
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier: z0MmL53GhPOwyeIwiT5F7fWo7E0Eaww5no3aSF5wGxM=
Subject key identifier: 21:6F:9F:F2:1E:F9:A9:D8:5F:CF:F4:45:EE:CA:04:23:82:D9:45:A8
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial: 04F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number: 04EB
Signing time: Sat 04 Apr 2026 23:31:29 +0000
Manifest this update: Sat 04 Apr 2026 23:31:28 +0000
Manifest next update: Sat 11 Apr 2026 23:31:28 +0000
Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: 4Dodwr25FznhzeKIl1BPfRuHbLh/SImyHEGW+9wVBDQ=)
2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: XVLR1vOvVfT3/NkokcPvciEywIK5zGMoHD1J6p3MJQU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 11 Apr 2026 23:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1265 (0x4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Validity
Not Before: Apr 4 23:31:28 2026 GMT
Not After : Apr 11 23:31:28 2026 GMT
Subject: CN=69d19f51-be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:21:7f:93:d1:5b:ac:58:93:28:42:66:42:ac:
08:75:ea:80:7c:76:76:1f:6b:60:67:14:62:b1:ac:
58:5f:d5:ad:fe:9c:a5:9e:26:34:d4:19:32:7b:29:
16:93:a3:99:38:20:e7:9d:d0:92:40:77:a7:04:22:
33:b9:2f:ff:03:8e:e0:f3:4d:c0:3d:13:94:25:8f:
8f:bb:94:8b:90:f8:97:6f:9d:27:ab:75:1b:0a:c7:
91:c8:b1:c7:17:0d:84:f3:76:d3:ad:78:58:bc:99:
16:09:f2:4b:fc:ae:42:cd:1d:58:68:55:60:07:bb:
13:85:fc:5c:3c:ea:f8:40:d6:69:0d:49:3e:f1:32:
d2:ba:65:ac:7e:9e:da:2c:eb:fc:8e:28:45:fe:c4:
01:93:d4:94:6f:8e:18:26:5b:af:7b:e4:45:6b:e7:
c1:b4:20:0f:3f:fe:f3:65:09:f0:58:be:a4:db:5b:
e1:14:d9:f0:f7:9f:e4:d6:22:d7:aa:6c:7f:b6:16:
cc:2b:74:db:a4:15:1e:e5:94:af:73:86:46:2c:4f:
20:5b:97:ae:08:89:32:f3:83:70:34:37:6b:f5:0f:
fd:d0:26:05:3d:79:03:a5:f4:39:2f:d4:ac:53:e4:
4f:eb:68:a4:4a:00:45:8b:dc:22:ce:09:3a:01:41:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6F:9F:F2:1E:F9:A9:D8:5F:CF:F4:45:EE:CA:04:23:82:D9:45:A8
X509v3 Authority Key Identifier:
keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6f:bc:ed:92:c1:ee:15:cb:d5:b0:e7:d5:0c:f0:a6:01:7d:
b5:cb:13:d8:41:fb:52:d8:6b:2d:ea:0c:69:04:c5:5b:17:3d:
c6:6b:23:c9:a6:ec:ba:12:96:bc:3c:3c:43:55:d1:88:1a:a8:
91:50:6d:88:df:2d:9f:c5:6c:d4:14:c4:9c:30:37:65:f0:b7:
a6:f9:b0:db:c7:3c:9b:23:97:61:2d:c6:4f:85:8e:2d:63:9b:
22:1e:02:7a:91:68:7f:25:de:25:61:85:7a:f5:ee:0f:22:80:
da:e3:8e:e9:eb:1e:52:1e:43:98:3f:b2:5a:35:9d:e2:5c:75:
02:65:99:5c:7a:a3:e9:38:58:5d:ed:37:cb:4a:62:ea:28:38:
ce:b7:87:54:e0:95:6f:8e:54:e3:4f:bf:85:e9:58:6a:e0:51:
a5:34:89:80:14:ad:d2:77:85:b0:c9:ee:c6:d5:3a:6a:3f:bc:
65:f4:e0:fc:6e:bb:3a:68:40:94:00:a5:97:6d:d0:f1:63:1f:
8a:0e:cc:f6:68:30:ca:06:d6:a2:51:1a:41:a2:5a:d1:0e:a6:
b7:df:53:27:70:4c:41:c4:f0:7c:5a:46:49:2e:b1:bb:f6:cc:
63:ce:c4:c5:fb:3a:81:fd:14:51:93:d5:30:d8:09:88:24:45:
3b:03:0f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:31:05 2026 by rpki-client