
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier: c/0badh7rwRuzxNDMRwsdkdUqRaBNARD03xzIAEewN0=
Subject key identifier: AD:DB:56:02:2A:E0:98:08:6C:5B:3C:E3:42:64:50:CB:B3:9E:00:02
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial: 1373
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number: 136E
Signing time: Wed 20 May 2026 16:58:21 +0000
Manifest this update: Wed 20 May 2026 16:58:20 +0000
Manifest next update: Wed 27 May 2026 16:58:20 +0000
Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: PHFYjT9a6gBHggMvObLL9z2pAjsn/6fnyWM4AoIl16I=)
2: E2B16FF23C8911F1A9897A359C833773.roa (hash: i8XPRUIqEgeLZapEq2D3+tp+3ktjcE4ag35fN0jDU5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 16:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4979 (0x1373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Validity
Not Before: May 20 16:58:20 2026 GMT
Not After : May 27 16:58:20 2026 GMT
Subject: CN=6a0de82d-c014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:2d:d4:cd:e8:c8:08:3b:e3:ce:61:fe:67:
f8:32:4e:c5:51:4b:ee:fa:dd:50:48:ec:b9:92:cd:
7f:00:4e:30:2a:41:62:47:50:b2:df:47:af:85:a4:
9d:1d:88:eb:3f:dc:f0:02:fa:a2:2a:ec:bb:69:7a:
30:6c:6c:4b:2c:d0:68:db:3d:2e:f0:06:8c:e8:ac:
bb:b8:c6:b6:75:d8:ba:a1:a9:fb:f8:b0:d7:f6:40:
b5:fd:2e:ef:ad:84:39:c6:c3:f0:7e:96:b5:f1:59:
9a:00:43:4d:42:d5:8b:ff:e2:3c:1b:24:52:ce:f2:
38:5d:2a:5a:05:22:ef:02:2c:00:b4:d3:d8:a1:cc:
0c:7e:4c:f2:70:d9:86:80:6b:a2:bd:3e:3a:d8:3f:
75:73:c4:af:c7:fe:5c:ae:23:95:d0:74:f6:48:93:
11:60:b1:ec:69:c7:19:8e:c3:01:5e:d3:e1:ac:0c:
1f:cb:d5:71:fc:c0:f0:16:87:07:86:73:b1:57:4c:
6f:c8:5f:4d:d3:a9:a2:76:44:92:d1:47:99:74:1e:
24:50:89:f1:89:70:86:1e:6b:cc:a3:c0:eb:a1:df:
e5:a3:0d:04:b9:d5:82:c2:95:c2:e3:e6:96:3f:de:
02:39:88:7d:c5:50:4a:f4:79:d4:46:ad:0c:32:75:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DB:56:02:2A:E0:98:08:6C:5B:3C:E3:42:64:50:CB:B3:9E:00:02
X509v3 Authority Key Identifier:
keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:94:c3:ff:42:e3:15:80:57:1b:0e:13:69:6c:eb:f0:55:3e:
e6:6d:9d:7a:77:7b:65:5d:8e:4b:58:a6:1d:c7:a7:d4:01:dd:
cb:04:ef:8f:5e:d3:ff:49:92:1e:66:77:e8:bb:f0:24:7f:5e:
13:41:a7:21:82:c7:27:2e:2f:d1:94:c3:e5:b5:a2:72:1e:5d:
b0:00:c4:65:93:46:a0:9a:e6:b4:40:57:33:83:81:f6:fa:ca:
47:6a:d2:25:d1:24:8c:c8:b4:da:d1:5e:19:73:57:05:88:67:
bc:01:70:5f:cb:81:6d:3e:6d:29:e1:ad:a1:9f:8e:f9:40:6d:
2c:9e:ae:62:35:b7:42:26:a0:38:df:0c:a6:f1:4c:29:28:3d:
6d:b1:f7:c6:a8:bb:1c:28:ef:b6:c7:41:7f:ca:17:24:ad:d0:
7a:94:10:75:43:45:d7:21:a4:68:73:0f:4b:4e:85:63:d6:1b:
d1:43:ec:d6:a1:ff:79:b8:d7:c4:c1:1c:f2:27:05:f2:4a:7b:
6d:37:b3:d1:92:82:eb:6c:83:6c:c0:3b:19:26:98:25:8c:6b:
e1:71:86:b2:34:a1:9d:73:3b:8a:a6:02:76:51:bb:1c:6d:72:
bb:c0:34:4d:f8:f2:fb:21:41:d8:f6:a6:c8:3e:df:a5:7d:9d:
cd:79:52:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 12:36:30 2026 by rpki-client