
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier: RMs3dC4DHjT+nCpHUjRzdxSzidWBbdvz47+xnufbMVc=
Subject key identifier: 38:83:56:5F:C6:19:11:9E:4A:23:36:1E:71:2F:78:45:0E:2A:24:E7
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial: 0991
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number: 16BC
Signing time: Thu 24 Sep 2026 18:18:05 +0000
Manifest this update: Thu 24 Sep 2026 18:18:04 +0000
Manifest next update: Thu 01 Oct 2026 18:18:04 +0000
Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: 8LgRRnP/mn0xycKb8DRKRwm9SGuv3zKTrbxIvl3GrIQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 18:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Validity
Not Before: Sep 24 18:18:04 2026 GMT
Not After : Oct 1 18:18:04 2026 GMT
Subject: CN=6ab5695d-1fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6a:5d:cb:57:6b:0e:b5:66:89:e7:07:82:e1:
c0:c5:54:fe:b1:f6:47:d9:b3:8a:27:cb:c0:7c:16:
e0:65:f5:cc:ed:97:62:fc:a7:e8:d8:e3:9f:8e:b7:
76:1d:d0:93:7d:fe:62:c6:9d:98:57:de:e5:52:6e:
05:fc:bd:d7:1e:0a:eb:e6:50:dd:ec:3c:4d:f8:c3:
18:87:fc:4c:2b:0c:16:59:0a:21:d0:50:ce:89:a7:
35:dc:2f:ee:85:a3:cd:86:40:b3:08:1e:e0:8e:ed:
e1:31:d6:90:2d:e6:73:7f:79:aa:d6:0d:8c:4c:12:
d9:b1:2f:17:34:ea:af:54:3c:90:21:c0:b1:a8:d7:
86:7f:4e:06:ee:51:6d:6e:72:4b:4a:c7:62:9c:2d:
64:43:8d:f2:47:16:69:f5:2f:bb:bd:73:8b:a4:33:
5a:a1:cb:6e:a9:a4:8a:9c:7a:ec:bc:7e:81:74:8c:
3d:7e:f0:66:d3:fb:f7:e5:0f:38:06:a9:fd:db:b0:
71:54:3f:8e:48:c7:dd:ac:86:b0:a4:c3:8a:86:b8:
53:8e:77:cd:cb:01:4e:36:54:9b:85:b0:cc:f3:dc:
3a:87:2a:26:6b:27:13:87:37:d6:6d:4a:19:07:de:
f2:47:f1:3b:27:d4:8c:57:c3:76:1b:d1:69:b6:74:
ff:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:83:56:5F:C6:19:11:9E:4A:23:36:1E:71:2F:78:45:0E:2A:24:E7
X509v3 Authority Key Identifier:
keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:63:21:3e:3c:54:ed:59:55:4f:a9:dc:ab:f5:4f:d3:ee:67:
86:c2:af:3b:bf:af:0f:23:69:29:99:00:b3:4b:e6:0f:ab:be:
b1:f0:c8:bc:03:fa:e8:9c:a0:8c:84:f6:e9:85:42:0a:15:88:
7f:95:ea:2d:6b:38:f8:d6:25:e5:5c:5c:c3:30:63:d3:cc:90:
93:f8:6e:c1:5a:7a:71:da:d1:a0:9c:15:bb:4b:85:58:85:58:
c5:c3:70:31:68:97:f4:96:c0:92:53:74:87:05:fa:aa:b2:47:
3d:3b:31:c5:4e:d6:a4:8b:96:d2:ff:6e:66:7d:12:42:ad:c3:
93:e1:c8:de:7b:99:85:f6:79:41:aa:b5:81:41:06:65:b2:d7:
2d:42:c4:b9:65:95:be:86:ec:6e:56:c5:ad:7e:07:6a:92:19:
52:c0:a8:8c:de:8f:42:ae:b2:39:c3:1a:bb:b8:9e:41:92:59:
63:0d:79:a8:9a:f8:69:a1:d4:28:d0:7b:03:32:53:63:3c:ff:
51:14:2f:1b:f8:94:cd:34:a6:a5:95:b2:dd:ea:8e:5c:d7:c3:
30:01:46:23:c8:c1:1d:79:90:4a:80:bb:21:88:d3:b0:a3:8b:
95:95:b4:b5:82:24:42:4c:b1:0c:5a:b4:cd:3f:38:de:8a:6f:
9e:99:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:57:07 2026 by rpki-client