
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json)
Hash identifier: zFeE3vsP7f65ow8X1IKGwey2HJkdKYHdU4Y7UaA2Jts=
Subject key identifier: FE:81:57:51:33:AA:6A:65:E7:58:2E:D0:0A:A3:F9:5E:7C:7C:63:03
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 04A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
Manifest number: 0499
Signing time: Wed 07 Oct 2026 00:08:12 +0000
Manifest this update: Wed 07 Oct 2026 00:08:11 +0000
Manifest next update: Wed 14 Oct 2026 00:08:11 +0000
Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: +ioAJE/AydSJ2kzfY7rcgUWGFSV0yUoC9xQWUPU3XD0=)
2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 00:08:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1189 (0x4a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Validity
Not Before: Oct 7 00:08:11 2026 GMT
Not After : Oct 14 00:08:11 2026 GMT
Subject: CN=6ac58d6b-42ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:7b:7b:70:1d:8e:0c:8e:cd:f0:ec:16:9f:
1a:5e:4c:59:5e:97:a2:6c:6b:69:16:5a:18:ba:49:
39:bc:d0:68:00:b3:53:ff:0f:09:50:aa:7d:42:d9:
0b:99:18:7f:10:5d:bd:6b:4e:b4:2b:7b:fb:0f:0d:
fc:0b:c4:82:fc:a6:ef:c7:40:ae:bd:c5:9a:62:58:
05:5a:e9:87:f9:56:0c:11:c4:7c:6a:20:2e:c8:62:
e4:2f:1f:b7:a1:fa:02:cd:82:72:11:46:4f:d2:df:
5a:f5:6b:b3:78:84:16:ff:f7:b2:4e:2c:4d:02:62:
ab:51:fb:79:07:d7:1d:4a:f9:c0:c6:f7:2b:8c:a8:
ce:5a:dd:09:10:1f:47:ed:8a:18:c7:6e:26:d9:21:
6b:33:d6:32:03:59:48:29:0b:9e:78:f1:5b:25:40:
7e:06:fb:f1:2c:6c:db:22:3b:34:c0:8a:fa:39:58:
bb:95:69:84:af:67:8d:46:bf:21:62:42:22:21:69:
0c:d2:ad:e8:b8:eb:b5:fb:f7:6f:cb:a9:92:5f:86:
de:17:71:07:ab:b3:91:fa:83:d9:62:0e:16:41:9b:
4f:09:b5:fc:0c:f8:b4:77:c2:a0:a3:35:34:59:bc:
a3:54:f0:b9:3c:d6:49:21:bb:16:c4:d6:64:9e:ca:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:57:51:33:AA:6A:65:E7:58:2E:D0:0A:A3:F9:5E:7C:7C:63:03
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:cb:1f:dd:c7:b6:e8:a0:e2:b0:79:78:7f:42:4c:92:2d:a9:
cd:ec:be:97:2f:cd:85:f9:40:fa:4d:fc:20:35:df:f4:89:23:
52:8b:f7:ba:60:23:51:4d:58:64:9b:71:fc:d3:ce:91:12:4a:
54:b2:fa:bc:01:35:69:e2:33:5d:13:7e:17:f3:6b:a3:e0:e6:
68:be:37:a6:7a:2a:2d:56:16:a1:d8:a4:fd:91:44:2b:33:0b:
f2:e4:f5:30:f1:3e:4d:92:e9:4f:08:f8:e3:89:9f:e7:8e:f1:
57:76:07:28:28:b1:9f:6e:a0:34:33:5d:f2:b0:28:89:2f:e3:
a8:4c:8a:fe:06:ea:65:d3:0b:9d:7a:5c:53:d3:d8:3f:56:69:
a4:55:19:df:f6:09:cd:69:bc:f9:b4:f1:43:e3:5b:1b:9b:44:
b8:22:dc:8b:ab:54:b1:c8:0d:e7:fe:4b:b2:96:21:b7:63:02:
22:24:85:ef:91:cc:bc:ef:d9:46:cc:f9:d0:df:31:19:bd:76:
c3:32:fd:9b:37:b0:9b:c1:1a:3c:d6:17:a2:fa:3c:92:d1:14:
7c:5b:2d:62:89:1c:61:c3:32:4a:d2:da:d2:72:e3:3a:07:f1:
83:7a:77:29:5b:1e:35:d4:54:9f:0f:73:66:c7:ed:c9:25:8c:
26:af:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:22:47 2026 by rpki-client