
$ rpki-client -vvf rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
File: kLLxK-elhmO_Fdxxfn1AswJBuOo.mft (raw, json)
Hash identifier: e43P+EF2nRi4Nk/TAto4TUrSoVTC8v6XCbkrHFWCbrA=
Subject key identifier: 37:70:1B:65:B6:88:76:2E:2A:5D:56:99:8E:63:51:F5:9F:61:9F:3E
Authority key identifier: 90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
Certificate issuer: /CN=A916B974/serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Certificate serial: 010C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
Manifest number: 0108
Signing time: Wed 29 Jul 2026 07:31:12 +0000
Manifest this update: Wed 29 Jul 2026 07:31:11 +0000
Manifest next update: Wed 05 Aug 2026 07:31:11 +0000
Files and hashes: 1: kLLxK-elhmO_Fdxxfn1AswJBuOo.crl (hash: D1aGdBTOhc+yiWwxEBnUk+PGAgLPQnECl2LuV9lJ4ZA=)
2: 7D1F1FBEFB6611EFB1FB024BC4F9AE02.roa (hash: pFG5/WCaL+yt9ghGi9neBn3ryCri7CWT6hIptpI2Hyk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 07:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 268 (0x10c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916B974, serialNumber=90B2F12BE7A58663BF15DC717E7D40B30241B8EA
Validity
Not Before: Jul 29 07:31:11 2026 GMT
Not After : Aug 5 07:31:11 2026 GMT
Subject: CN=6a69ac3f-2720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:f9:21:5a:34:bc:93:2a:4e:22:8e:06:3a:
c4:10:2e:b7:ca:8c:0d:ab:fa:ab:7e:0b:81:83:7b:
38:f4:4e:0b:d8:ce:86:fc:c8:de:82:d8:bd:f6:82:
cf:7b:71:b9:c8:7d:08:46:a6:74:9d:c8:f1:4e:0b:
1c:b0:11:22:23:9d:7b:1c:bb:76:04:10:d0:a1:82:
0c:af:13:15:23:ed:44:92:33:0e:7a:84:96:8c:e6:
94:f9:42:16:34:39:05:c2:d8:10:6f:e5:35:8d:cc:
d0:c4:ad:0d:04:1c:0b:52:57:99:39:63:c6:f2:79:
a3:3f:12:1f:fd:52:6d:da:c1:08:78:2a:a7:39:1c:
e3:fa:13:fd:cd:eb:fd:4e:41:db:48:7a:18:ea:3b:
78:3b:ae:8e:96:0c:8b:8d:01:44:6b:83:24:ae:4c:
ee:be:f9:68:f7:5e:d8:4b:ac:be:a1:29:d3:e2:a5:
e6:ba:bf:32:c9:54:ef:b1:b5:e4:35:45:0c:4c:bb:
52:50:6b:04:87:cb:52:46:6d:18:f0:b3:b6:8b:3d:
b9:58:a4:72:54:0e:f5:00:b9:1e:8a:80:30:77:d3:
3e:d2:f6:05:95:52:19:aa:bc:84:d5:99:d9:db:f4:
9a:80:86:e8:36:db:a9:60:87:b3:22:31:de:0f:08:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:70:1B:65:B6:88:76:2E:2A:5D:56:99:8E:63:51:F5:9F:61:9F:3E
X509v3 Authority Key Identifier:
keyid:90:B2:F1:2B:E7:A5:86:63:BF:15:DC:71:7E:7D:40:B3:02:41:B8:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kLLxK-elhmO_Fdxxfn1AswJBuOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B974/E4E8900EFB6511EF9BBAEE49C4F9AE02/kLLxK-elhmO_Fdxxfn1AswJBuOo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:f9:5e:29:7f:e7:bf:f4:f1:57:55:be:5c:6a:e4:31:43:
39:40:52:a7:0e:03:84:78:ba:5b:49:6a:b7:7b:b9:f9:41:d1:
1a:df:cc:3d:7b:25:cc:d7:d5:b4:89:8a:93:a9:f4:df:7f:0a:
c9:c0:80:ca:a6:cb:31:c6:f9:31:24:6a:af:a7:da:95:4b:ad:
f5:14:33:d4:2b:3c:f8:43:49:eb:1e:95:92:76:52:0d:1b:87:
75:4a:f6:f9:d3:42:9e:02:c8:27:2e:bb:02:99:bb:6f:80:21:
29:6f:05:0e:a1:65:bf:c1:6b:ef:17:54:ba:b6:2f:fd:9b:92:
43:c0:90:70:72:c0:70:be:67:c0:80:d6:b8:e4:d0:4e:15:2f:
8c:32:23:20:fc:9f:f7:7a:3b:6b:60:e7:96:93:b5:6d:31:c2:
6f:b9:4e:52:29:2c:1f:f9:b4:a8:06:c0:5a:8d:66:c3:42:e0:
4c:86:35:d9:40:0f:e1:3a:f6:7c:4c:e7:03:9e:a4:9a:3d:a0:
24:87:c5:18:06:23:bb:dc:1a:17:41:76:d5:06:98:ff:47:c6:
5b:84:2c:a8:9c:05:91:b9:c0:f4:3b:1d:ae:79:97:75:1a:ad:
a0:da:fa:dc:ce:6f:37:75:55:2a:8a:96:fb:ab:36:f8:54:05:
0f:43:e5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:10:08 2026 by rpki-client