
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
File: XTwWiWSSv8hwyKALZou_6VlF-No.mft (raw, json)
Hash identifier: 1BBG5lXMyLUiGR4bNDP/y/E7fFU4zMeEh+964sd0mJQ=
Subject key identifier: 4A:D2:4B:D3:1E:24:16:50:95:D9:D4:F0:77:93:78:13:DD:1E:1D:8C
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Certificate issuer: /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial: 01F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
Manifest number: 01E0
Signing time: Fri 17 Apr 2026 03:16:58 +0000
Manifest this update: Fri 17 Apr 2026 03:16:58 +0000
Manifest next update: Fri 24 Apr 2026 03:16:58 +0000
Files and hashes: 1: XTwWiWSSv8hwyKALZou_6VlF-No.crl (hash: X2VlsCf+qDXI+Bdm/sYBgX3hSF3sc7IFOrNSEVHAv6U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:16:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136C7C, serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Validity
Not Before: Apr 17 03:16:58 2026 GMT
Not After : Apr 24 03:16:58 2026 GMT
Subject: CN=69e1a62a-9c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:78:8e:3c:99:f1:d1:39:9b:9d:77:4c:e9:
ba:2d:99:8d:4b:fe:e6:38:e7:8a:b6:59:72:cd:7f:
3d:64:d5:07:a4:2f:89:78:7a:8f:a6:14:e9:74:80:
7b:05:17:3e:1a:d5:a3:e2:45:51:dc:26:6e:e8:fb:
3e:81:d1:a9:32:6f:10:2b:17:52:d4:22:a8:68:0c:
d5:c5:4f:e5:d9:08:ca:72:df:b1:e0:50:b2:7a:6c:
9a:e5:6e:9d:f5:21:45:2e:6b:25:94:e3:15:c2:06:
09:06:b6:52:3f:5a:dc:c7:22:87:39:2c:2f:3b:6e:
1a:8a:f9:55:43:d8:93:c8:cb:4c:be:98:1a:f4:6d:
06:b3:9f:12:0f:fd:fb:a6:b5:e2:4a:43:91:10:98:
c9:78:63:61:ce:7c:c6:72:02:2d:8b:0c:c9:c5:e4:
8d:cd:f6:24:e5:49:03:2a:7d:f3:cf:df:c5:79:c7:
71:47:d4:79:ec:cd:32:7e:86:bd:2f:b1:35:bc:f7:
3d:e8:13:ac:31:23:fb:20:dd:8c:14:5a:9b:20:87:
2d:40:73:27:2a:ae:b6:de:79:a4:20:9f:d8:c8:7f:
bb:d3:94:0c:86:03:42:b3:94:97:0c:72:06:ac:f0:
2c:3a:d0:0c:64:4f:c8:28:c4:95:f8:51:08:af:eb:
84:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D2:4B:D3:1E:24:16:50:95:D9:D4:F0:77:93:78:13:DD:1E:1D:8C
X509v3 Authority Key Identifier:
keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8d:9a:af:36:d5:96:a1:6c:23:8f:52:7d:32:7b:4a:4e:31:
b7:f2:96:8f:58:56:00:62:42:58:27:8d:98:6a:3f:6c:14:07:
23:bc:90:1d:4a:a4:f2:d2:7b:93:36:e6:f8:dd:c6:19:2b:86:
d8:6c:b7:7d:c7:7c:45:04:4a:9d:35:58:be:16:4a:2d:78:de:
b0:4a:0c:4a:4d:2b:2e:e9:91:1d:f5:9e:3c:b1:49:46:2e:01:
55:15:44:f3:50:10:00:49:68:10:f3:e9:2c:fe:39:13:ec:b3:
31:0c:82:0e:1f:3c:b7:b8:2f:4f:62:08:34:ce:7b:2f:51:54:
97:22:cb:dd:5c:44:16:b3:11:e7:a6:ec:7c:01:f1:70:32:11:
bf:2d:dc:3d:43:09:bc:67:16:7b:a8:46:72:41:80:f0:7f:10:
87:4e:b3:da:8c:e1:80:4f:8c:bb:cc:ca:76:8a:7b:5a:ca:34:
2c:3a:58:ae:5b:43:2f:be:ee:1b:16:b7:04:43:21:dc:e4:7e:
41:f1:01:f6:28:d3:0d:bf:42:e1:ed:a8:85:5f:0a:8f:a0:5b:
bd:b2:55:a1:ea:67:1a:a3:d1:d1:f0:ca:04:f7:3c:47:f4:7d:
d7:08:52:5e:d1:89:62:48:8c:ed:a4:12:69:1e:92:53:85:9d:
1b:08:da:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:03 2026 by rpki-client