
$ rpki-client -vvf rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
File: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft (raw, json)
Hash identifier: ty2ue6GZHMnMFnCh8491N1Sgci36yeX9JZhopl6fra4=
Subject key identifier: 9B:A4:3D:5F:E1:32:35:10:B9:01:78:7E:35:A8:88:9F:A6:87:94:EF
Authority key identifier: 28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
Certificate issuer: /CN=A91602ED/serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Certificate serial: 0723
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
Manifest number: 071A
Signing time: Thu 16 Apr 2026 21:47:45 +0000
Manifest this update: Thu 16 Apr 2026 21:47:45 +0000
Manifest next update: Thu 23 Apr 2026 21:47:45 +0000
Files and hashes: 1: KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl (hash: tbLCHHzWfAgpl+p5bX/azKxB2XOZcHQd5G2ezEIRxgo=)
2: 7883418E943A11EBB6706530C4F9AE02.roa (hash: SMXgd0Qe6A0+Zb1ETGRTYsNnB3dN/PWbVvtwDpEc6yw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 21:47:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1827 (0x723)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91602ED, serialNumber=287529DC20CA0ECE95A7A556E10BCDFD7237D8D8
Validity
Not Before: Apr 16 21:47:45 2026 GMT
Not After : Apr 23 21:47:45 2026 GMT
Subject: CN=69e15901-5160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:2e:09:8c:2a:73:bc:44:9d:e5:9f:04:37:
70:e8:f1:06:57:9f:78:58:0b:51:28:99:bf:ba:de:
e6:b1:f9:d9:d6:97:95:57:c4:6b:b5:4d:70:83:6a:
aa:3f:c8:0a:d5:ac:ed:3a:a1:18:6e:5b:67:40:68:
dd:82:a8:f0:80:cf:10:da:f3:5e:28:6c:de:ed:81:
16:39:7e:10:24:60:ae:f6:f5:d2:d5:f1:97:da:ce:
23:df:af:ac:b5:67:e3:2f:90:94:ee:7c:38:1a:b0:
11:cc:e1:9d:41:79:67:a5:59:93:f8:17:68:36:2b:
d7:00:36:6a:3b:51:80:ce:dc:0e:71:53:65:93:8c:
49:8f:d4:68:38:ca:b9:b9:ee:f6:2f:a5:03:3e:50:
ea:c6:e9:c8:ed:e2:ef:f5:f0:b5:58:d1:86:a8:c2:
37:d9:f4:2c:40:c6:32:c7:79:2c:45:12:0b:8f:db:
a1:d8:71:92:7e:2c:e7:ca:63:55:af:91:a5:63:da:
49:08:a1:53:d2:b3:eb:90:73:2f:55:fc:0b:d3:db:
7c:5e:a4:8b:52:70:27:f9:92:cc:eb:2b:cb:8d:32:
ab:03:6a:fe:f2:5c:19:57:e6:3c:d1:2e:f0:5b:1e:
0d:d8:13:77:51:44:79:8a:5c:7c:43:9e:b1:36:2c:
ce:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A4:3D:5F:E1:32:35:10:B9:01:78:7E:35:A8:88:9F:A6:87:94:EF
X509v3 Authority Key Identifier:
keyid:28:75:29:DC:20:CA:0E:CE:95:A7:A5:56:E1:0B:CD:FD:72:37:D8:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91602ED/167BC63C7C1B11EB9F3F3C65C4F9AE02/KHUp3CDKDs6Vp6VW4QvN_XI32Ng.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:cd:59:04:91:9a:f1:57:0d:ff:44:67:e0:a5:c5:2b:4f:5e:
bd:d7:d1:3b:d9:97:e3:99:13:bc:c1:b8:08:21:1f:d5:30:e1:
e0:c3:b3:34:7d:c9:07:d5:56:33:b6:a0:18:a8:21:3c:b7:33:
5a:28:10:d6:27:d5:dd:dd:ca:74:a7:4e:e2:ef:7c:c0:98:d8:
0f:56:98:05:07:50:a7:57:a7:77:55:cb:91:d0:b6:fd:8a:80:
56:d9:56:59:0a:10:26:24:ea:dc:bc:a6:72:71:79:32:13:05:
4c:72:75:2e:09:cd:49:44:c0:b0:6c:3a:bb:ce:65:0c:a5:cd:
b4:1e:93:75:9e:f7:dc:d7:c0:6e:8f:a9:54:7f:a3:7d:dc:2f:
8b:86:c6:00:f7:45:bb:72:0c:6c:88:14:4b:98:d6:a8:8f:0d:
7c:43:90:1f:70:1a:8f:39:87:f5:98:98:80:9e:c5:f2:ba:1f:
94:9a:fb:19:1d:6b:c3:32:58:ae:0e:de:ef:94:d0:66:cf:6d:
89:fa:f9:8a:3b:eb:48:71:b4:20:c0:3d:71:40:a3:11:15:c9:
2c:08:0c:05:86:89:5a:84:85:8b:87:fa:f3:83:86:e5:cd:54:
e0:61:e4:9d:5e:0b:3e:4a:6e:fa:42:52:11:c1:df:87:b3:1a:
ec:a9:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:33 2026 by rpki-client