
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
File: xkM8SeY82SA1swfo95Y3YI_q2_U.mft (raw, json)
Hash identifier: M6cwaP+CxUr+MDO4dQHDq6suaFA1A5SkyywgWOnIgSQ=
Subject key identifier: 68:89:E6:CA:D7:A8:42:FF:89:68:86:5E:CB:5E:2F:06:5F:3C:43:B3
Authority key identifier: C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
Certificate issuer: /CN=A9164390/serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Certificate serial: 1D5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
Manifest number: 1D1B
Signing time: Sat 28 Feb 2026 16:10:39 +0000
Manifest this update: Sat 28 Feb 2026 16:10:38 +0000
Manifest next update: Sat 07 Mar 2026 16:10:38 +0000
Files and hashes: 1: xkM8SeY82SA1swfo95Y3YI_q2_U.crl (hash: FUmqvuK0LRlCSzP908Ek4+tiExqjWqmfoVmZ3EYm9Qw=)
2: BA1F21AC731111F0BD7FF574C4F9AE02.roa (hash: 20AfF76B9+g4MK13JnUrRZPbIDu/TESDofczBLuYHu0=)
3: 35D40EDE9F8511ECBE806D30C4F9AE02.roa (hash: 6/nHCLLC7n4HaWWUGKVmTxdYoQkDB8jaG5K5D54SivA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Mar 2026 16:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7517 (0x1d5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9164390, serialNumber=C6433C49E63CD92035B307E8F79637608FEADBF5
Validity
Not Before: Feb 28 16:10:38 2026 GMT
Not After : Mar 7 16:10:38 2026 GMT
Subject: CN=69a3137f-c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:31:5e:16:b5:5e:44:c9:be:ea:aa:a6:2a:aa:
28:1f:61:ef:24:21:63:f0:75:8d:4f:0c:c4:e2:ca:
94:38:b8:4e:a3:7e:c1:cf:85:e7:15:4d:4c:10:72:
7e:34:05:ab:9d:e1:4e:a6:55:67:e6:81:7f:51:c2:
cf:a5:80:21:60:5b:5c:94:06:c9:ae:da:cd:de:68:
7d:fc:cd:ed:8c:cd:08:8d:d1:8b:3e:de:c2:27:cb:
b3:7e:16:17:c4:93:a9:35:44:3c:92:5d:0a:f2:02:
41:2f:e4:2b:ef:69:c6:a7:53:11:0f:fd:f3:70:3d:
e5:11:14:6b:21:f2:cf:17:9e:06:a9:5b:8f:18:e6:
94:9e:67:59:29:db:13:8d:b4:97:4a:de:61:46:66:
51:6c:6f:c7:be:75:e1:bd:0f:a0:a4:78:e3:1d:7b:
73:21:74:be:05:a3:99:fb:75:31:a9:5c:26:f1:c6:
da:e4:33:b8:14:90:53:08:a1:e6:95:a0:99:43:51:
f6:8b:78:91:70:d4:c7:2d:7b:c2:89:53:5b:6c:12:
8c:a9:26:ab:04:bf:d8:24:ef:51:7e:1a:08:45:82:
d7:9b:1a:93:fe:7c:36:bc:9f:c2:e7:9c:2a:7e:ed:
92:37:e6:70:33:fd:73:4f:1e:fe:95:d1:de:f2:45:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:E6:CA:D7:A8:42:FF:89:68:86:5E:CB:5E:2F:06:5F:3C:43:B3
X509v3 Authority Key Identifier:
keyid:C6:43:3C:49:E6:3C:D9:20:35:B3:07:E8:F7:96:37:60:8F:EA:DB:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkM8SeY82SA1swfo95Y3YI_q2_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164390/0E9354FCDC5C11E68E915E32C4F9AE02/xkM8SeY82SA1swfo95Y3YI_q2_U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:fc:16:2b:35:5c:bd:ae:08:a3:b0:17:8e:77:2a:3d:74:7c:
94:c4:67:bf:da:c1:e9:f7:67:e3:86:15:99:5b:b2:cd:29:ce:
ef:1f:7c:db:d5:6c:94:da:74:fc:ca:39:2f:52:cb:5b:f3:60:
ad:b3:4b:38:1c:e3:39:d7:12:fe:97:df:12:56:e2:f2:1c:52:
aa:73:9f:94:02:8a:18:10:4e:68:63:ef:84:5c:b6:e9:c0:c4:
b9:4d:10:52:ff:28:02:7a:54:70:6a:6b:b1:f5:f7:d2:ee:15:
33:0d:57:d0:63:c9:ba:a5:21:46:65:c5:2e:40:2e:f9:da:b7:
3e:5c:dc:0d:3a:87:de:ac:df:03:e5:d9:78:3e:21:4b:56:f0:
1d:42:a5:b2:ee:b1:97:e4:8b:10:62:ea:1e:b9:9c:fe:bb:3a:
cf:3e:8a:b4:59:d7:75:13:2b:e1:2a:90:20:a6:31:9c:ad:ea:
5b:98:fb:a1:8f:3c:f0:21:4a:55:c6:78:4f:0a:dc:8b:af:b9:
13:dc:fd:e0:bd:28:46:57:cb:5d:32:6a:04:76:21:20:df:b2:
cf:7e:e5:05:1a:aa:f9:c3:19:63:07:52:e1:52:66:b3:90:26:
83:b3:f7:d5:8d:b9:68:d2:7c:c3:57:83:8b:84:e4:35:4d:bc:
95:52:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:06:38 2026 by rpki-client