9f:e0:94:69:29:c7:27:ac:d7:85:9a:92:72:8d:
ef:51:75:cc:d0:4e:4d:08:8d:f8:31:6d:25:c2:46:3f:a3:a8:
09:95:06:a5:8a:0d:29:2b:3d:3b:e1:95:04:11:f7:10:b7:2d:
32:6b:41:0d:25:7e:e7:44:2b:bf:6e:f1:44:7b:f0:6f:2b:a2:
63:2c:c7:a7:d2:9b:52:f3:46:16:3a:51:de:40:68:2e:3b:7e:
58:4d:47:b3:8b:0c:7c:b1:02:17:57:d6:94:f9:45:40:6a:96:
2d:32:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:57 2026 by rpki-client