
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
File: xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft (raw, json)
Hash identifier: YHCz2Ljg6WSiziw4oxz7pYwMndHurw1uKjPyicM9WuI=
Subject key identifier: 88:4B:86:8E:8C:6D:93:F4:20:82:58:DB:FA:5C:C4:27:5F:31:3C:C3
Authority key identifier: C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
Certificate issuer: /CN=A918FD04/serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Certificate serial: 0973
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
Manifest number: 1662
Signing time: Tue 28 Jul 2026 18:32:54 +0000
Manifest this update: Tue 28 Jul 2026 18:32:54 +0000
Manifest next update: Tue 04 Aug 2026 18:32:54 +0000
Files and hashes: 1: xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl (hash: tPGuEwgZfYt/Qp5YJC/ESiAjjbsAOeJZmBoYFlOYscQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 18:32:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2419 (0x973)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FD04, serialNumber=C4A4C354358FD4823F6EC531327674854C86C6DF
Validity
Not Before: Jul 28 18:32:54 2026 GMT
Not After : Aug 4 18:32:54 2026 GMT
Subject: CN=6a68f5d6-a5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:c8:d3:f6:a4:7e:49:fe:40:44:66:bc:60:
3b:ca:dc:3b:38:c3:46:24:83:9c:01:c4:0a:e4:4d:
73:49:81:25:a8:45:f1:82:de:d4:75:bb:3a:68:a8:
14:81:51:79:e5:f9:93:85:c3:85:5e:c1:a6:3a:e4:
9d:0e:c9:e2:70:a6:1d:51:e2:66:68:67:bb:e0:74:
79:98:b2:d3:9e:43:4a:2d:03:26:12:70:cc:94:64:
26:94:4c:fe:8f:b9:c6:9d:24:e9:53:25:e7:a6:d9:
5a:66:52:fa:a3:d6:60:51:fd:c9:ec:3d:b5:f5:d2:
60:74:f3:e8:c3:88:81:d3:d5:56:46:b9:e8:50:83:
2e:8f:be:24:e8:38:95:da:64:c1:b4:8f:93:1b:56:
30:ef:17:1c:ef:db:d7:96:19:48:75:0a:68:a9:07:
e1:21:dd:02:31:37:d8:df:57:3a:a7:53:2c:9a:9d:
27:9a:f5:15:f8:7b:5f:84:04:bd:17:8e:9d:9d:24:
04:a8:28:2c:83:fe:05:4d:22:6f:32:2b:40:8e:5a:
07:4a:dc:d7:be:36:99:d8:fc:33:19:e1:16:01:63:
07:4d:6b:5e:93:19:3a:c2:33:f6:b7:52:ac:24:af:
95:2c:b9:7d:4e:40:d8:06:a4:df:52:73:4d:8d:d0:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4B:86:8E:8C:6D:93:F4:20:82:58:DB:FA:5C:C4:27:5F:31:3C:C3
X509v3 Authority Key Identifier:
keyid:C4:A4:C3:54:35:8F:D4:82:3F:6E:C5:31:32:76:74:85:4C:86:C6:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xKTDVDWP1II_bsUxMnZ0hUyGxt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD04/0ABBF4720DF211EA8EE8913BC4F9AE02/xKTDVDWP1II_bsUxMnZ0hUyGxt8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:3a:b6:b1:39:e1:bc:96:2b:44:de:0c:69:2f:3c:c2:80:34:
31:d5:f2:19:4e:58:83:4f:e3:4a:6a:97:22:29:4d:b6:60:74:
12:47:56:02:16:30:26:92:5d:e9:f8:cd:94:8e:e8:72:a9:b6:
42:9e:52:d7:69:f0:ed:ca:f9:0a:96:c2:ed:37:15:68:29:56:
c1:45:c2:4e:a0:8f:d7:cd:d3:73:77:1e:dc:6d:50:f1:d0:22:
44:64:b6:5d:06:a2:04:f8:30:7c:61:cc:56:49:a6:c7:d1:8b:
ca:8f:18:4c:4a:6e:0e:73:d2:7f:bc:8f:dd:69:f9:b9:66:b4:
23:f4:9d:68:6a:3e:09:dd:82:92:70:c8:c0:83:bc:6d:c0:7a:
d7:26:f0:40:a6:16:5a:32:d6:79:98:13:b1:48:b8:e0:a5:dd:
cd:8a:14:91:aa:09:0c:89:ee:85:14:a6:9b:61:0a:6a:f1:3d:
58:8b:d4:f5:b0:8a:76:f1:09:1c:6b:05:b5:dc:75:cb:eb:c7:
71:ba:1a:aa:45:3a:cb:7a:58:c9:38:c1:ba:bd:cf:e1:8a:4f:
d6:8a:52:db:c7:5b:ab:1b:dc:75:5d:cc:4b:59:34:67:22:77:
34:0f:6e:1d:6d:5d:82:9a:6a:04:1e:8d:49:9f:13:67:27:59:
5c:51:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:50:58 2026 by rpki-client