
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
File: Khx4XL6-fNe6tToSO2BVhg9gfxg.mft (raw, json)
Hash identifier: zAChWZBAeD3LmKY0XdJ2o4wlPcadhUZ8gW/VfHz7Pds=
Subject key identifier: 06:50:6D:AD:3E:1F:28:BC:E9:CF:0A:17:BA:81:BC:69:C4:E0:0D:65
Authority key identifier: 2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
Certificate issuer: /CN=A91D6AB2/serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Certificate serial: 0930
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
Manifest number: 0E41
Signing time: Sun 04 Oct 2026 20:14:25 +0000
Manifest this update: Sun 04 Oct 2026 20:14:24 +0000
Manifest next update: Sun 11 Oct 2026 20:14:24 +0000
Files and hashes: 1: Khx4XL6-fNe6tToSO2BVhg9gfxg.crl (hash: 6FuAEHxkjh7wbioeWwgYuvMY38ckDGYQ/EIUODCrPEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 20:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2352 (0x930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6AB2, serialNumber=2A1C785CBEBE7CD7BAB53A123B6055860F607F18
Validity
Not Before: Oct 4 20:14:24 2026 GMT
Not After : Oct 11 20:14:24 2026 GMT
Subject: CN=6ac2b3a0-0e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1d:d7:e1:f4:1c:30:e9:a0:6e:f0:28:9b:00:
c3:aa:b6:76:2f:f4:8d:f4:92:f1:3c:09:cf:c9:52:
fe:4b:a0:64:1d:de:00:c0:59:cc:5c:88:21:32:14:
90:8c:ac:67:76:db:24:68:1f:33:a2:40:74:96:86:
ed:8f:98:44:72:95:5b:2f:8b:7a:55:a3:03:a9:d6:
b3:a1:fe:b1:59:9a:59:69:99:a5:c9:5a:66:0e:86:
e2:5a:62:3a:b9:7f:90:ed:79:12:1f:f2:c5:bb:49:
a6:9b:aa:65:83:43:81:e1:29:b0:be:56:d8:48:5f:
2f:73:41:f5:7e:aa:97:26:af:d8:80:c6:56:d1:4b:
07:7b:bf:1c:7e:f7:b2:3c:64:a3:fd:03:3f:9c:d2:
be:06:1f:89:d2:2e:b9:b6:d6:4d:24:06:b1:f1:b1:
45:a1:b9:bd:59:30:4d:1d:56:d6:05:ef:a5:35:97:
b8:2b:b8:d3:5d:8a:eb:fb:da:f5:79:f9:6f:e3:5e:
7e:24:1b:1f:14:8d:ab:f7:ad:67:c8:8a:8d:c9:17:
6f:0b:cf:b1:62:74:c7:e7:53:2e:3c:2d:0d:8e:f6:
6d:da:86:dd:f6:b6:e5:dc:c8:c2:34:80:94:ef:08:
40:dc:d4:b1:77:93:bb:38:b0:68:49:32:fd:4a:b8:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:50:6D:AD:3E:1F:28:BC:E9:CF:0A:17:BA:81:BC:69:C4:E0:0D:65
X509v3 Authority Key Identifier:
keyid:2A:1C:78:5C:BE:BE:7C:D7:BA:B5:3A:12:3B:60:55:86:0F:60:7F:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Khx4XL6-fNe6tToSO2BVhg9gfxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/Khx4XL6-fNe6tToSO2BVhg9gfxg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:51:91:d6:f8:c1:78:9e:b4:3d:70:c6:29:72:23:d4:21:06:
9a:ea:6b:fc:5a:cf:db:d6:26:c3:21:8c:ea:b8:98:01:54:a9:
90:1b:c2:1d:9e:22:fd:4d:10:10:b2:ab:d8:92:bb:19:87:4b:
32:d8:21:88:15:2d:75:44:40:b1:cd:99:b8:fd:a9:53:96:8f:
2e:77:d4:7a:d5:99:2f:f6:56:69:92:f0:85:f8:e5:d6:a1:c2:
af:b6:43:d6:e5:94:47:c8:fe:72:da:f4:17:04:b4:aa:ac:67:
a5:8a:3b:19:23:e1:f4:de:0e:c0:b7:b7:da:e0:23:6a:b4:08:
0f:fa:0a:b0:2b:b3:f5:5c:04:ab:74:7a:b6:95:d4:5d:a8:52:
a7:cb:33:9d:98:b0:e4:f0:35:1f:7c:67:57:ba:b2:35:52:d6:
fb:47:be:ce:06:54:9d:af:b2:06:03:21:e3:2f:26:7a:06:01:
31:d4:9d:d5:2b:2c:89:f4:f8:e2:a1:e1:7e:d6:d7:e1:7e:32:
8c:5a:05:44:1f:27:2d:e1:26:1d:21:3a:61:bb:44:53:d2:c0:
b1:8c:09:63:13:77:25:5f:89:51:96:2a:31:5c:52:39:9e:ae:
e0:8c:a7:66:54:f4:73:dd:29:6b:7d:a0:c5:9d:2b:35:95:16:
99:a4:01:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:54:50 2026 by rpki-client