
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier: 3zX8Qm7aWOPWlPjg/SUVzwpCT6MALeHInRt5htwV91o=
Subject key identifier: 35:A1:7A:7A:75:BE:37:67:89:2B:3F:5A:0F:53:47:13:9B:C2:50:EA
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial: E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number: E3
Signing time: Fri 15 May 2026 06:40:20 +0000
Manifest this update: Fri 15 May 2026 06:40:20 +0000
Manifest next update: Fri 22 May 2026 06:40:20 +0000
Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 19cQcNDtusJr/vnOplRv2lc7CSi1UVaXXSj8xL5iobc=)
2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 06:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231 (0xe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Validity
Not Before: May 15 06:40:20 2026 GMT
Not After : May 22 06:40:20 2026 GMT
Subject: CN=6a06bfd4-409e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:8d:ea:4f:05:27:a7:61:2b:02:c5:4a:65:
63:e1:c8:77:8c:df:18:e8:4d:1a:5b:14:cd:9b:f5:
ed:a5:88:dc:9b:3f:5f:93:0d:6c:7a:9b:b8:38:ef:
7b:10:ee:bd:a1:69:c0:ce:4b:36:29:09:3d:0d:41:
f7:74:aa:0d:3c:1e:7b:15:d8:a1:43:81:de:19:c1:
6b:1c:10:e5:b1:66:db:7e:68:bb:85:3d:ae:8f:b0:
52:94:dc:76:2c:51:f6:49:f7:55:9c:42:60:f1:f1:
6f:b8:48:78:7a:37:44:3f:63:d2:87:11:5c:73:8c:
48:df:f2:79:df:75:c2:dc:f7:54:16:59:b4:89:8a:
06:08:10:e6:2d:b9:00:8a:af:57:ba:af:a3:d7:4d:
e3:dd:19:61:ea:fb:1d:12:fd:c3:f3:c1:a7:0a:9e:
32:e9:0d:a0:e1:e4:9e:88:f5:29:bd:b6:b7:6f:b6:
9b:58:c5:db:eb:19:6c:8d:03:cb:c7:e2:85:9f:13:
55:d2:0d:99:b2:7a:3a:cd:d9:27:85:56:c8:bb:06:
ec:06:53:3f:69:19:90:f1:d6:dd:49:7e:df:1d:f0:
fc:22:5d:b5:ef:22:18:ad:14:d8:a6:be:4a:dd:3c:
4f:96:55:16:85:5a:d6:d3:dc:26:f3:25:15:bf:49:
fb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A1:7A:7A:75:BE:37:67:89:2B:3F:5A:0F:53:47:13:9B:C2:50:EA
X509v3 Authority Key Identifier:
keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:12:d8:8d:ef:86:41:3b:f9:dd:3b:41:60:09:72:19:8d:48:
65:c8:d6:c8:59:79:7b:c2:48:24:1e:f7:ad:2e:36:1d:ae:46:
6a:a3:c2:96:33:07:c2:13:06:1c:93:dc:8a:5a:48:ef:e3:6c:
f5:a9:0c:87:02:84:c5:56:cd:58:3a:31:7d:44:ad:63:0d:ee:
1e:28:9e:bf:f3:55:9f:4e:e1:54:97:1b:4d:51:f4:29:91:cd:
72:0b:fa:0c:1a:10:eb:0a:ed:30:64:8a:73:35:72:f3:d3:79:
3e:9c:3f:76:9e:b6:98:b3:86:90:8e:d3:85:11:6d:70:28:00:
a5:87:80:0b:45:87:cf:76:ad:2c:95:31:ff:f8:c3:7e:c3:4a:
fc:b6:54:23:5c:d0:5c:31:c7:64:f9:7e:c6:ef:4c:4a:e9:c4:
3b:4e:67:1a:9d:2e:55:1d:4c:fa:df:30:9f:52:44:a8:dd:1e:
ef:7b:98:3b:4b:52:03:28:c4:2d:c2:3b:fc:a1:02:50:47:1d:
1d:b5:fe:c2:78:29:13:e8:3e:bd:8d:9e:89:e4:ed:d3:7f:69:
a0:3d:f6:1d:5e:d1:b3:4d:33:a3:28:7d:3a:ba:ed:c7:57:05:
d6:76:49:6f:5a:15:e7:9d:ed:f0:b0:8c:58:56:b5:bd:9c:d7:
41:ce:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:06:09 2026 by rpki-client