
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
File: khLuorkaMmYPdScf7IWJswnDifA.mft (raw, json)
Hash identifier: Hw7UunkmPM7puHTa/P8nzWHwIJW9Lh60Q32SxyjbJGg=
Subject key identifier: 10:AC:8D:A3:8D:6E:C8:30:BC:E5:F9:8F:09:7D:8B:FD:31:2D:3E:2B
Authority key identifier: 92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
Certificate issuer: /CN=A91999F5/serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Certificate serial: 049D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
Manifest number: 0491
Signing time: Sun 20 Sep 2026 23:50:31 +0000
Manifest this update: Sun 20 Sep 2026 23:50:31 +0000
Manifest next update: Sun 27 Sep 2026 23:50:31 +0000
Files and hashes: 1: khLuorkaMmYPdScf7IWJswnDifA.crl (hash: 3mbHcmnqn115rpWZyYs1MdleoeSc65Ck0ODLUaDO9og=)
2: F84777FCD9DC11EDA4083A71C4F9AE02.roa (hash: 2dklAfTnHhtRgzsOUzlnr7mFdnQGrY5LhPyI2dkyTlU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91999F5, serialNumber=9212EEA2B91A32660F75271FEC8589B309C389F0
Validity
Not Before: Sep 20 23:50:31 2026 GMT
Not After : Sep 27 23:50:31 2026 GMT
Subject: CN=6ab07147-a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:ea:58:b3:58:38:20:83:2c:ad:69:bd:e4:
52:da:20:73:35:00:a4:78:d7:8b:b9:ac:12:44:20:
1d:36:97:00:45:e2:b6:84:cd:89:a5:63:6f:de:37:
6c:16:64:0d:32:bf:77:bf:56:fd:0e:3f:2f:e8:88:
2d:d5:83:0a:4a:35:14:c8:4e:0d:18:55:db:3b:f0:
30:18:68:18:82:fb:aa:aa:c3:cb:78:7b:9a:81:ab:
e2:21:48:c5:e2:7e:40:86:1c:d2:bb:d9:07:97:7f:
18:d2:e5:03:bd:eb:32:dd:87:4b:9b:02:a9:9b:f3:
d5:27:ca:5f:bd:8e:09:09:3a:bb:49:25:44:dd:4e:
ee:78:48:18:52:00:94:11:2e:bb:72:56:57:15:8e:
33:69:fc:5f:2d:46:bf:49:b2:22:07:51:86:25:c2:
84:32:81:78:c6:24:22:40:cb:f1:2c:c8:c3:0f:88:
70:7d:b3:f6:f0:a0:b1:8e:40:9d:98:c1:42:4e:9a:
0a:dd:70:4d:0a:9f:7e:2a:6c:61:b0:c1:fe:17:5a:
ad:65:84:ae:07:be:3b:7c:f6:51:91:f1:74:8f:3b:
36:25:2f:85:db:f2:7c:de:5e:cb:0e:05:0b:fa:e0:
ae:e7:7d:78:1b:9d:89:31:94:6e:78:c2:24:86:59:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AC:8D:A3:8D:6E:C8:30:BC:E5:F9:8F:09:7D:8B:FD:31:2D:3E:2B
X509v3 Authority Key Identifier:
keyid:92:12:EE:A2:B9:1A:32:66:0F:75:27:1F:EC:85:89:B3:09:C3:89:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/khLuorkaMmYPdScf7IWJswnDifA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91999F5/6A3DB5789F7911EC9CB47A0AC4F9AE02/khLuorkaMmYPdScf7IWJswnDifA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:ae:67:49:7f:f9:fe:ce:67:a3:73:6b:6c:b2:1a:41:37:bb:
91:87:d2:9e:67:87:3b:1a:54:9b:68:15:fc:c6:e6:0d:69:44:
07:89:89:a3:6e:41:f9:3c:36:12:22:0a:7c:4c:48:37:35:a4:
c7:c5:21:7a:3a:79:89:c4:09:74:e2:75:8a:24:32:e1:1f:89:
de:25:2a:5b:d2:58:40:72:55:ad:bb:97:e1:54:6d:f8:53:c5:
aa:e2:48:6b:c1:61:27:76:71:5d:5e:8f:cd:e9:e6:48:57:9b:
cf:7e:65:a9:92:73:13:e2:fd:1d:13:4f:58:32:26:2d:c5:b8:
11:9f:a0:65:5b:af:c8:07:d5:79:85:10:33:f2:91:6e:ef:a3:
75:ba:ee:cd:f3:6c:bd:1d:80:dd:03:79:34:d7:04:7c:de:a0:
61:18:46:bb:1f:34:99:b0:ff:bd:f5:b9:25:51:08:2d:02:99:
fd:8d:7f:90:e9:a9:43:7b:74:fe:a2:0b:8b:ba:dc:4b:05:9a:
e4:cd:c7:f1:74:30:55:25:42:40:2c:4e:97:12:fc:36:cd:56:
8c:d4:32:dd:20:fb:74:d3:4d:4e:55:17:a2:d1:52:38:5b:a9:
7b:23:ac:be:51:43:1a:cb:87:33:40:1c:d9:84:5c:fc:3e:c0:
97:04:35:49
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk5RjUxMTAvBgNVBAUTKDkyMTJFRUEyQjkxQTMyNjYwRjc1MjcxRkVDODU4OUIz
MDlDMzg5RjAwHhcNMjYwOTIwMjM1MDMxWhcNMjYwOTI3MjM1MDMxWjAYMRYwFAYD
VQQDEw02YWIwNzE0Ny1hNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwd/qWLNYOCCDLK1pveRS2iBzNQCkeNeLuawSRCAdNpcAReK2hM2JpWNv3jds
FmQNMr93v1b9Dj8v6Igt1YMKSjUUyE4NGFXbO/AwGGgYgvuqqsPLeHuagaviIUjF
4n5AhhzSu9kHl38Y0uUDvesy3YdLmwKpm/PVJ8pfvY4JCTq7SSVE3U7ueEgYUgCU
ES67clZXFY4zafxfLUa/SbIiB1GGJcKEMoF4xiQiQMvxLMjDD4hwfbP28KCxjkCd
mMFCTpoK3XBNCp9+KmxhsMH+F1qtZYSuB747fPZRkfF0jzs2JS+F2/J83l7LDgUL
+uCu5314G52JMZRueMIkhll8RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCsjaON
bsgwvOX5jwl9i/0xLT4rMB8GA1UdIwQYMBaAFJIS7qK5GjJmD3UnH+yFibMJw4nw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTlGNS82QTNEQjU3ODlG
NzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1tWVBkU2NmN0lXSnN3bkRp
ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2toTHVvcmthTW1ZUGRTY2Y3SVdKc3duRGlmQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTlGNS82QTNEQjU3ODlGNzkxMUVDOUNCNDdBMEFDNEY5QUUwMi9raEx1b3JrYU1t
WVBkU2NmN0lXSnN3bkRpZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAdq5nSX/5/s5no3NrbLIaQTe7kYfSnmeHOxpUm2gV/MbmDWlEB4mJo25B+Tw2
EiIKfExINzWkx8Uhejp5icQJdOJ1iiQy4R+J3iUqW9JYQHJVrbuX4VRt+FPFquJI
a8FhJ3ZxXV6PzenmSFebz35lqZJzE+L9HRNPWDImLcW4EZ+gZVuvyAfVeYUQM/KR
bu+jdbruzfNsvR2A3QN5NNcEfN6gYRhGux80mbD/vfW5JVEILQKZ/Y1/kOmpQ3t0
/qILi7rcSwWa5M3H8XQwVSVCQCxOlxL8Ns1WjNQy3SD7dNNNTlUXotFSOFupeyOs
vlFDGsuHM0Ac2YRc/D7AlwQ1SQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:43:59 2026 by rpki-client