
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier: SDlDKrh8VVZUD4lQszjLp14RTARSpNBXNSK1t2N6ts4=
Subject key identifier: B3:DB:B8:BA:F6:DF:73:CB:49:B2:15:D4:1F:48:08:5F:90:00:EB:73
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial: 012B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number: 0127
Signing time: Sun 27 Sep 2026 06:16:58 +0000
Manifest this update: Sun 27 Sep 2026 06:16:58 +0000
Manifest next update: Sun 04 Oct 2026 06:16:58 +0000
Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 7c7yGljTNuGHagEtBhZJlZTi1MYWDD5VtOBgGSVBQZA=)
2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 04 Oct 2026 06:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Validity
Not Before: Sep 27 06:16:58 2026 GMT
Not After : Oct 4 06:16:58 2026 GMT
Subject: CN=6ab8b4da-6af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:99:38:1d:9e:35:a8:e4:48:cf:56:b3:50:
97:dc:a0:e1:84:09:38:1f:94:7e:2d:2c:93:50:62:
a1:7a:8f:df:a0:e3:5a:71:1f:a6:ee:48:9d:fa:c1:
fc:0c:4c:37:b3:bd:6c:7e:f1:61:b3:f9:17:f1:f1:
a1:c4:25:a1:73:13:b3:e2:54:b2:71:0d:b5:d3:18:
09:27:a9:96:da:0a:81:26:3a:b6:f3:20:7c:86:e4:
d8:17:a9:8b:19:21:1c:38:50:17:3d:64:ca:d1:2d:
da:fb:2f:f6:2a:4b:82:e4:2b:c6:cf:fe:22:e4:a6:
12:e9:42:ec:3e:ad:d3:1a:f8:40:3f:56:27:39:d1:
6c:3e:8c:d6:a3:b3:64:a5:13:72:bb:b5:0c:31:88:
00:55:1f:1a:62:95:2b:b5:77:e3:ba:e7:7a:25:e4:
e2:94:b6:3f:65:02:8e:11:06:ee:22:29:a8:9e:e8:
45:71:ac:7e:65:d7:e6:5c:cd:51:ec:02:98:69:51:
71:bb:b5:3c:3c:8d:33:00:79:af:e1:34:e0:c6:5a:
bf:8f:0f:f0:fb:5f:7a:58:27:bc:f1:92:07:06:26:
87:99:82:4d:40:93:37:6e:1c:2a:00:dc:e6:7e:8e:
3d:95:b2:ac:c9:8a:24:13:b7:64:e7:ec:b7:c2:89:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DB:B8:BA:F6:DF:73:CB:49:B2:15:D4:1F:48:08:5F:90:00:EB:73
X509v3 Authority Key Identifier:
keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:85:08:7e:f8:b3:76:71:b8:44:aa:83:f1:cb:46:cd:95:36:
a6:26:be:a8:3d:b9:2f:51:25:fc:7c:5e:6f:11:01:1e:16:a6:
1c:12:35:de:50:f9:85:02:66:d0:de:40:2c:2f:20:87:6d:55:
d3:90:e8:17:7a:ce:68:ef:eb:58:e6:2a:af:d2:cf:a1:d8:f3:
52:62:94:e2:fa:6b:e6:3b:b7:25:29:73:8c:36:19:92:35:fc:
a1:66:d2:c0:03:23:d6:09:0f:e6:54:0c:30:89:b1:bc:0a:c4:
13:08:f5:d6:26:01:e3:e5:68:37:57:b0:25:09:0a:b9:28:53:
92:f2:d9:40:3c:97:10:50:75:68:ab:f0:cc:32:9f:00:58:6b:
e5:86:5a:66:7f:2a:6b:40:eb:a5:6a:8c:3d:63:7b:0b:68:8d:
3a:69:7b:9f:44:52:be:e0:20:ff:df:4e:40:70:bf:9c:61:a5:
7f:62:78:dc:ae:f0:98:42:d6:63:6d:07:9d:50:30:cb:e7:88:
85:f0:4e:a9:c3:11:5b:3c:f6:ca:f8:a0:99:46:6b:6e:f7:42:
3c:07:a3:a2:6b:5a:d8:6c:6f:89:28:85:a3:76:37:d2:ac:37:
59:fb:96:49:6e:eb:68:c2:37:d0:92:32:78:ba:bc:2c:b7:32:
12:3d:8f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:02:07 2026 by rpki-client