
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json)
Hash identifier: ZNXqI0mxjRpB/3zQmwFSY827Td8C5vWytihHgjeWuEQ=
Subject key identifier: EB:42:CE:F6:74:74:5C:03:BB:23:1D:79:D2:4C:F8:67:3F:0B:58:18
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial: 0B14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
Manifest number: 0B08
Signing time: Tue 06 Oct 2026 19:27:53 +0000
Manifest this update: Tue 06 Oct 2026 19:27:53 +0000
Manifest next update: Tue 13 Oct 2026 19:27:53 +0000
Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: sEK1LLkAEod180sEeLm0yAHINIyH7ZCk+q88BCq73OE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 19:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Validity
Not Before: Oct 6 19:27:53 2026 GMT
Not After : Oct 13 19:27:53 2026 GMT
Subject: CN=6ac54bb9-62db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b1:0b:bf:e8:a9:a0:11:fc:a7:f9:18:ff:68:
98:cb:e5:6e:7e:ff:6f:ae:ad:f6:61:f0:86:60:98:
b9:5b:78:87:d3:73:51:ec:d3:54:52:51:e8:d3:e3:
27:5f:dd:8e:7a:c9:14:47:b0:9b:d0:3d:7c:71:76:
c4:89:1d:7a:dd:c7:41:bb:75:f6:b0:af:04:69:74:
b6:46:68:30:9a:6d:33:ee:31:41:e2:a1:f6:8d:03:
09:20:c2:21:47:db:90:77:05:11:bc:1e:74:0c:2d:
2c:f5:5e:91:31:6b:c4:40:c3:8f:1c:ad:ff:2f:69:
40:e8:b2:a0:a2:18:2c:5c:4b:6e:38:c6:a6:cb:27:
5f:01:e3:fa:cd:94:3b:3d:25:ba:e2:8b:b5:58:48:
d7:5b:00:37:8a:b0:63:c1:4a:0e:51:56:8f:9d:12:
85:ca:40:3d:be:42:52:02:40:8e:c0:f1:d4:68:a4:
45:c6:30:96:36:62:b2:9a:28:3b:6a:c1:b0:2a:dd:
54:20:2c:d0:84:cf:87:8a:c6:89:51:db:ed:9c:e5:
ee:72:20:58:99:94:33:12:49:74:23:63:0f:7d:f5:
96:66:04:e3:c7:2e:97:fa:58:b3:92:66:0d:52:47:
d5:82:be:47:76:1d:39:a0:4d:b5:22:af:16:6a:30:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:42:CE:F6:74:74:5C:03:BB:23:1D:79:D2:4C:F8:67:3F:0B:58:18
X509v3 Authority Key Identifier:
keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:7f:71:3d:c6:8c:4e:36:c4:0d:b3:48:77:97:4e:d7:f5:2c:
d2:34:17:4a:d0:d6:4a:48:a5:e0:aa:9c:04:80:d3:73:dd:a4:
7f:10:47:b9:56:5e:bb:09:e3:e8:e1:dc:f8:be:b3:e8:62:10:
e8:07:db:a7:ec:54:c8:61:d3:dc:a7:01:53:7f:dc:a2:43:cf:
5e:e3:a4:81:63:c5:32:6e:fd:02:3a:94:12:00:f2:48:bf:ac:
c5:db:a2:2d:66:0e:c2:15:05:94:df:b2:ee:dd:df:a6:0e:b1:
aa:56:a6:1f:c4:e9:29:4e:8f:00:b5:85:d2:bd:ce:e7:b9:bc:
2f:c4:d8:57:05:32:1c:e0:33:dc:80:53:1e:a3:5e:4b:23:1f:
84:04:19:25:ff:6a:81:28:37:14:15:fb:88:0c:b9:ce:5f:50:
c8:1c:d7:ef:7d:a3:de:a8:df:da:50:d6:94:b2:f3:61:96:22:
fb:db:9f:c4:c5:b7:b2:7a:b5:8f:95:07:29:59:28:54:39:21:
55:85:cc:95:b1:66:b7:c1:c6:e1:7d:a7:b1:68:5a:d5:26:60:
06:42:e2:79:03:e4:eb:76:94:b8:a5:a6:de:1d:9d:1b:d5:5e:
d4:21:11:92:fb:c9:38:66:b9:34:04:78:0e:de:75:82:02:b4:
2f:f6:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:49:50 2026 by rpki-client