
$ rpki-client -vvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json)
Hash identifier: 1sJRCt5nAk2WB/yTpa4+AhiMjtlFH6Qz/FfKTi+PxAk=
Subject key identifier: 13:60:11:DD:4C:E5:63:06:24:AF:CF:CA:7A:26:6E:CC:43:B9:6A:00
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial: 0ADE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
Manifest number: 0AD2
Signing time: Mon 22 Jun 2026 19:26:55 +0000
Manifest this update: Mon 22 Jun 2026 19:26:55 +0000
Manifest next update: Mon 29 Jun 2026 19:26:55 +0000
Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: skltdy+h+gb2sGkWY7tmOXqrSsB38NQ2M8tSJSgOgCw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Jun 2026 19:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2782 (0xade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Validity
Not Before: Jun 22 19:26:55 2026 GMT
Not After : Jun 29 19:26:55 2026 GMT
Subject: CN=6a398c7f-d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a1:ec:7e:67:b6:ac:9c:b2:60:b9:81:a4:9d:
f3:08:84:3e:3d:48:01:01:95:1f:7b:6a:bf:31:18:
70:37:fe:f8:32:c2:29:b5:9e:6d:43:c7:38:64:75:
8e:81:e8:87:81:ef:14:21:2d:3c:2a:94:81:b3:80:
74:66:86:9e:dd:b8:1f:81:3b:8a:a8:81:7d:42:d4:
3d:b9:b1:c8:f5:af:f6:d9:0f:e7:21:fa:8d:13:ac:
20:dc:07:8a:da:e0:ea:32:ae:8c:f8:a4:cd:95:3a:
09:68:a8:37:e2:fe:87:fa:94:9f:5a:02:1d:e4:b1:
12:a2:16:35:07:72:a2:b5:aa:06:9b:37:3a:d6:65:
46:5d:05:20:33:a7:b1:db:fe:89:76:4b:62:a5:de:
c1:ed:bf:9d:51:e0:e3:cc:63:15:17:a0:ae:0b:72:
04:70:61:9e:e1:1d:db:f2:c6:a0:97:0f:ae:b0:fa:
7b:3e:54:f4:79:7e:5f:44:1f:bd:1c:ae:22:92:7f:
1c:7c:34:d0:2a:e5:b6:72:ec:d8:c5:33:b8:75:f4:
78:2c:67:23:34:5b:d1:12:28:9e:3f:34:51:78:cb:
47:16:64:3f:32:53:68:ac:ea:27:0a:c5:fa:2b:5c:
60:9e:ed:dd:f8:e7:10:a1:17:d6:4f:b5:6a:ac:69:
2a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:11:DD:4C:E5:63:06:24:AF:CF:CA:7A:26:6E:CC:43:B9:6A:00
X509v3 Authority Key Identifier:
keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:2c:5a:33:50:75:c8:7c:53:28:28:a6:e3:cf:44:0e:da:5f:
91:09:d1:ca:63:24:54:d7:a2:4c:7f:92:af:8a:90:5c:95:2d:
f4:84:25:2f:0a:d4:75:9d:b3:9b:4a:80:0a:a6:79:99:e7:9d:
76:a9:eb:ae:aa:c9:5d:cb:37:45:b0:55:53:ee:19:e6:fa:d0:
34:58:77:6b:1b:2b:ee:b0:2f:27:cd:33:81:83:40:e6:0f:eb:
f0:67:4f:ef:fe:cc:4d:25:14:f1:04:1c:f7:77:07:9e:8a:fe:
1c:b0:ca:25:4d:7e:2c:19:d7:1e:4b:94:bd:15:c9:69:3e:d5:
38:62:c7:5e:66:3f:b0:c5:45:70:4a:22:04:fa:9d:c9:46:40:
92:20:8f:ed:88:0c:8a:75:c0:82:3c:4b:3b:36:e9:45:af:c7:
ee:42:f6:ca:de:20:68:1f:07:16:cf:4c:47:98:6a:95:7f:e9:
6c:c8:61:c3:d3:5c:b7:83:5c:c3:03:9f:db:59:4f:58:9b:47:
23:3c:a7:5c:3e:24:4e:e9:16:4b:a5:8b:0a:f7:08:b3:b4:09:
fc:41:f4:b9:00:45:24:a9:98:ed:7d:e8:9a:58:1a:0c:81:db:
2a:0e:88:2a:dc:b5:99:7b:5a:68:16:62:59:27:8f:13:8b:ab:
4e:ea:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:30:36 2026 by rpki-client