
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json)
Hash identifier: /ZvYSeMPDePihId5zhadobZNcEwBsoaT32QA3IPoyUo=
Subject key identifier: 2C:5E:5B:DD:27:E4:84:95:C1:D2:57:B1:29:4F:B3:62:E6:EB:9F:D3
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial: 08CD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
Manifest number: 08C1
Signing time: Fri 02 Oct 2026 20:48:56 +0000
Manifest this update: Fri 02 Oct 2026 20:48:56 +0000
Manifest next update: Fri 09 Oct 2026 20:48:56 +0000
Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: Kis9sTXrf+N0l0u9jCtyBLe993VV5huOQ4LN2O7Pv7A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 20:48:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2253 (0x8cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Validity
Not Before: Oct 2 20:48:56 2026 GMT
Not After : Oct 9 20:48:56 2026 GMT
Subject: CN=6ac018b8-8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ed:47:72:0c:20:cf:b2:bd:ba:25:6d:fc:22:
78:48:3f:dc:ac:8d:17:bb:fd:6e:76:91:a4:1b:e0:
1d:56:cc:fc:95:47:ad:85:93:cb:9a:6f:f7:30:8a:
0f:d4:0d:01:d2:df:cd:8b:34:6c:6b:d6:52:9e:c9:
6e:5e:67:13:62:13:35:95:df:e5:62:bb:55:15:c2:
eb:82:fa:77:7c:99:89:9a:28:49:36:cb:84:a8:77:
56:ba:47:79:4b:95:1a:12:75:15:1e:95:43:5b:13:
3d:63:56:72:ce:2e:45:51:7e:81:a2:5a:4e:39:e1:
7a:d9:70:8f:37:ac:76:f8:0c:74:34:b0:c5:3e:3d:
18:44:64:48:93:77:43:7e:f5:68:8b:d6:46:e3:d4:
42:22:46:a4:51:09:1d:96:4a:09:04:47:f0:dd:3b:
8a:d2:09:20:5b:9c:e0:f7:3e:8c:73:ce:d5:4c:a8:
54:c2:59:13:b2:74:c9:14:85:65:b9:25:97:94:ed:
ca:0d:1d:3c:54:e4:1b:c6:6c:d3:0e:c3:ed:74:83:
74:8a:05:65:e8:49:81:f1:6d:b0:0f:f1:5e:7f:b6:
2e:31:88:43:ef:ea:64:80:90:be:0a:58:9a:61:af:
41:5d:62:6c:19:c6:f6:01:ab:89:3f:94:d7:42:4f:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5E:5B:DD:27:E4:84:95:C1:D2:57:B1:29:4F:B3:62:E6:EB:9F:D3
X509v3 Authority Key Identifier:
keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:a0:3c:72:29:5c:23:4a:42:57:8f:0f:a5:a7:36:b8:34:
5c:f2:b0:0b:a7:6c:7b:6c:c0:a6:87:70:95:2a:a1:b4:3e:71:
ac:73:5d:38:40:ab:82:30:71:10:e0:0a:6e:89:4f:48:da:46:
a9:3c:d1:94:e1:72:c2:39:52:8c:a8:2e:f3:02:51:53:02:97:
b0:14:1c:d4:4f:90:f4:fe:54:6f:2f:bf:84:70:00:f9:03:9b:
55:eb:04:fa:89:0c:d4:d0:27:5e:c4:5a:25:a6:e9:fd:b4:f9:
8c:fa:b1:ae:9c:a2:a7:9d:88:3a:ef:78:1f:14:10:21:3f:d4:
8b:06:35:98:e6:6c:32:a0:a1:da:38:94:85:eb:0c:c7:81:07:
97:66:71:6c:d2:a8:c6:4c:c4:02:9c:c8:b9:1c:9d:8f:d1:9e:
2d:97:f9:e2:55:3e:be:80:13:90:94:a3:6b:fc:ee:87:c9:6d:
45:60:a0:b5:f9:5a:81:43:ae:14:d4:71:17:47:d5:82:9e:4c:
8c:d7:b5:4c:19:c5:35:df:81:15:53:27:8b:dd:48:aa:52:36:
7a:93:70:45:e5:b5:0a:24:73:e1:3a:45:d1:9e:0c:2a:fc:72:
e3:95:93:05:2b:d0:f6:6f:2e:74:6d:d5:61:d0:c4:f9:95:b8:
0c:e8:12:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE
RUE1MjU0OEEwHhcNMjYxMDAyMjA0ODU2WhcNMjYxMDA5MjA0ODU2WjAYMRYwFAYD
VQQDEw02YWMwMThiOC04OTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9u1Hcgwgz7K9uiVt/CJ4SD/crI0Xu/1udpGkG+AdVsz8lUethZPLmm/3MIoP
1A0B0t/NizRsa9ZSnsluXmcTYhM1ld/lYrtVFcLrgvp3fJmJmihJNsuEqHdWukd5
S5UaEnUVHpVDWxM9Y1Zyzi5FUX6BolpOOeF62XCPN6x2+Ax0NLDFPj0YRGRIk3dD
fvVoi9ZG49RCIkakUQkdlkoJBEfw3TuK0gkgW5zg9z6Mc87VTKhUwlkTsnTJFIVl
uSWXlO3KDR08VOQbxmzTDsPtdIN0igVl6EmB8W2wD/Fef7YuMYhD7+pkgJC+Clia
Ya9BXWJsGcb2AauJP5TXQk/RdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxeW90n
5ISVwdJXsSlPs2Lm65/TMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC
RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS
RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJ2ygPHIpXCNKQlePD6WnNrg0XPKwC6dse2zApodwlSqhtD5xrHNdOECrgjBx
EOAKbolPSNpGqTzRlOFywjlSjKgu8wJRUwKXsBQc1E+Q9P5Uby+/hHAA+QObVesE
+okM1NAnXsRaJabp/bT5jPqxrpyip52IOu94HxQQIT/UiwY1mOZsMqCh2jiUhesM
x4EHl2ZxbNKoxkzEApzIuRydj9GeLZf54lU+voATkJSja/zuh8ltRWCgtflagUOu
FNRxF0fVgp5MjNe1TBnFNd+BFVMni91IqlI2epNwReW1CiRz4TpF0Z4MKvxy45WT
BSvQ9m8udG3VYdDE+ZW4DOgSWA==
-----END CERTIFICATE-----
Generated at Sun Oct 4 05:34:36 2026 by rpki-client