
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json)
Hash identifier: CL234/D5regIec9DVq8uLpQgk5VrJq6/Q9U9lG9HKRQ=
Subject key identifier: B7:AB:56:14:CD:CF:61:60:3A:FD:AC:EE:DC:E7:22:88:62:97:0E:90
Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Certificate serial: 1356
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
Manifest number: 1354
Signing time: Sat 04 Apr 2026 16:52:53 +0000
Manifest this update: Sat 04 Apr 2026 16:52:52 +0000
Manifest next update: Sat 11 Apr 2026 16:52:52 +0000
Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: 5BMTzjOMcwrZ8EyD06x8ZUivm2vDgwpC6uDwlv5MH5Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 16:52:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4950 (0x1356)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED
Validity
Not Before: Apr 4 16:52:52 2026 GMT
Not After : Apr 11 16:52:52 2026 GMT
Subject: CN=69d141e5-826b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:b6:f7:93:86:ec:84:c5:68:7e:70:59:7d:
71:c8:25:a8:32:d7:15:e3:cc:61:ac:16:23:17:ac:
cf:4b:73:8d:cc:d3:67:6c:ab:b5:22:07:38:27:a6:
3f:08:e6:b1:ba:46:5d:f3:29:46:7e:04:8e:85:22:
53:a9:2c:00:35:85:bf:f8:b4:b3:ef:83:c6:3d:c3:
b9:2d:d8:fd:be:d2:62:85:ff:ed:3f:2b:f4:f9:86:
38:15:9c:4d:c1:a0:26:ff:41:e1:18:23:b9:f0:5c:
fa:67:85:1b:72:1e:ee:7c:ee:ff:bb:46:b9:15:43:
c9:58:89:ef:72:4f:3e:36:b1:8a:c2:e1:4c:26:71:
c9:b6:1b:b3:60:04:7f:0b:5f:22:e5:5b:55:bb:7d:
d3:3b:98:21:43:c4:25:9d:e9:22:63:10:5f:2e:98:
e0:f6:99:c1:8e:c8:be:51:4c:a3:e2:eb:4c:88:aa:
cb:a8:2a:d4:93:2a:93:00:3c:9f:b7:5c:83:aa:bd:
29:e8:11:2c:60:0b:58:c7:87:6d:f3:ca:a2:7b:f9:
71:c6:f5:34:0b:4d:78:84:2f:19:85:30:30:37:02:
c8:79:dd:34:59:0d:94:e1:e1:f4:15:9f:f3:fe:51:
c9:7f:cb:6d:07:d2:ac:83:0b:ec:d1:62:aa:92:22:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AB:56:14:CD:CF:61:60:3A:FD:AC:EE:DC:E7:22:88:62:97:0E:90
X509v3 Authority Key Identifier:
keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ad:35:24:58:16:68:fc:0f:c0:54:d4:27:ec:22:c3:94:88:cb:
d8:33:6c:01:9e:16:5e:19:16:50:0b:d9:e0:ba:f8:22:67:eb:
49:88:23:e3:5b:25:d4:58:b3:3f:44:f8:78:46:73:2c:45:42:
5a:5a:ab:30:c7:54:e7:ad:63:d5:31:12:22:e4:2e:6c:9e:5a:
1d:6b:36:1c:49:e1:7d:47:75:0b:de:14:53:8a:7e:d0:72:54:
e5:ab:73:5b:3f:c5:ff:ca:70:9e:6e:47:8b:4c:d5:8e:71:05:
27:7a:88:ea:e7:d5:b3:f3:0b:4b:ad:22:96:c9:5b:8e:9a:33:
12:4f:af:f7:34:6a:e7:31:a6:16:8c:e6:98:77:4b:20:5b:d2:
57:8b:79:23:a7:d3:43:33:3c:35:68:00:8f:79:9f:c0:15:fd:
87:75:93:20:81:f4:78:d8:dd:4c:ed:5f:03:38:1b:42:96:b9:
c1:4e:ee:19:13:71:e5:f8:81:4e:4e:a7:12:e5:ae:61:0f:05:
96:73:c6:ba:df:c8:0a:62:d5:1f:4c:58:17:df:b1:01:69:e0:
3b:c8:09:37:fc:7e:25:94:72:d6:b5:0b:f7:51:38:98:23:88:
55:29:36:21:ee:ea:75:91:66:f4:bc:11:48:df:44:16:41:6c:
19:3a:e4:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:57:10 2026 by rpki-client