
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json)
Hash identifier: 8huYNGwAs4BLW4rIZcltBC183VhbpFuyK6ePdKWq5AM=
Subject key identifier: 1F:81:C0:01:53:88:A6:17:64:A5:A8:94:B5:90:A8:0B:A3:7C:81:67
Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Certificate issuer: /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Certificate serial: 013C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
Manifest number: 013C
Signing time: Mon 21 Sep 2026 05:30:37 +0000
Manifest this update: Mon 21 Sep 2026 05:30:36 +0000
Manifest next update: Mon 28 Sep 2026 05:30:36 +0000
Files and hashes: 1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: WdaSAA7mrq29s9JdwL92l9F23KR5iYUOw7/+r76Wnw0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 05:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 316 (0x13c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Validity
Not Before: Sep 21 05:30:36 2026 GMT
Not After : Sep 28 05:30:36 2026 GMT
Subject: CN=6ab0c0fc-f2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:84:92:ff:4b:2a:36:89:0a:a2:ef:77:cf:
45:5e:ae:26:b7:7a:81:96:f9:e3:79:cb:64:1a:0c:
4d:af:cd:ac:81:ae:c5:66:f2:e3:8a:97:54:6d:23:
98:a5:e1:13:f2:9c:63:d5:ec:75:9f:39:07:3e:f1:
79:11:77:ae:57:64:72:ee:1c:24:b0:8a:2a:d1:b5:
be:5b:1b:cb:fc:aa:a1:36:fd:46:01:3d:62:3f:8c:
12:a7:0b:7b:f4:ec:3f:81:f9:6b:70:dc:b1:4f:93:
81:98:c9:fe:ab:62:68:a3:54:8f:d1:5b:5d:26:df:
87:ca:c3:97:f9:91:7f:6c:a9:de:8f:9a:81:ab:4e:
71:9c:1b:a7:cd:dc:81:52:1a:2f:f3:cc:53:26:35:
b1:3f:be:78:99:85:07:47:62:ec:9f:f2:9b:30:1c:
31:ed:f8:40:9c:a3:41:22:dd:b4:b5:c6:dd:2e:63:
00:55:e5:05:f2:b7:41:d8:1b:bd:d3:4f:fd:8b:e0:
d7:db:53:09:de:08:87:64:9d:76:95:0f:7d:83:c8:
63:3d:6c:6f:89:e6:83:27:0c:60:bd:ab:6d:c6:3e:
42:ee:8f:60:c6:54:d8:79:d5:59:2f:c7:f4:66:23:
67:47:da:98:43:4b:94:c6:48:46:1b:0a:81:ab:d0:
28:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:81:C0:01:53:88:A6:17:64:A5:A8:94:B5:90:A8:0B:A3:7C:81:67
X509v3 Authority Key Identifier:
keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:4c:c3:cd:a7:1c:e4:ac:21:0f:9a:9e:c5:2e:8c:8e:ca:
cb:b1:23:f8:ef:2b:b7:90:71:d5:0f:c0:cc:48:d4:e6:e0:61:
41:3a:a6:f5:5e:55:65:3f:49:ce:27:87:c7:9d:a7:28:94:ea:
2b:f2:34:ba:cc:40:3d:39:d4:8f:9d:bd:44:07:9f:37:79:ef:
22:1b:b6:c6:dc:cf:9f:23:25:8f:4d:9f:98:ec:f3:f5:10:5e:
8c:0c:4b:5c:3a:5b:cf:72:61:a0:a2:2c:21:b6:27:1b:6b:fe:
e8:91:82:d1:31:88:11:55:e1:84:e3:65:50:91:6a:c6:64:a9:
6b:e3:28:32:b5:31:e7:5e:aa:64:03:43:dc:c9:ea:46:81:06:
4c:c1:2a:38:19:68:c5:ba:23:bd:e4:15:ff:b0:c4:e6:3d:2b:
12:88:b6:20:1f:f2:b1:5b:5b:03:cc:7e:f5:54:29:c3:a6:2d:
15:c4:8f:b6:13:9a:9e:0d:2b:1d:a6:82:b6:81:70:5a:b5:af:
7e:17:e6:ef:1b:b0:cf:38:14:76:7e:2f:54:ae:bf:98:49:cf:
0e:62:ec:b4:6d:2b:07:39:a0:55:e5:d6:53:1c:df:33:1e:0d:
ad:82:a3:4b:ae:3c:7a:2e:91:b2:60:63:cd:96:b1:4f:3f:05:
a1:57:9b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:30:12 2026 by rpki-client