
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
File: 1mk-41xy689CY8aYRW2C9o5xT1w.mft (raw, json)
Hash identifier: VyggyNlUnRuyK98yJu5LNXEi+cQwS2KOSGAXfKhcGeM=
Subject key identifier: 90:E8:04:98:63:FE:70:31:00:60:48:F0:81:9A:A2:C4:96:B7:36:33
Authority key identifier: D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
Certificate issuer: /CN=A916EF5E/serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Certificate serial: 0A85
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
Manifest number: 0A85
Signing time: Fri 16 Oct 2026 16:40:55 +0000
Manifest this update: Fri 16 Oct 2026 16:40:55 +0000
Manifest next update: Fri 23 Oct 2026 16:40:55 +0000
Files and hashes: 1: 1mk-41xy689CY8aYRW2C9o5xT1w.crl (hash: kil0Clt14YGcXuOSqSPkgpbp9g0cGx+SVIEO0UV3B/s=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 14:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2693 (0xa85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916EF5E, serialNumber=D6693EE35C72EBCF4263C698456D82F68E714F5C
Validity
Not Before: Oct 16 16:40:55 2026 GMT
Not After : Oct 23 16:40:55 2026 GMT
Subject: CN=6ad25397-fc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:2a:1b:95:79:67:13:e7:04:50:8e:3f:aa:
fb:d2:97:8a:60:92:b3:dd:4a:20:2a:bc:7b:2b:a2:
13:19:b3:0d:f3:5c:92:06:c2:5e:47:79:b5:37:4a:
7e:50:98:43:bb:2c:de:bb:18:15:d6:65:f9:c2:14:
b8:d8:88:e5:b0:2d:cb:1f:f4:2b:6e:c8:fd:f3:53:
16:7e:9b:7e:68:fe:53:80:c3:b9:49:9b:71:76:8a:
cd:5c:c6:59:6d:56:fb:3e:78:03:ae:ca:17:b9:e0:
ca:2c:bf:72:b7:b1:64:b1:5d:d5:72:fd:95:bf:a8:
6f:a9:67:d7:79:20:5d:a8:ab:d0:c0:71:0d:bd:42:
2f:b9:3c:30:5a:f7:aa:36:92:b5:4a:5c:26:13:d5:
f3:ab:3f:19:5d:f5:8c:aa:62:24:3f:a7:89:71:93:
ac:53:72:2d:10:97:73:2b:89:56:50:16:21:ed:8b:
c7:72:76:06:b6:c1:b0:31:24:92:8d:94:0c:b7:02:
17:dc:b2:be:a9:9d:57:8f:02:3f:fe:8a:3a:0d:10:
36:ba:9a:b3:5a:af:e6:8a:7d:32:58:28:e8:ba:7b:
d5:68:fd:df:a5:46:6a:97:ad:06:01:d3:c9:30:92:
39:03:8c:0b:f9:d4:a3:1b:13:3d:fe:34:1a:eb:1f:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:04:98:63:FE:70:31:00:60:48:F0:81:9A:A2:C4:96:B7:36:33
X509v3 Authority Key Identifier:
keyid:D6:69:3E:E3:5C:72:EB:CF:42:63:C6:98:45:6D:82:F6:8E:71:4F:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1mk-41xy689CY8aYRW2C9o5xT1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/2CE494C08F9611EA9ACB7E7FC4F9AE02/1mk-41xy689CY8aYRW2C9o5xT1w.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:30:77:61:46:3e:94:b8:00:46:9f:5a:2c:78:53:18:ee:
55:66:e9:d7:49:f6:ba:52:34:8e:f8:16:e9:ce:00:8a:23:b9:
81:0a:4f:ba:a1:f5:ce:61:57:41:1a:c3:66:74:29:30:90:4a:
d4:d7:ce:ca:8c:64:f9:54:ae:be:06:82:ae:96:9d:21:cd:13:
e2:34:22:5c:ca:5e:d1:97:08:db:cb:be:ca:ab:41:d7:d8:58:
3c:bd:e1:3f:21:d0:e7:43:08:e5:89:8c:87:14:a5:66:8c:10:
56:a0:eb:72:79:c1:20:9a:49:9e:98:b0:e4:4d:b8:6a:59:3b:
82:b0:14:18:07:32:bd:23:d1:6c:29:53:03:1b:f2:2f:e5:7f:
bd:14:3f:72:3b:6a:4c:78:c3:d0:3d:d4:08:2a:29:7e:7e:50:
41:b5:10:c5:97:0f:d9:16:a2:9e:30:b0:63:69:a8:a0:f5:6f:
28:bf:df:fe:8c:a4:ae:30:e6:87:86:07:be:9e:a6:a6:ef:d9:
a4:56:68:5a:e7:d3:57:70:f2:91:e6:ea:fe:f1:46:58:e8:7c:
8b:7d:49:a2:1b:09:a7:55:9e:bb:41:0a:f0:4a:d5:ca:4c:36:
45:3e:c2:ef:56:e8:ba:e8:82:1c:6a:40:ac:07:97:04:99:a5:
df:0e:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:08 2026 by rpki-client