
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json)
Hash identifier: H1jpvfDCzIo14YwuegBB3p8qiKYxj99RECtBJ6M9y/0=
Subject key identifier: AA:FA:11:54:3E:2D:2D:38:9B:A6:16:C8:20:15:F4:E2:7E:92:FC:2A
Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Certificate serial: 0929
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
Manifest number: 0E33
Signing time: Sun 20 Sep 2026 20:07:32 +0000
Manifest this update: Sun 20 Sep 2026 20:07:32 +0000
Manifest next update: Sun 27 Sep 2026 20:07:32 +0000
Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: auBoLlft08HMtAXdrqVXAiKnVw4MoBXZObMwAl1RG2A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 20:07:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2345 (0x929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Validity
Not Before: Sep 20 20:07:32 2026 GMT
Not After : Sep 27 20:07:32 2026 GMT
Subject: CN=6ab03d04-b9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:69:4a:46:79:1f:25:8f:bb:97:96:a7:a3:
fe:f8:dd:db:52:6b:da:d9:0d:3e:a4:0b:f8:1b:47:
f6:b5:cd:d5:2b:9d:ca:53:d6:b2:94:62:de:9c:23:
d4:25:3a:98:34:9f:1e:f0:0b:56:22:d0:ee:e7:20:
03:94:b6:10:e8:ec:8d:bc:02:5b:c6:17:42:f0:72:
6d:d7:fe:23:c9:e3:36:fc:3b:de:af:a5:98:57:6b:
f3:72:f0:a1:34:3a:3c:1a:be:33:a4:24:bc:9e:49:
95:6d:9d:72:7e:90:22:67:f3:7c:2b:f4:30:a3:fb:
ab:95:d4:40:88:29:2a:82:26:18:cb:c0:ed:14:a6:
4b:1c:43:d7:c9:a1:be:18:20:9c:7a:e2:5d:10:96:
38:fa:66:fe:e3:07:29:f2:9b:c0:98:ad:1d:7e:0b:
66:8a:db:d1:cd:20:d7:98:d5:ce:c5:10:ad:7d:70:
5a:2e:ab:f9:81:45:13:fc:0f:3a:6e:20:71:ef:ef:
e0:7d:bb:07:18:30:37:a3:ac:b2:d8:80:d2:27:27:
cc:7c:63:d3:23:0f:c8:8a:02:79:e3:ac:b5:fd:84:
7c:b9:f6:b7:7f:bd:2c:64:33:d5:c4:29:5b:9f:fc:
a8:1b:de:8f:c6:4a:48:ff:16:54:29:18:0a:75:11:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FA:11:54:3E:2D:2D:38:9B:A6:16:C8:20:15:F4:E2:7E:92:FC:2A
X509v3 Authority Key Identifier:
keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:52:53:3c:79:6e:b9:67:9b:5c:77:19:47:59:a8:57:ca:8d:
99:0e:b6:81:13:49:ab:20:56:54:a2:77:9c:7a:c3:76:ce:6b:
b2:2e:36:70:a0:ac:82:b7:a2:46:94:f2:a4:73:ae:ef:4b:cc:
d6:ca:03:b1:ab:b1:96:6c:76:68:39:38:96:7c:ae:76:4d:28:
3f:75:57:90:0f:1a:64:a0:e3:c4:36:90:8e:66:d1:39:47:1b:
45:93:3b:8b:d0:55:18:65:a9:a8:23:7c:34:48:23:21:e1:f0:
3d:32:76:60:d5:04:28:b6:40:25:23:9f:ac:b7:65:52:0a:33:
70:cd:ac:74:f4:4d:f1:a5:89:38:05:09:27:fa:12:40:41:3c:
90:53:36:e7:21:90:6a:24:10:b3:77:72:19:4e:5a:41:3b:a9:
e8:83:77:23:96:c2:09:b2:08:6c:92:ba:ad:d0:00:96:5c:fa:
39:e1:2b:69:88:d0:96:8a:d2:31:ad:13:b5:a1:7f:ed:b2:48:
94:75:ad:b3:2b:1f:54:13:30:41:68:81:ac:0d:07:bc:e8:c5:
80:83:87:6a:1b:9e:78:65:aa:0b:45:29:f9:cc:09:71:f6:f8:
04:cd:4d:77:27:b9:2a:af:e6:be:bc:ac:b4:a9:17:87:ad:05:
f5:c8:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:52:11 2026 by rpki-client