
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
File: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json)
Hash identifier: kKenHRCVXKdXLlN5sIBJy2mbJVRkOHoRSRg3f2zNAPw=
Subject key identifier: BA:46:35:B6:6C:70:27:02:79:DF:97:67:0A:12:35:6F:E6:4B:78:90
Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
Certificate issuer: /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Certificate serial: 08C1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
Manifest number: 08B7
Signing time: Thu 08 Oct 2026 20:41:48 +0000
Manifest this update: Thu 08 Oct 2026 20:41:48 +0000
Manifest next update: Thu 15 Oct 2026 20:41:48 +0000
Files and hashes: 1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: fi+vGtcRjCOyhclsexUC5Yj0ZICnuyhesUQZK7+q7N8=)
2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 5rrOVTWhZFhPeg37xthqwcVuXMjL6vt+NLzRbtYbxNk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 20:41:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2241 (0x8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Validity
Not Before: Oct 8 20:41:48 2026 GMT
Not After : Oct 15 20:41:48 2026 GMT
Subject: CN=6ac8000c-08c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:08:e5:2a:ca:98:fb:32:d8:ec:59:ae:01:
94:96:be:7b:39:ac:a1:9e:41:16:2a:2c:75:80:9c:
d9:58:5d:86:4e:9b:02:95:d4:f9:41:ed:26:e7:de:
e1:d3:90:9c:a2:c9:71:4e:10:c5:5d:e1:1d:1a:a3:
af:99:64:06:4a:bb:8f:4d:19:59:6e:5f:cc:a6:97:
04:b6:73:c3:af:a7:d6:dd:0f:d5:e4:26:71:f2:45:
e6:f4:9f:99:bd:8e:38:be:ee:87:1a:a3:b3:45:1e:
25:85:aa:08:83:31:b5:13:97:6a:94:64:cd:93:3c:
fc:79:d0:a0:ea:95:1a:e8:46:80:3d:e8:e1:c6:f0:
31:fb:a5:f8:03:1f:ee:27:b5:85:10:ef:e9:86:ac:
dc:d6:0c:eb:fc:ca:ae:a7:ba:d6:f8:9b:a4:53:1a:
b5:d5:55:e6:2c:cc:fc:61:41:f1:f5:73:90:8d:dd:
54:c2:4f:38:29:9a:eb:c4:0e:e0:c2:78:ff:bf:50:
a3:8d:20:43:4c:c2:87:24:4e:c2:da:a5:72:dc:e5:
18:6d:ab:41:29:ed:8f:71:cd:c1:2c:3b:25:c3:19:
7f:9b:4d:9f:9e:f9:b3:d4:88:87:48:8a:48:ad:77:
4d:71:d3:37:81:8e:23:85:5c:38:d4:34:b1:ac:67:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:35:B6:6C:70:27:02:79:DF:97:67:0A:12:35:6F:E6:4B:78:90
X509v3 Authority Key Identifier:
keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:60:1d:bc:89:63:5d:8c:a8:a0:4f:12:72:77:7b:39:76:84:
f1:37:f2:c0:ec:df:18:f8:05:a9:bc:be:17:96:f8:ee:86:0b:
bd:85:a2:f8:09:81:3e:cf:e4:d6:d6:14:d5:3f:48:df:9b:b0:
76:8d:7b:e2:2a:fd:68:df:da:d1:94:e8:6e:5f:46:82:7b:8e:
1f:dd:db:9c:0a:91:72:0b:ef:25:14:b2:68:77:f4:2f:75:76:
fc:54:2e:ab:8f:47:20:7d:39:26:9f:0f:76:99:a1:74:8a:14:
ae:03:12:79:9a:f7:66:39:1d:4f:9f:67:be:de:ef:6a:91:82:
dd:59:2f:a3:fb:0e:e7:c6:24:00:26:52:8c:ea:f9:d3:fc:57:
46:8e:d0:3e:00:17:fb:c9:ee:6f:01:00:ba:fc:9a:7b:46:27:
e7:5c:4c:19:ad:15:9c:d1:34:d1:12:d1:14:37:60:50:1e:ba:
4d:38:68:8f:5d:49:1d:17:b5:f1:e7:d1:f8:34:ed:de:37:fa:
d7:00:53:25:7e:d4:cb:b0:9e:d3:85:39:1d:0b:45:49:2b:24:
03:7f:6a:54:d5:c8:8e:4d:08:ea:35:08:a3:a0:f4:f1:f5:2a:
7c:84:58:44:0d:8a:b5:15:6e:b9:24:6c:cb:27:4b:67:e3:3c:
da:33:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:50:28 2026 by rpki-client