
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier: 7JyVTCYyK8asEjaGro2Dz7yHhj761TSw36SArlDxx/k=
Subject key identifier: 75:2C:27:46:C7:7E:80:99:64:05:3C:D8:DF:F3:87:88:64:C5:7F:68
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial: 092D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number: 15CC
Signing time: Tue 24 Mar 2026 18:18:15 +0000
Manifest this update: Tue 24 Mar 2026 18:18:15 +0000
Manifest next update: Tue 31 Mar 2026 18:18:15 +0000
Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: tx3p3Ea1ly6HQL7Idgf/eT0u0ZIYz23u7vRyoUI24d4=)
2: 7BBC1DD2040611EF909F6C3EC4F9AE02.roa (hash: +TwMS23E8Rm70aif9FJK4tvKCbQcLkwBDHY6azQ9woU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:18:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2349 (0x92d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Validity
Not Before: Mar 24 18:18:15 2026 GMT
Not After : Mar 31 18:18:15 2026 GMT
Subject: CN=69c2d567-0979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8b:11:b8:75:cb:d2:21:8f:34:26:af:0d:04:
d6:29:e0:52:c5:d1:c7:f1:73:91:b7:55:23:ad:31:
1d:d9:e9:2d:1c:e3:8d:7c:52:21:3d:dc:b1:9a:d9:
82:5c:d8:53:76:f3:f4:27:cf:48:9e:b1:32:e4:b9:
d3:ee:7b:52:97:63:96:7c:e2:74:3f:7f:08:14:b0:
17:71:b7:7e:e4:43:67:57:e3:19:54:d1:b0:f4:b6:
02:15:b4:f6:bd:a3:a2:d3:af:89:fe:e4:e4:a4:34:
d3:77:41:d5:ff:80:16:f1:8d:2c:d1:b8:2a:86:ba:
1c:d3:51:ac:7a:ff:cd:a5:46:ed:12:40:85:b0:53:
44:3b:22:ab:fc:3d:88:03:d6:25:15:0f:39:ef:7b:
31:d7:18:60:1c:fd:9f:2b:29:60:ea:67:64:92:cf:
30:a8:27:bf:4b:20:a5:c7:c2:d0:03:79:97:0f:31:
ea:71:e8:34:1f:9c:93:e6:f2:2f:4a:10:a5:da:20:
58:f1:58:58:48:74:24:e7:16:92:64:c4:85:bb:97:
11:1e:e1:cf:33:9e:69:2c:9a:35:82:71:9b:9d:3f:
41:f0:1e:d1:18:7f:3a:76:ce:15:c8:7e:6f:95:59:
f1:33:4c:aa:9d:ea:5d:96:03:3f:6f:10:f7:77:5e:
6a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2C:27:46:C7:7E:80:99:64:05:3C:D8:DF:F3:87:88:64:C5:7F:68
X509v3 Authority Key Identifier:
keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:54:59:1d:61:3a:21:95:2a:04:2e:89:80:80:79:48:a4:42:
70:bf:9b:31:03:21:3a:44:6c:63:5c:4e:95:ff:f9:31:35:52:
45:15:cd:b5:7e:ae:4c:12:a1:d9:77:2c:a2:17:74:30:0c:2b:
50:7b:6c:8a:06:fc:65:3a:2b:52:e7:a1:19:59:0b:21:46:bd:
96:03:7b:31:25:91:b2:be:24:c8:eb:d4:e1:ba:74:4d:9f:e2:
cc:7d:c8:ff:54:0d:3c:10:39:99:60:a3:13:de:53:17:7f:67:
29:bc:e8:83:0d:49:ab:19:35:7a:a3:1a:a5:b6:e2:62:26:74:
3b:7e:9b:67:07:da:66:2b:e5:f1:e7:67:13:69:8e:a4:54:26:
24:9b:c2:72:1b:d5:e1:1f:bf:77:07:c9:75:28:b2:52:f2:8e:
c0:39:66:86:3a:67:5f:02:9d:ad:e6:1f:a9:a5:ad:a7:ce:87:
07:26:49:c5:d5:ef:28:84:d1:cd:e9:52:a0:63:29:2a:89:e2:
e7:0c:93:c3:64:a6:14:74:19:1b:56:ca:be:cb:0e:a1:c0:7f:
cb:51:3e:3a:5e:58:1a:bc:aa:e5:94:ae:1b:e6:d2:d2:6e:75:
a2:f7:c3:49:60:d8:33:ca:b1:30:3c:22:b6:85:57:49:ce:c4:
d5:a0:3a:08
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZEMDQxMTAvBgNVBAUTKEM0QTRDMzU0MzU4RkQ0ODIzRjZFQzUzMTMyNzY3NDg1
NEM4NkM2REYwHhcNMjYwMzI0MTgxODE1WhcNMjYwMzMxMTgxODE1WjAYMRYwFAYD
VQQDEw02OWMyZDU2Ny0wOTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz4sRuHXL0iGPNCavDQTWKeBSxdHH8XORt1UjrTEd2ektHOONfFIhPdyxmtmC
XNhTdvP0J89InrEy5LnT7ntSl2OWfOJ0P38IFLAXcbd+5ENnV+MZVNGw9LYCFbT2
vaOi06+J/uTkpDTTd0HV/4AW8Y0s0bgqhroc01Gsev/NpUbtEkCFsFNEOyKr/D2I
A9YlFQ8573sx1xhgHP2fKylg6mdkks8wqCe/SyClx8LQA3mXDzHqceg0H5yT5vIv
ShCl2iBY8VhYSHQk5xaSZMSFu5cRHuHPM55pLJo1gnGbnT9B8B7RGH86ds4VyH5v
lVnxM0yqnepdlgM/bxD3d15q8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUsJ0bH
foCZZAU82N/zh4hkxX9oMB8GA1UdIwQYMBaAFMSkw1Q1j9SCP27FMTJ2dIVMhsbf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQwNC8wQUJCRjQ3MjBE
RjIxMUVBOEVFODkxM0JDNEY5QUUwMi94S1REVkRXUDFJSV9ic1V4TW5aMGhVeUd4
dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hLVERWRFdQMUlJX2JzVXhNblowaFV5R3h0OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkQwNC8wQUJCRjQ3MjBERjIxMUVBOEVFODkxM0JDNEY5QUUwMi94S1REVkRXUDFJ
SV9ic1V4TW5aMGhVeUd4dDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHlRZHWE6IZUqBC6JgIB5SKRCcL+bMQMhOkRsY1xOlf/5MTVSRRXNtX6uTBKh
2Xcsohd0MAwrUHtsigb8ZTorUuehGVkLIUa9lgN7MSWRsr4kyOvU4bp0TZ/izH3I
/1QNPBA5mWCjE95TF39nKbzogw1Jqxk1eqMapbbiYiZ0O36bZwfaZivl8ednE2mO
pFQmJJvCchvV4R+/dwfJdSiyUvKOwDlmhjpnXwKdreYfqaWtp86HByZJxdXvKITR
zelSoGMpKoni5wyTw2SmFHQZG1bKvssOocB/y1E+Ol5YGryq5ZSuG+bS0m51ovfD
SWDYM8qxMDwitoVXSc7E1aA6CA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:27 2026 by rpki-client