
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier: k4F1lDEXuq0IUcPXZgi6IOcy5BTMdnouHTi8VWNgYjE=
Subject key identifier: CD:7A:02:F3:1A:5B:A6:55:5E:61:34:73:CD:23:E0:22:1F:6C:49:21
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial: 051A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number: 050F
Signing time: Sat 04 Apr 2026 23:25:14 +0000
Manifest this update: Sat 04 Apr 2026 23:25:13 +0000
Manifest next update: Sat 11 Apr 2026 23:25:13 +0000
Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: Cw8Ix9wf4Q9dlgx2l4n4knhfoZRt9XYM53TUB+5qjTU=)
2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1306 (0x51a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Validity
Not Before: Apr 4 23:25:13 2026 GMT
Not After : Apr 11 23:25:13 2026 GMT
Subject: CN=69d19dda-d557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:46:a8:0d:df:ea:58:7e:4b:31:c3:0a:30:
ec:37:7e:dd:6e:dd:7a:92:f8:84:0f:2e:21:e1:55:
b9:54:15:53:78:13:46:ab:15:a2:40:47:77:c1:22:
84:6b:96:84:74:24:87:89:a6:a4:1b:c6:da:53:ec:
34:b5:76:30:b6:2f:88:78:61:dd:09:d7:04:bd:70:
1d:96:af:f3:4e:c3:4d:ee:24:7f:e3:e8:e2:6b:fa:
ef:72:80:b8:d4:d7:27:78:6b:f6:fe:85:96:e1:68:
e0:9f:ae:33:88:35:3d:e5:00:01:d3:51:4f:52:72:
55:6d:a8:b7:db:07:d2:06:7a:de:11:61:b0:30:ba:
77:54:28:d1:35:8b:80:3a:c2:ac:f7:6e:f4:8e:df:
46:bf:68:10:9b:ab:84:34:89:d6:fa:64:4a:ac:b6:
d9:e4:0b:e3:0b:9b:6e:72:f7:8e:45:c6:6b:9f:39:
f2:4d:65:78:89:3c:a1:d8:38:e5:c8:c4:ac:8c:96:
d1:c5:90:93:99:df:bb:f6:72:52:30:e1:ad:a7:24:
8c:bb:85:9d:7e:51:36:c8:10:17:27:72:a4:a7:3a:
fb:fc:43:de:b6:07:28:a0:ac:b6:8a:6c:a4:46:f2:
a6:85:a8:68:6a:4e:ef:2a:7e:b1:46:7e:70:45:ed:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:02:F3:1A:5B:A6:55:5E:61:34:73:CD:23:E0:22:1F:6C:49:21
X509v3 Authority Key Identifier:
keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:48:50:0e:40:9f:80:eb:f7:e0:93:db:99:bc:42:7c:fe:6b:
4a:93:c3:e5:31:9f:d3:07:33:c2:3f:28:55:3f:29:94:14:6b:
2d:93:d0:0e:1b:90:c2:4f:5e:23:85:65:13:58:b0:af:a4:b2:
1c:e9:40:05:42:5a:4a:ea:3e:3c:2f:89:44:87:db:81:cc:0f:
59:26:b8:b1:aa:9a:10:02:1c:a3:5c:41:0f:40:96:75:0c:f3:
3f:04:82:47:eb:03:c0:58:13:6f:61:ea:55:25:c5:e8:9b:b7:
ca:c3:1e:b9:26:8e:3a:19:84:62:5b:72:59:5e:a9:36:2e:75:
5c:76:c6:ed:d2:73:7d:0e:b6:8e:52:55:05:e4:ef:7c:f7:7c:
15:e1:30:f8:d5:ac:94:05:26:ca:63:a1:ea:df:53:36:d2:d1:
9e:66:56:4f:bb:e7:26:38:09:7f:de:e4:88:14:54:11:a7:9b:
85:80:04:ed:65:2e:f7:4a:44:c1:e4:b0:50:5d:f3:44:bf:13:
6d:a9:19:23:05:20:c8:ab:48:02:92:15:00:a1:17:00:62:28:
d7:7f:5b:e6:c6:6d:ba:c3:05:25:0f:56:cb:0e:2d:83:c2:b8:
63:a0:75:af:a8:ef:8d:03:c7:0c:9b:89:fb:86:5e:aa:d4:ec:
b8:57:e2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:19 2026 by rpki-client