
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
File: KHuwzWb71-W3qIumZ4kSTAsExXg.mft (raw, json)
Hash identifier: SrTWHuL9kbmbqKegSqJTU1fTF7fTPEEvolibAfio9gg=
Subject key identifier: 7E:C2:F5:C4:F3:FA:93:86:4C:60:BA:9A:3F:1F:E5:41:83:F4:32:33
Authority key identifier: 28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
Certificate issuer: /CN=A91EAE25/serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Certificate serial: 0C27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
Manifest number: 0C19
Signing time: Thu 16 Apr 2026 18:43:40 +0000
Manifest this update: Thu 16 Apr 2026 18:43:39 +0000
Manifest next update: Thu 23 Apr 2026 18:43:39 +0000
Files and hashes: 1: KHuwzWb71-W3qIumZ4kSTAsExXg.crl (hash: 2DRui2OZHGckZmJzkWbG9eA7TESSYmiQ5a1Ut/ZcL0M=)
2: 2BA212DC306D11EA81D19B38C4F9AE02.roa (hash: FbKjiGyoYXtJ+Sip8tCWTgSCfHXUOeTdm95y0Shz3Pc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 18:43:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE25, serialNumber=287BB0CD66FBD7E5B7A88BA66789124C0B04C578
Validity
Not Before: Apr 16 18:43:39 2026 GMT
Not After : Apr 23 18:43:39 2026 GMT
Subject: CN=69e12ddb-a25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4c:d1:f8:c5:30:5d:60:86:51:69:97:bd:4e:
bd:a4:33:ea:90:58:30:ea:5f:f6:bc:1d:07:55:8f:
df:e4:2e:eb:24:bd:e7:c6:d2:7f:ab:bd:ec:34:cf:
6d:e3:64:eb:99:7e:38:69:32:00:0b:f6:85:a3:a1:
af:bc:ee:fc:c8:2c:b4:39:17:e2:3c:cc:99:41:eb:
e3:09:3a:31:01:31:f2:14:35:35:ee:c9:7e:de:b8:
72:22:b2:c0:4b:18:d8:ff:b8:04:0d:a3:cd:3f:27:
59:11:6a:f0:07:ca:b8:37:12:2e:8c:f8:05:ac:aa:
f3:f8:55:8c:08:bc:da:79:f0:1b:ca:ed:25:5d:34:
cc:e5:df:37:72:f0:38:62:71:0d:e8:fd:1e:e7:64:
36:12:c1:d2:a6:c4:86:f7:44:49:d3:9a:dd:41:b4:
a4:d2:99:b3:66:0b:6c:71:8a:ea:bf:e3:f2:7f:76:
0b:ab:26:40:43:e0:e1:91:78:74:ae:0c:94:c2:42:
c8:6d:b3:ec:38:e9:4d:a1:6e:e3:2d:f5:91:76:8c:
31:93:99:29:22:ba:1a:7c:7a:37:87:d3:9e:ee:84:
ac:ee:90:86:26:42:5d:b2:d1:4b:1f:df:85:d4:e3:
98:16:98:5b:ee:9b:6b:64:46:43:ba:9b:3d:29:c7:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C2:F5:C4:F3:FA:93:86:4C:60:BA:9A:3F:1F:E5:41:83:F4:32:33
X509v3 Authority Key Identifier:
keyid:28:7B:B0:CD:66:FB:D7:E5:B7:A8:8B:A6:67:89:12:4C:0B:04:C5:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KHuwzWb71-W3qIumZ4kSTAsExXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE25/68E57AEE306811EAA706E32AC4F9AE02/KHuwzWb71-W3qIumZ4kSTAsExXg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fd:4b:09:e4:7a:a6:63:1c:01:c2:9e:b4:a4:a3:ee:e6:da:
61:26:07:30:b8:76:7b:3b:d2:a0:0e:0e:61:5f:52:5b:93:02:
43:76:73:20:3c:ce:01:34:3e:37:50:ed:37:83:86:f0:e5:c3:
bc:6b:05:ec:3f:8d:49:8f:9f:4e:07:7d:5e:70:03:e3:3a:30:
13:63:35:dc:ea:8d:c3:97:14:15:1a:48:60:c4:5c:88:87:fc:
ea:d9:6a:29:86:ce:8e:8f:b5:d7:17:31:e8:44:0f:b0:5d:c5:
07:38:4d:e6:45:de:b5:af:c5:59:c5:87:2d:e6:b0:17:2a:3e:
73:da:11:27:ea:25:48:c6:61:c4:f8:5c:be:66:6b:4e:67:7c:
61:51:92:88:ac:5d:d3:9d:aa:4d:c0:2c:82:91:75:62:76:c6:
ec:ae:08:47:f2:5b:15:17:6e:fb:ea:96:8b:7f:ba:b2:34:4a:
24:dc:68:46:15:61:b4:d8:5c:29:0d:b5:17:28:fa:10:c9:75:
c1:62:ab:85:f5:d6:f2:a3:a5:62:1e:18:62:f1:0e:2a:b4:19:
a5:70:a8:c2:31:aa:4b:ba:f3:05:29:a7:77:e4:35:21:3f:24:
05:11:d9:c0:e5:b9:04:60:27:0a:c8:64:93:e7:82:4f:51:84:
11:56:0e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:03:07 2026 by rpki-client