
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier: R7ahghGGJ3VYpcTDoDZFGqeqtpCSBzLtN901Rko8SCA=
Subject key identifier: 9B:E6:A7:59:8E:28:9A:0F:FC:2F:46:99:F7:35:AD:2D:C8:A0:E7:37
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial: BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number: BB
Signing time: Sun 01 Mar 2026 08:16:31 +0000
Manifest this update: Sun 01 Mar 2026 08:16:31 +0000
Manifest next update: Sun 08 Mar 2026 08:16:31 +0000
Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: 6MHmMZxWQDFuAZ9f6YPbU/MmRXFt7hq+ike9fmvs9gg=)
2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: IJ2tS5zh75Ix9kpknsYxaCFNOcdydMZlDx/emMQgKZE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 08:16:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Validity
Not Before: Mar 1 08:16:31 2026 GMT
Not After : Mar 8 08:16:31 2026 GMT
Subject: CN=69a3f5df-ddbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:31:95:aa:a9:38:a4:15:a9:e6:eb:5c:73:
2f:a6:56:ba:30:ba:2b:5a:eb:3e:0d:0d:c1:32:54:
d2:0f:5c:f8:3f:5d:66:32:22:4e:7e:15:df:9d:9c:
80:78:b0:3f:17:d6:17:d8:ef:bb:8c:d7:cc:89:01:
5a:9a:41:23:e7:ce:02:11:62:11:ba:10:6e:9a:88:
31:b4:b6:ea:98:3b:0a:b2:4f:24:91:81:59:b2:de:
40:24:b6:e9:36:6d:c8:52:b9:4b:2f:4b:b7:a7:df:
cb:b0:15:02:e4:05:40:86:19:2c:58:3d:be:4a:af:
3e:8d:25:f2:5e:7d:d4:e1:0a:6a:de:9a:5a:b1:fe:
e2:fd:10:ef:76:46:52:b3:d7:f0:be:e5:73:ab:58:
38:f6:3e:84:a8:72:9c:87:dd:b2:19:7a:9b:28:c8:
34:34:27:09:ed:1a:b1:96:72:ca:ad:5e:87:14:78:
da:65:c3:43:77:33:2b:bb:e5:c5:28:d9:52:20:46:
51:54:7e:6e:1e:97:54:72:30:67:41:e7:f9:bb:be:
5f:79:b0:04:f4:e2:9c:07:34:94:9b:14:ae:af:36:
30:33:b5:6d:dd:92:ab:76:15:77:1a:d8:9a:32:9d:
0f:23:77:f0:f5:c4:24:d9:9e:3b:13:a4:fc:6d:f0:
6c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E6:A7:59:8E:28:9A:0F:FC:2F:46:99:F7:35:AD:2D:C8:A0:E7:37
X509v3 Authority Key Identifier:
keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:38:8f:d3:f4:af:c5:76:2c:ba:4a:9c:0d:fd:10:38:64:99:
7e:81:5a:7f:51:c0:8c:4a:6b:d4:74:b8:01:60:3f:06:96:33:
a7:56:75:18:be:07:ff:5e:ff:c9:27:62:db:1a:9b:b5:71:c9:
d1:69:c0:74:ec:ea:b0:48:b9:66:64:29:2e:b3:ea:4e:06:77:
7d:04:07:4b:43:c8:e0:f5:e3:86:c1:50:6f:15:1f:45:a9:de:
2e:4f:b8:2d:ca:cb:ce:3b:e5:9f:b5:05:c1:f7:13:40:34:dc:
a0:32:f4:6e:16:4d:ba:9a:7d:86:11:0e:55:75:00:05:8a:fd:
53:05:2c:55:fd:11:25:74:da:0c:1e:41:08:c4:78:e6:37:bc:
42:cd:a3:dd:82:07:5e:7f:9f:be:0f:45:96:86:13:01:71:87:
b0:1c:e7:fb:f6:d1:a7:1d:85:c3:4e:7b:c7:9a:3f:c5:db:18:
eb:7e:e1:95:e0:bf:ff:b5:34:3f:46:a2:e0:f6:fa:09:76:35:
1a:24:25:8c:3b:74:8f:55:a1:ef:b9:0a:66:e3:02:3c:1c:9d:
53:e5:2f:43:4b:98:66:d3:46:f2:92:48:48:b1:a3:81:a3:1b:
b3:ce:94:e2:c4:68:dd:dc:91:2f:58:f5:e0:74:5a:0c:ab:d4:
f3:b9:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:16 2026 by rpki-client