
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
File: klUgH_qh5mcsBsLfbovhFYLML64.mft (raw, json)
Hash identifier: cSwyS7JNtwsEqEEmgBp9L1nGWG3Joz0dhE6FFWh4xpg=
Subject key identifier: 13:B6:4D:93:C0:8A:AD:42:12:38:89:E8:84:BA:09:4B:0E:90:DE:AE
Authority key identifier: 92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
Certificate issuer: /CN=A9112A7D/serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Certificate serial: 02E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
Manifest number: 02E3
Signing time: Fri 17 Apr 2026 01:13:23 +0000
Manifest this update: Fri 17 Apr 2026 01:13:23 +0000
Manifest next update: Fri 24 Apr 2026 01:13:23 +0000
Files and hashes: 1: klUgH_qh5mcsBsLfbovhFYLML64.crl (hash: xQnCT6j4qzivOOPmsSFFwkqTxUQAi+K1q9MS0xGpKMo=)
2: 6DE1A436246811ED82556323C4F9AE02.roa (hash: r3TW15SuIdGpywpcotauMLYQIycZlTkIxb64gJm7VrA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 01:13:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112A7D, serialNumber=9255201FFAA1E6672C06C2DF6E8BE11582CC2FAE
Validity
Not Before: Apr 17 01:13:23 2026 GMT
Not After : Apr 24 01:13:23 2026 GMT
Subject: CN=69e18933-04a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:62:40:d5:60:aa:47:4b:21:de:60:23:c2:
43:4f:76:90:c3:12:c9:b9:f8:88:3a:89:c8:3b:ed:
cd:a9:7d:e8:7c:b4:92:ef:9b:7d:02:91:be:04:33:
5c:67:7c:ef:70:2d:3f:25:3d:29:02:89:95:db:f3:
e2:65:dd:d1:21:09:ad:55:51:60:7a:14:9a:47:33:
e2:f7:2a:29:2a:d8:95:2a:88:d5:6f:47:32:95:77:
a4:7c:e2:48:1f:70:8a:35:a7:e5:81:f6:75:27:69:
26:d8:d6:56:af:2c:97:38:1b:2d:5e:dc:5c:e2:ae:
5b:ad:b9:dd:07:83:c7:8f:c5:10:6c:47:2d:97:d3:
43:f1:c2:38:50:f8:0d:06:71:b5:6f:d3:c5:92:ba:
59:3b:60:5a:c0:53:64:22:15:b6:3e:e4:5f:d2:70:
40:83:20:9b:30:9d:0c:c3:b7:ad:73:5c:f7:9b:cd:
47:46:e0:72:0d:0f:c7:fb:e9:37:7d:2e:3a:58:c7:
8e:25:79:a9:fb:2d:d5:b1:88:8a:10:3c:d8:ba:a5:
b4:c2:fe:ff:ca:d0:ff:6a:7d:07:3a:1f:2b:04:a6:
f5:c9:f7:f4:eb:eb:b7:95:21:ab:ab:5c:e0:6e:4f:
97:09:cc:dc:68:e8:fe:24:09:c7:d3:f8:51:0a:87:
7c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B6:4D:93:C0:8A:AD:42:12:38:89:E8:84:BA:09:4B:0E:90:DE:AE
X509v3 Authority Key Identifier:
keyid:92:55:20:1F:FA:A1:E6:67:2C:06:C2:DF:6E:8B:E1:15:82:CC:2F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/klUgH_qh5mcsBsLfbovhFYLML64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112A7D/A04A60B4246511EDB8D42021C4F9AE02/klUgH_qh5mcsBsLfbovhFYLML64.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:d7:af:c7:d9:ec:af:7e:6b:6d:10:6d:43:1c:6e:9d:53:0f:
1b:94:12:88:22:de:7d:34:54:08:21:84:de:73:a5:7d:54:90:
8a:cd:ee:6b:27:66:cd:5e:2f:74:ec:b0:e3:a1:3a:0f:27:70:
4c:78:3d:a7:2f:3d:2a:aa:25:7f:4d:9e:67:bc:d2:a6:9a:78:
e5:ad:d3:c4:02:41:a6:3b:10:ab:b4:d2:ee:4b:e7:e0:36:35:
ed:51:ff:40:f5:43:ea:77:5b:60:8a:90:c3:ed:f4:90:df:62:
5d:2f:a2:9f:e0:cc:c6:63:c8:d3:15:f4:7a:d7:6b:00:69:74:
30:06:cc:22:e9:ed:64:6d:78:da:db:ab:7f:b1:cf:c0:4c:66:
3f:c2:37:a0:49:87:f6:c6:52:a7:84:fc:15:ce:5d:c9:83:54:
83:b0:c7:d3:c9:9b:f4:c6:57:64:55:f9:72:7d:ea:4e:75:fd:
07:30:df:6c:55:bf:38:3d:a5:59:81:09:47:1b:1c:33:bc:53:
14:83:07:7a:e7:ac:13:c6:9a:34:91:e5:fd:ba:14:cd:bd:9d:
14:92:e7:41:a4:af:05:1a:b2:fc:d9:8f:c1:fc:9f:2c:31:99:
db:44:83:e0:1e:e5:3f:4d:ab:cf:24:8b:5f:54:cc:6d:56:cf:
f7:53:88:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTJBN0QxMTAvBgNVBAUTKDkyNTUyMDFGRkFBMUU2NjcyQzA2QzJERjZFOEJFMTE1
ODJDQzJGQUUwHhcNMjYwNDE3MDExMzIzWhcNMjYwNDI0MDExMzIzWjAYMRYwFAYD
VQQDEw02OWUxODkzMy0wNGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1IdiQNVgqkdLId5gI8JDT3aQwxLJufiIOonIO+3NqX3ofLSS75t9ApG+BDNc
Z3zvcC0/JT0pAomV2/PiZd3RIQmtVVFgehSaRzPi9yopKtiVKojVb0cylXekfOJI
H3CKNaflgfZ1J2km2NZWryyXOBstXtxc4q5brbndB4PHj8UQbEctl9ND8cI4UPgN
BnG1b9PFkrpZO2BawFNkIhW2PuRf0nBAgyCbMJ0Mw7etc1z3m81HRuByDQ/H++k3
fS46WMeOJXmp+y3VsYiKEDzYuqW0wv7/ytD/an0HOh8rBKb1yff06+u3lSGrq1zg
bk+XCczcaOj+JAnH0/hRCod8swIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBO2TZPA
iq1CEjiJ6IS6CUsOkN6uMB8GA1UdIwQYMBaAFJJVIB/6oeZnLAbC326L4RWCzC+u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkE3RC9BMDRBNjBCNDI0
NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVtY3NCc0xmYm92aEZZTE1M
NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tsVWdIX3FoNW1jc0JzTGZib3ZoRllMTUw2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkE3RC9BMDRBNjBCNDI0NjUxMUVEQjhENDIwMjFDNEY5QUUwMi9rbFVnSF9xaDVt
Y3NCc0xmYm92aEZZTE1MNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhNevx9nsr35rbRBtQxxunVMPG5QSiCLefTRUCCGE3nOlfVSQis3uaydmzV4v
dOyw46E6DydwTHg9py89Kqolf02eZ7zSppp45a3TxAJBpjsQq7TS7kvn4DY17VH/
QPVD6ndbYIqQw+30kN9iXS+in+DMxmPI0xX0etdrAGl0MAbMIuntZG142turf7HP
wExmP8I3oEmH9sZSp4T8Fc5dyYNUg7DH08mb9MZXZFX5cn3qTnX9BzDfbFW/OD2l
WYEJRxscM7xTFIMHeuesE8aaNJHl/boUzb2dFJLnQaSvBRqy/NmPwfyfLDGZ20SD
4B7lP02rzySLX1TMbVbP91OIRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:26 2026 by rpki-client