
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier: 67m18mh63CMc/G3lVskjAsZ46YbLRFPuFXqBim81cfY=
Subject key identifier: B4:C9:00:A8:A3:99:5F:58:40:7F:05:FE:B9:B0:24:A0:CB:8A:C7:DC
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial: 0130
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number: 012C
Signing time: Wed 07 Oct 2026 06:13:25 +0000
Manifest this update: Wed 07 Oct 2026 06:13:25 +0000
Manifest next update: Wed 14 Oct 2026 06:13:25 +0000
Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 5QZWNXriLS6SeTyvIeiEzxnldLCGHxbnJNr6gIwfsCY=)
2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 06:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304 (0x130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Validity
Not Before: Oct 7 06:13:25 2026 GMT
Not After : Oct 14 06:13:25 2026 GMT
Subject: CN=6ac5e305-30ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:ae:d2:52:95:34:f9:55:5e:28:35:64:75:
75:6c:77:c2:73:f7:b9:f5:a6:17:35:b4:d5:23:20:
80:7b:f4:3d:a5:57:ce:ad:37:d6:ce:c9:90:14:6d:
9f:e4:90:fb:4f:d8:41:2d:80:5c:6d:b7:05:41:e1:
2a:cd:82:24:41:a6:c8:5c:1e:75:24:ed:7e:63:77:
bd:fe:c8:42:fc:8c:eb:02:6d:89:37:7a:59:28:62:
64:ae:02:b7:69:7f:26:8c:da:3c:86:0e:ac:ae:71:
8b:6f:b4:bb:30:e5:a2:a8:cc:1b:c2:d8:4b:4f:7c:
c5:23:e2:d0:33:8a:a9:41:a4:fa:f3:48:05:87:4d:
2a:7d:29:c0:17:19:7b:25:72:ff:b8:7b:19:68:e8:
ad:19:fe:b9:3f:e8:64:39:f8:87:86:57:37:e1:ef:
d4:34:7b:48:6f:3e:1d:89:07:85:16:2e:4d:9b:55:
ec:33:00:2b:ec:18:df:b5:31:07:3f:f6:75:2b:98:
2e:7c:f1:8e:b0:a0:4f:89:02:e7:06:1b:bb:92:04:
f1:d4:9a:47:09:69:45:0a:12:99:2c:ef:6c:93:58:
65:cd:f7:8e:0c:ed:e8:8a:39:cd:5f:c3:41:44:28:
e0:36:97:55:f3:8c:10:86:85:21:2a:d3:97:d3:8b:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C9:00:A8:A3:99:5F:58:40:7F:05:FE:B9:B0:24:A0:CB:8A:C7:DC
X509v3 Authority Key Identifier:
keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:15:80:c4:a7:59:a5:00:be:09:31:11:fd:76:3f:e7:a1:
10:11:41:f9:32:04:7a:de:1c:30:ae:e1:21:6a:eb:fd:49:d0:
2f:cd:25:25:b6:5c:4b:69:16:c7:11:26:94:1a:a1:19:00:88:
d0:2f:d3:48:1f:90:d8:ae:23:9d:33:97:94:82:05:df:b4:9c:
14:68:89:28:6b:a5:c4:00:d7:8b:3a:89:c6:1f:38:7e:fc:81:
40:a0:9d:55:81:cf:7c:b9:59:77:4a:a0:87:ff:e4:87:9e:37:
21:1f:30:d6:85:31:7c:be:d0:07:e7:38:54:c7:a8:78:2b:86:
27:db:6f:06:a5:ee:65:75:91:f4:0f:3f:9c:d2:09:90:24:aa:
cc:d1:4e:f6:04:83:c7:96:50:da:96:99:08:46:98:dd:fe:c6:
6c:1d:b6:bf:24:f5:44:58:88:b3:13:9b:5f:5e:51:5c:27:5c:
15:d8:04:6b:ed:fb:b8:bb:12:a7:fd:4a:28:b5:16:02:f5:c1:
92:8b:5d:13:13:6a:3b:5a:f7:a4:20:8b:cc:88:e5:91:5b:21:
78:f0:66:95:e2:38:9f:97:c4:5e:2a:a2:08:25:9a:3d:dd:18:
b9:69:2e:11:2a:b7:2f:38:1c:98:21:63:9c:a5:93:8c:c6:56:
77:8a:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:39:17 2026 by rpki-client