
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
File: xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft (raw, json)
Hash identifier: 4tlp04FoFthRXbKfwCNrgJ1oJl0wthykbEHTHez/IG8=
Subject key identifier: 78:53:AA:2F:CC:3B:CB:53:6E:E9:A2:B1:AA:73:E9:69:52:F6:51:A9
Authority key identifier: C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
Certificate issuer: /CN=A916BE88/serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Certificate serial: 08C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
Manifest number: 08BD
Signing time: Thu 24 Sep 2026 20:28:53 +0000
Manifest this update: Thu 24 Sep 2026 20:28:52 +0000
Manifest next update: Thu 01 Oct 2026 20:28:52 +0000
Files and hashes: 1: xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl (hash: w+6aI/Wu9ar9epcoMC8+ekJncgnO3ON33PrHzhdhy1k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 20:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916BE88, serialNumber=C5B9F381B45CE11149393E1F4384925DEA52548A
Validity
Not Before: Sep 24 20:28:52 2026 GMT
Not After : Oct 1 20:28:52 2026 GMT
Subject: CN=6ab58804-fb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:68:91:1c:bd:66:31:67:26:f2:40:34:e9:
e0:92:a1:83:90:a0:1b:55:50:d8:94:cc:97:1e:5e:
82:c7:41:45:21:6e:52:0e:3c:94:63:ea:52:06:78:
35:fd:89:19:67:fc:da:20:8f:6a:4c:56:e9:85:6e:
a4:ec:de:5a:8a:e8:d2:4e:85:21:89:57:f1:a8:b4:
87:29:5f:89:52:ad:f0:da:9d:0c:2b:53:2c:69:2a:
86:91:77:e6:32:47:83:75:c2:62:f3:4b:ed:96:6e:
dd:2d:ef:f2:28:dc:b2:dc:58:bb:12:05:81:a2:78:
fb:ac:7b:50:48:1a:e5:e3:31:de:ca:a7:ea:c5:40:
a7:c6:6e:fc:0d:cd:7b:83:e1:eb:5a:c4:da:a6:64:
17:b3:06:fd:04:fc:f1:72:59:bf:99:c4:c6:46:b0:
85:5a:3f:5c:e2:54:5b:64:a9:cc:a2:c6:b3:1c:34:
f3:0c:54:7d:68:f2:e1:0f:49:58:6b:c6:c1:ba:49:
45:d6:0c:6a:6e:c1:22:da:eb:d1:a3:82:98:2d:ff:
fa:c8:99:2a:fc:dd:84:3d:2e:c8:5f:5e:7d:e7:a8:
43:0e:a9:08:62:00:51:23:7d:fc:c6:32:37:36:33:
4e:25:cc:44:5b:a7:65:c6:2f:d2:29:95:b6:71:04:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:53:AA:2F:CC:3B:CB:53:6E:E9:A2:B1:AA:73:E9:69:52:F6:51:A9
X509v3 Authority Key Identifier:
keyid:C5:B9:F3:81:B4:5C:E1:11:49:39:3E:1F:43:84:92:5D:EA:52:54:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xbnzgbRc4RFJOT4fQ4SSXepSVIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BE88/FB7A164AFBE111EABAF24B65C4F9AE02/xbnzgbRc4RFJOT4fQ4SSXepSVIo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:55:d7:73:64:77:7c:0b:99:dd:08:fd:dc:2e:5b:bc:b4:46:
6c:11:8f:7a:14:32:e0:40:81:16:19:a8:c9:b1:01:6e:b5:90:
a6:82:99:83:97:5a:74:16:f6:f9:4f:76:9b:72:b9:5d:10:7d:
7c:81:15:d5:a6:0e:81:8e:4a:14:02:5a:49:2f:7d:64:ef:58:
93:36:74:f9:ad:96:ad:7b:50:e1:ed:e3:f9:87:6b:7e:38:6f:
4b:49:cb:9c:28:3d:1a:5b:a7:98:60:7f:4a:ac:42:de:9d:fb:
5d:91:71:eb:f7:af:e9:e5:dc:b9:b5:1a:64:44:e1:16:64:d5:
d3:c2:29:ab:a2:eb:74:c7:13:8e:b4:6e:f5:d5:20:e2:0f:40:
4f:c2:ff:50:42:37:80:3e:66:63:07:23:55:b8:07:0d:c7:67:
4a:a6:71:e1:bc:b7:71:f3:be:ef:94:05:3c:2f:85:57:e4:2d:
34:6e:01:20:f3:ae:c3:0f:77:ac:53:f4:f0:a0:86:24:16:6c:
0c:32:ad:62:03:e4:57:bc:f8:1a:1f:c7:6a:ef:d0:73:83:36:
8d:56:6b:6f:28:b8:9d:02:94:9a:34:78:4d:54:4b:22:a9:ff:
e1:e4:54:74:6d:f3:b9:ef:a1:99:a9:e4:fb:0e:16:ab:f5:21:
c3:4e:55:42
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkJFODgxMTAvBgNVBAUTKEM1QjlGMzgxQjQ1Q0UxMTE0OTM5M0UxRjQzODQ5MjVE
RUE1MjU0OEEwHhcNMjYwOTI0MjAyODUyWhcNMjYxMDAxMjAyODUyWjAYMRYwFAYD
VQQDEw02YWI1ODgwNC1mYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArLNokRy9ZjFnJvJANOngkqGDkKAbVVDYlMyXHl6Cx0FFIW5SDjyUY+pSBng1
/YkZZ/zaII9qTFbphW6k7N5aiujSToUhiVfxqLSHKV+JUq3w2p0MK1MsaSqGkXfm
MkeDdcJi80vtlm7dLe/yKNyy3Fi7EgWBonj7rHtQSBrl4zHeyqfqxUCnxm78Dc17
g+HrWsTapmQXswb9BPzxclm/mcTGRrCFWj9c4lRbZKnMosazHDTzDFR9aPLhD0lY
a8bBuklF1gxqbsEi2uvRo4KYLf/6yJkq/N2EPS7IX15956hDDqkIYgBRI338xjI3
NjNOJcxEW6dlxi/SKZW2cQQDDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhTqi/M
O8tTbumisapz6WlS9lGpMB8GA1UdIwQYMBaAFMW584G0XOERSTk+H0OEkl3qUlSK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkU4OC9GQjdBMTY0QUZC
RTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRSRkpPVDRmUTRTU1hlcFNW
SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hibnpnYlJjNFJGSk9UNGZRNFNTWGVwU1ZJby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QkU4OC9GQjdBMTY0QUZCRTExMUVBQkFGMjRCNjVDNEY5QUUwMi94Ym56Z2JSYzRS
RkpPVDRmUTRTU1hlcFNWSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAE1XXc2R3fAuZ3Qj93C5bvLRGbBGPehQy4ECBFhmoybEBbrWQpoKZg5dadBb2
+U92m3K5XRB9fIEV1aYOgY5KFAJaSS99ZO9YkzZ0+a2WrXtQ4e3j+YdrfjhvS0nL
nCg9GlunmGB/SqxC3p37XZFx6/ev6eXcubUaZEThFmTV08Ipq6LrdMcTjrRu9dUg
4g9AT8L/UEI3gD5mYwcjVbgHDcdnSqZx4by3cfO+75QFPC+FV+QtNG4BIPOuww93
rFP08KCGJBZsDDKtYgPkV7z4Gh/Hau/Qc4M2jVZrbyi4nQKUmjR4TVRLIqn/4eRU
dG3zue+hmank+w4Wq/Uhw05VQg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 12:49:23 2026 by rpki-client