
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier: PHwv9fvjH8rXncuTxPf+mjj8KJHWQZfbdVL1tDt7kM4=
Subject key identifier: CD:79:C7:FF:C4:9B:13:7D:7C:97:29:16:C7:62:56:29:01:8F:33:EC
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial: 0551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number: 054A
Signing time: Sun 04 Oct 2026 23:28:15 +0000
Manifest this update: Sun 04 Oct 2026 23:28:15 +0000
Manifest next update: Sun 11 Oct 2026 23:28:15 +0000
Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: AqoiuQ1ZWD9XxgrJ6uVP77xHV51rMDpE+8O1PE8Qukk=)
2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 23:28:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Validity
Not Before: Oct 4 23:28:15 2026 GMT
Not After : Oct 11 23:28:15 2026 GMT
Subject: CN=6ac2e10f-5963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:2d:56:97:25:ef:c3:e5:0e:9d:35:dd:81:
e0:4d:1e:f8:9d:7a:64:51:a7:c9:29:6a:f3:8c:b8:
cb:16:a1:13:d9:ce:57:fb:2c:fe:31:33:71:a6:e2:
23:7d:b0:20:c7:83:10:0c:c5:cb:b9:e1:1e:73:68:
e5:64:22:d8:1d:e6:06:cb:8b:87:6b:58:06:1d:46:
8c:ec:1b:c1:3e:d3:b4:35:03:36:eb:f8:79:2e:31:
99:ad:31:a1:cf:c4:84:f8:7b:cf:ee:62:11:1d:9d:
56:c6:10:2a:98:21:ff:b5:69:5e:ad:b4:48:ca:c8:
49:e1:15:65:e0:6f:97:d3:10:c8:53:84:34:e3:8b:
dd:d8:07:01:5e:5a:f3:59:6e:fd:51:36:cf:e9:cd:
16:8a:5e:0c:2a:99:9d:3c:9c:8e:e2:bf:8a:1d:b5:
16:b2:c1:38:c2:80:46:b6:0c:a2:62:75:9d:66:e3:
b3:ef:74:cc:1f:9c:89:b7:73:2f:61:53:3b:1e:3e:
8a:3e:4c:4f:dd:d4:73:2d:6d:81:59:39:fd:32:51:
55:7d:b8:71:72:bf:d5:b3:60:9f:b6:1d:fb:b0:01:
50:3c:2e:77:e4:b9:b5:6e:49:69:6a:26:20:b7:5c:
74:be:b3:17:fb:30:44:83:dc:14:df:b0:4d:1e:17:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:79:C7:FF:C4:9B:13:7D:7C:97:29:16:C7:62:56:29:01:8F:33:EC
X509v3 Authority Key Identifier:
keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
47:9b:91:c5:00:1d:52:3d:fa:b2:98:6f:f1:8e:65:a2:b8:d8:
7e:d8:53:62:6f:b4:1e:a3:b3:67:10:59:1b:b2:21:fb:70:ff:
d4:b3:4d:0c:a6:6b:94:f0:3c:32:d9:f3:c8:69:fb:ba:33:b1:
24:98:11:54:34:c1:30:0f:b9:7b:21:0d:7f:79:f1:ae:bd:08:
e2:b3:b6:8d:61:85:31:97:1d:cc:08:83:8f:ad:31:cb:ef:46:
54:aa:f5:ac:21:e1:bc:85:d3:69:25:4e:23:5d:58:11:bd:83:
13:b2:57:89:cf:a7:15:fc:7a:ff:82:5c:4f:61:ab:d2:b1:42:
10:51:de:f0:d7:2e:b7:70:5a:7c:5e:38:e9:f1:df:a8:c3:25:
68:2a:78:97:5e:61:6b:87:b7:8f:02:7a:11:0b:6c:d4:32:41:
7a:ff:7e:46:1d:91:29:fc:fa:39:51:6d:36:89:49:8e:83:6f:
14:13:2a:16:7e:0f:3b:82:ad:7f:61:fb:c1:a0:d9:97:48:fd:
aa:52:92:f3:02:bd:53:c4:b2:98:f3:ab:e7:23:6a:e2:41:63:
47:19:1d:1c:e1:ce:d3:aa:ec:3a:2d:65:0c:df:c6:b3:a3:7c:
0d:fe:97:e2:55:dc:d5:a2:60:0e:68:b0:3b:39:20:25:87:26:
ba:80:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:33:19 2026 by rpki-client