
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
File: xK1kn8XyMwadUdhtVa3KzxQtYVc.mft (raw, json)
Hash identifier: TGLMVC8qTn+ar6QnvbcBh7l15FewVMvoOr8tkqM7sBw=
Subject key identifier: E4:DD:10:65:D8:9B:DC:F4:AD:68:D6:17:DA:78:52:CB:38:40:22:54
Authority key identifier: C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
Certificate issuer: /CN=A918BDEB/serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Certificate serial: 0B17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
Manifest number: 0B0B
Signing time: Mon 12 Oct 2026 19:28:11 +0000
Manifest this update: Mon 12 Oct 2026 19:28:11 +0000
Manifest next update: Mon 19 Oct 2026 19:28:11 +0000
Files and hashes: 1: xK1kn8XyMwadUdhtVa3KzxQtYVc.crl (hash: fOTMyjErypkEP0ROIkToj2DYQF1hpYc/VnOAobFM7dw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 16:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2839 (0xb17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918BDEB, serialNumber=C4AD649FC5F233069D51D86D55ADCACF142D6157
Validity
Not Before: Oct 12 19:28:11 2026 GMT
Not After : Oct 19 19:28:11 2026 GMT
Subject: CN=6acd34cb-64b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:1a:f4:d8:a9:66:ff:4a:64:2f:26:33:b5:
00:26:9c:dc:6f:e1:7e:50:2a:db:48:6d:13:6e:d6:
2a:0e:78:a4:78:aa:64:ec:cc:95:a0:64:cc:73:73:
36:b7:c6:67:b1:e4:ab:62:70:8e:2a:d0:09:d5:52:
d9:09:a2:70:3f:35:62:ce:a1:7f:1a:2b:f8:7a:09:
59:11:08:9e:02:9c:c5:5d:e8:d7:d2:5c:2a:c8:99:
7c:9b:62:85:33:d5:16:a3:40:c0:0b:e3:a3:b1:d0:
c3:d8:ae:7d:2b:27:9f:44:a2:51:bc:93:59:cd:e1:
89:74:da:57:1d:bc:5d:6a:cc:be:05:3e:72:e3:74:
51:80:f2:c7:14:7e:7c:58:50:8b:58:04:c3:88:e8:
cc:6c:72:81:84:78:fa:00:c1:96:5b:da:fc:9a:74:
a9:6c:ff:dc:ea:53:f6:3c:df:60:da:03:4f:2f:82:
47:96:39:0c:16:1e:6a:4e:e2:e8:3d:98:77:02:47:
83:aa:60:15:e1:a5:d3:e3:ed:28:43:44:55:dc:50:
09:0f:aa:a9:92:42:b3:db:4e:fc:3e:57:18:91:a2:
06:b1:c3:71:b4:1c:a2:59:b9:f2:0a:66:89:9b:75:
78:b0:8c:8c:02:5d:45:81:8a:ef:1b:fe:d1:dd:dd:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:10:65:D8:9B:DC:F4:AD:68:D6:17:DA:78:52:CB:38:40:22:54
X509v3 Authority Key Identifier:
keyid:C4:AD:64:9F:C5:F2:33:06:9D:51:D8:6D:55:AD:CA:CF:14:2D:61:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xK1kn8XyMwadUdhtVa3KzxQtYVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BDEB/FA5CF42C75BC11EAA3E3A06AC4F9AE02/xK1kn8XyMwadUdhtVa3KzxQtYVc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:c0:fa:8e:03:12:ad:ae:d0:9b:d8:c6:8d:49:90:21:51:7d:
7e:f6:3a:4a:7e:5c:85:f0:45:58:ac:d7:2f:8d:d9:b4:ec:c5:
6d:12:16:fa:4d:07:fd:fe:11:05:7a:05:49:30:5d:c5:96:67:
30:af:5e:c3:2a:6a:00:a7:6f:53:97:06:26:84:02:97:55:1b:
00:4a:3a:65:73:bb:87:c1:74:ff:94:73:2f:f3:2e:2b:ad:6b:
7e:61:d6:47:a2:96:d0:5a:d1:60:4e:f9:ed:eb:24:e9:03:43:
8a:84:8f:08:11:1a:9c:ab:5e:47:72:ee:fd:77:7f:ed:f0:75:
89:36:18:8a:ff:98:65:c4:b9:32:89:49:0a:07:a5:38:7d:14:
96:fe:05:b0:d9:db:39:62:a9:8a:2d:35:3b:e8:f9:d2:27:e2:
0a:e9:0c:f5:26:92:8a:8c:52:bc:23:b0:6d:67:c5:1d:18:08:
85:64:65:21:c2:af:de:41:0a:1d:b1:db:6e:16:32:1c:d9:24:
65:fc:b5:b7:7f:fb:40:a2:5f:ff:c9:18:f8:18:71:de:4b:10:
cc:34:38:37:ea:4e:f1:bf:7e:95:79:8e:cf:3e:95:37:21:37:
d1:aa:43:c5:fe:ce:a7:ff:8e:dd:ed:e6:3e:2f:e6:33:0d:94:
0f:0a:32:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:54:17 2026 by rpki-client