
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json)
Hash identifier: nCHLCfo6newE0VyHzg1PMqokAo4MXL+sMComhphHV7s=
Subject key identifier: D3:BF:02:FE:1A:68:BF:87:56:A5:10:6B:06:25:E3:61:CA:E2:A3:92
Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Certificate serial: 08BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
Manifest number: 0D53
Signing time: Wed 18 Feb 2026 19:56:56 +0000
Manifest this update: Wed 18 Feb 2026 19:56:56 +0000
Manifest next update: Wed 25 Feb 2026 19:56:56 +0000
Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: SXCj/U0BN/jyQWJZAF5sFx6PgaHnEUpFFA2ImUHqCNM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 19:56:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2234 (0x8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Validity
Not Before: Feb 18 19:56:56 2026 GMT
Not After : Feb 25 19:56:56 2026 GMT
Subject: CN=69961988-7b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:78:b7:f0:6d:b8:ad:2c:02:4b:90:cf:ea:
7e:d0:3a:69:28:29:7a:c1:3a:0c:bb:5e:aa:7c:fc:
f4:74:9b:e6:29:aa:39:85:2b:03:73:79:f8:6d:36:
46:79:3a:dd:84:8a:fc:8c:d8:2f:e0:f7:27:64:06:
9c:0c:64:31:48:c7:7e:fa:aa:1e:77:0e:79:c1:fc:
e0:48:5d:d6:a9:d7:e6:36:e8:16:76:36:c6:8a:07:
7b:f9:4e:02:05:d1:6e:34:b9:5a:4f:73:a1:f0:1a:
3a:3a:a7:0f:46:29:8e:fb:b3:5d:58:65:47:22:a9:
4b:8a:16:73:27:aa:fa:6d:19:ec:f7:ac:46:04:75:
7e:14:e8:c4:4c:66:a1:7c:d2:08:4c:74:8f:cc:9f:
7b:3f:04:89:5a:ff:4f:cf:20:af:01:19:ea:03:07:
50:0e:e8:2c:d2:90:69:8c:75:45:e4:c3:dd:e9:94:
10:69:43:3a:4b:99:17:61:09:17:17:f4:1c:64:f6:
b4:8e:37:13:28:2a:43:e4:ee:eb:98:9f:bf:87:8d:
6b:32:72:bd:5c:40:0f:55:4b:b9:50:be:aa:be:93:
d2:2a:5e:8c:6f:6a:2b:ec:0c:84:b7:4d:46:77:96:
22:a3:96:fd:e8:1b:ba:da:d7:69:89:09:d6:19:58:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BF:02:FE:1A:68:BF:87:56:A5:10:6B:06:25:E3:61:CA:E2:A3:92
X509v3 Authority Key Identifier:
keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8b:b6:04:c2:ae:9f:a2:ba:ec:3e:96:b7:1c:fb:b8:b8:86:
c2:66:c9:e0:72:82:47:6a:ef:6d:48:9d:a9:3c:f0:27:7f:9b:
e0:12:c2:a7:54:0a:c2:1f:ca:79:6f:6c:08:83:ff:43:f5:5b:
94:9e:28:fd:da:0b:4f:38:a2:02:bc:c2:49:e0:b3:26:dd:d1:
9b:5d:50:73:fc:65:6d:12:51:95:20:1c:81:a4:ec:b4:ce:28:
d3:b6:f0:7a:a2:cc:c2:0c:7d:aa:86:fd:81:b1:82:bc:e1:9d:
d2:0c:d5:ce:04:22:81:e8:7f:4e:06:48:e5:9d:6d:e6:28:c9:
64:9f:8b:2b:94:b0:76:9a:6e:74:69:10:da:47:64:aa:d9:5f:
6b:60:d6:d7:2d:73:2e:a4:ea:84:ed:2e:01:ea:ff:2e:69:bb:
97:71:89:63:02:43:e7:a8:bb:26:2f:a9:0d:9e:77:2e:0b:e6:
75:fb:9c:d2:ff:62:63:e6:3e:5f:c6:d4:20:ef:ef:6f:09:48:
5f:42:b2:91:3b:3c:3d:7f:ed:34:2a:73:e9:ca:61:6f:c7:d5:
ab:c8:f0:cc:be:d3:84:79:a4:b5:41:b9:79:e4:1c:24:fd:e6:
a3:05:f7:bc:f4:b4:f3:be:1b:28:80:e2:3c:1c:0d:0e:b0:0a:
06:62:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:02:18 2026 by rpki-client