
$ rpki-client -vvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json)
Hash identifier: TpTNhI1u4fZjtxwB61nNc+wZqLgpH0+3vY2M2S/qs/Q=
Subject key identifier: 77:B3:43:C7:CC:A3:97:0D:60:5A:5A:08:69:CB:04:66:30:2C:1C:99
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 047E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
Manifest number: 0472
Signing time: Thu 23 Jul 2026 00:59:54 +0000
Manifest this update: Thu 23 Jul 2026 00:59:53 +0000
Manifest next update: Thu 30 Jul 2026 00:59:53 +0000
Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: +WMXXSppvs4l3Rzes70hVUoNbAS6tMVjwEGhxSTpaUE=)
2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:59:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1150 (0x47e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Validity
Not Before: Jul 23 00:59:53 2026 GMT
Not After : Jul 30 00:59:53 2026 GMT
Subject: CN=6a61678a-e3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:01:b0:3e:07:94:7f:e8:67:38:ec:70:75:
17:8a:61:b8:b2:86:65:35:18:e9:f7:55:e4:0d:88:
fc:1a:9d:d9:91:b5:dc:6b:d9:e5:04:87:b7:27:27:
b6:c2:6f:66:41:ec:2d:e0:5f:74:04:0a:1d:6c:32:
8b:3a:0a:ba:04:f5:29:1e:64:f6:db:21:17:6b:2a:
d2:ef:7f:e2:a6:02:79:1d:82:29:11:c0:dc:06:3a:
26:d8:39:59:4b:b4:0b:da:e5:97:d3:ba:9a:eb:3b:
3c:58:7d:fc:1d:39:3c:90:01:9d:8a:05:23:51:13:
af:08:b1:87:b9:b6:a0:b9:5c:3e:d2:ae:68:bb:11:
0b:df:ee:1c:6c:e4:f3:40:cb:f5:51:60:7c:42:dd:
fa:cf:84:13:0f:a9:fd:ca:79:b9:01:30:69:47:1e:
80:19:df:25:a4:11:91:2c:34:4e:18:10:3d:75:19:
f1:e4:11:50:9c:9d:3a:2c:0c:9e:3a:66:96:3b:07:
9b:36:88:7f:0e:f3:12:aa:f0:32:63:61:c1:d2:1b:
05:fe:46:2d:b1:7b:59:89:39:7f:c2:bd:b4:31:83:
c4:3e:52:9f:b0:d2:c8:03:6a:ff:41:df:74:9c:a0:
48:2d:45:cb:d1:87:91:13:5a:bd:7f:5b:55:6a:8b:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:43:C7:CC:A3:97:0D:60:5A:5A:08:69:CB:04:66:30:2C:1C:99
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:5a:66:1a:d7:7c:2a:3c:95:ea:f5:db:4a:53:f2:bd:10:97:
25:4b:fd:12:ec:10:eb:2f:ab:d3:e7:9c:ad:c0:83:77:11:8f:
1e:fc:62:b4:a1:f2:a5:c5:ae:f8:4f:b2:f1:fd:75:a0:0f:36:
8d:be:74:98:3a:50:4f:2e:38:56:58:da:44:51:8d:a3:47:54:
a6:65:23:d8:b1:72:cc:c0:c9:8d:47:87:0e:31:5a:d7:4d:0e:
f1:82:2a:29:91:64:6b:02:79:f2:ec:9e:73:43:08:49:c9:2d:
af:57:5a:43:0b:b7:e4:38:16:3e:3e:d7:09:e8:75:80:d4:58:
66:0f:ad:c8:c2:d6:1b:c5:59:f5:5b:9f:4b:ed:c0:06:68:f5:
13:68:2d:7d:bd:19:b9:85:76:67:5c:f1:d5:2e:6b:f1:49:ee:
d8:39:25:bf:68:bd:8c:46:d9:ff:fc:e3:d7:2c:ae:93:4d:d9:
00:4f:2c:ea:48:6f:f7:0e:e8:c4:54:47:aa:93:0b:5c:ea:0d:
d2:ec:ea:30:66:81:b7:9e:fa:69:e9:97:3a:94:ef:87:09:57:
78:be:e7:bc:b0:f1:b6:9b:0d:f4:f5:db:2f:20:79:d9:71:7b:
d2:0f:3f:49:bb:0e:ca:b6:4d:07:6d:d7:e4:b1:f9:0c:1a:28:
67:1d:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:56 2026 by rpki-client