
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier: TuT/onURSv7VwVoVHkZuBe0vsoE6JurIGRBVWEXLFks=
Subject key identifier: 31:86:7C:BB:B3:8C:EC:00:25:46:E4:63:B6:7E:43:4E:3E:3F:67:E2
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial: 1DE5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number: 1D93
Signing time: Mon 28 Sep 2026 16:08:57 +0000
Manifest this update: Mon 28 Sep 2026 16:08:56 +0000
Manifest next update: Mon 05 Oct 2026 16:08:56 +0000
Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: QKEPktc09WRe/RXAaxEa3dlpMz/zENnzwT1LwjUO+VI=)
2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 7F3EV0mM/ALk4AT2S2gOquXFkNEiD0LHjF4Qz5WNCvo=)
3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: UeYjCbhpLlJLJlqOXzDkcK+yw3hLZ56FWNkCBB4H+Ew=)
4: SeVz8gQjPGkdw4zVIf82ObaFpY0.asa (hash: kmHeGiiqpa55vbGHg8bwUKc75USh2jaQvW3B/lxFRyI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Oct 2026 16:08:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7653 (0x1de5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Validity
Not Before: Sep 28 16:08:56 2026 GMT
Not After : Oct 5 16:08:56 2026 GMT
Subject: CN=6aba9119-163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:7e:21:5b:e1:41:f1:00:e1:bd:ee:b8:8e:
0d:d7:f6:67:c9:28:04:8f:bb:d5:f6:59:30:5f:75:
3c:31:4d:8d:c1:f3:04:e4:18:7d:70:4a:7c:ca:3a:
26:ab:cb:66:4c:a3:2f:20:d7:c8:f8:10:5c:47:61:
d9:e7:c5:aa:5d:18:2e:4b:87:67:6d:e0:fd:bd:1f:
0c:d6:b2:c7:eb:03:9d:a4:cf:c8:db:c0:f5:82:5a:
c0:be:45:ae:36:cd:ec:b5:ba:e1:1a:14:d4:bd:8b:
98:fe:60:86:89:43:61:40:38:37:92:67:88:7b:4d:
37:00:44:e7:ea:b4:82:95:94:33:74:7a:ce:8b:ca:
ce:6a:f4:53:2e:e3:c3:0c:7a:4a:7c:71:39:10:86:
67:6b:37:33:4d:92:ce:25:39:73:c4:20:be:e1:ae:
50:53:c7:8d:8c:66:17:1f:82:74:37:8e:63:3a:0a:
9a:b8:01:f3:44:8c:6c:41:42:34:4a:cf:ea:90:b7:
3c:ab:ec:5c:db:6b:c5:ce:aa:97:bf:15:1c:1c:ea:
92:9f:35:a4:22:f0:87:3d:cd:fe:d0:6a:d3:94:46:
83:06:a4:e9:41:fe:39:a2:c4:df:9b:d6:bf:d0:f8:
14:c3:14:67:78:f0:00:4c:6b:b3:a1:0f:2e:28:4d:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:86:7C:BB:B3:8C:EC:00:25:46:E4:63:B6:7E:43:4E:3E:3F:67:E2
X509v3 Authority Key Identifier:
keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:77:ad:73:59:8c:d0:85:70:ab:91:7d:1c:a6:c0:87:f8:93:
4c:f8:67:8c:ed:15:53:72:47:3e:63:fb:09:62:f0:9b:80:01:
0c:69:68:90:af:4f:73:41:3e:41:58:8b:c2:35:6a:ab:76:3d:
ae:87:f2:97:9b:f0:22:5b:4b:78:27:74:5c:0a:f0:bb:96:a0:
67:5c:8a:fe:09:3a:53:62:8d:43:a3:59:35:1d:2a:85:56:d8:
3d:fd:88:ba:b1:f4:74:72:bb:0b:ad:df:6f:5a:52:98:d5:f7:
10:3f:14:80:5f:bd:e6:a2:4e:21:a0:2b:98:dc:9b:14:08:24:
e2:1c:d7:88:cd:d1:cf:cb:6f:df:2d:fc:3d:e9:1d:ad:2e:ec:
2d:21:a1:92:c5:8d:24:b5:c4:c8:eb:d5:99:1f:51:9a:7b:16:
26:02:dd:30:37:a6:a7:3c:ab:25:78:29:59:be:97:c4:cc:8a:
22:1b:9e:10:a5:cd:bc:73:c4:8f:5b:08:75:d4:bd:5c:30:2a:
ed:b3:25:a1:23:db:1d:9d:5a:d3:3d:32:b1:12:73:af:24:04:
5d:82:74:bb:71:ed:5b:77:44:f0:c7:2a:c0:c0:4e:29:54:e7:
fc:40:5b:51:4e:22:3c:ff:21:c2:f9:cd:ee:6c:ba:55:b6:f4:
8f:e8:22:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:07:37 2026 by rpki-client