
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
File: XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft (raw, json)
Hash identifier: HSOjGEg/SFAc0D1AdVy4sX/OmHlc/LRNfwGB3AyZUHE=
Subject key identifier: 33:E5:4E:B5:83:C1:28:4C:83:0E:5D:1F:C1:8B:3D:DF:09:C7:9E:19
Authority key identifier: 5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
Certificate issuer: /CN=A9136E69/serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Certificate serial: 01EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
Manifest number: 01E5
Signing time: Fri 17 Apr 2026 03:07:05 +0000
Manifest this update: Fri 17 Apr 2026 03:07:05 +0000
Manifest next update: Fri 24 Apr 2026 03:07:05 +0000
Files and hashes: 1: XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl (hash: Fy0FTauD+ioEUKDM2eY2QfBtiBcXKxE4Rc0o3kOCQWA=)
2: 7ABDC516537B11EEBBB89E5DC4F9AE02.roa (hash: O9lCjMQypdSGWG3ll22zLdodDNP/53eTRSGfWnDPLFI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 03:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 490 (0x1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136E69, serialNumber=5D1E681F144C85E72675243A8047F809C634C7C1
Validity
Not Before: Apr 17 03:07:05 2026 GMT
Not After : Apr 24 03:07:05 2026 GMT
Subject: CN=69e1a3d9-ef56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8a:62:a4:57:91:1b:82:f8:df:6f:3e:c3:68:
ce:c6:23:c6:b5:8c:fb:af:91:7e:fc:62:06:ba:58:
64:f6:33:67:ff:b2:7d:f1:34:b6:eb:92:58:5f:21:
c8:e4:13:d0:84:38:b8:06:7a:b2:06:ee:4f:fc:60:
55:e0:09:b3:ff:07:47:d9:30:70:17:60:8a:84:cb:
33:bc:e6:ec:39:af:5c:17:b9:84:00:8b:83:3d:69:
9e:93:31:e7:8a:e5:b2:ed:fb:7c:34:4e:53:ce:51:
ce:e6:9e:11:de:6b:b5:63:e5:47:ad:ef:c6:de:7c:
ae:c0:04:9e:02:b0:4e:59:1b:fe:15:46:86:71:aa:
fa:d4:d4:b3:26:49:b2:e3:d3:89:b9:c9:3c:77:eb:
c5:51:02:86:6a:a3:a0:5c:81:d3:90:83:a6:b9:5a:
ae:31:2f:99:ec:7a:a6:5e:05:75:17:34:88:0a:2c:
78:69:c9:f1:72:c1:5c:be:ed:27:e7:0b:e6:2c:11:
b2:bc:7d:71:14:29:92:c8:33:a0:c7:27:a6:2d:8c:
7d:14:30:25:fd:30:dc:d8:7c:09:4f:ed:91:08:bf:
86:4c:12:77:ca:c4:d7:92:0e:3f:12:f2:92:29:14:
5a:45:54:13:e5:28:00:f8:ed:cd:a4:cf:02:0c:d7:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E5:4E:B5:83:C1:28:4C:83:0E:5D:1F:C1:8B:3D:DF:09:C7:9E:19
X509v3 Authority Key Identifier:
keyid:5D:1E:68:1F:14:4C:85:E7:26:75:24:3A:80:47:F8:09:C6:34:C7:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XR5oHxRMhecmdSQ6gEf4CcY0x8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136E69/DCFCB1C0537A11EE90D40B5CC4F9AE02/XR5oHxRMhecmdSQ6gEf4CcY0x8E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:0d:63:4e:1c:e2:13:e3:59:93:32:3b:36:5b:78:b3:1c:9a:
b3:8f:73:05:47:d4:1e:78:02:58:d8:c9:8f:b5:9b:02:1b:74:
5f:b9:5d:3c:0f:67:eb:01:b8:47:21:e4:1b:b1:9d:99:1c:f6:
86:dc:0c:b5:6d:a0:fb:02:82:9e:e1:8c:d6:04:d7:53:2d:ac:
4c:11:d8:73:19:b4:bf:c3:03:7a:03:1e:cd:1a:c9:19:7b:57:
a9:5d:79:2f:e5:99:19:58:54:a5:99:a9:97:49:a5:43:5d:7e:
08:97:94:78:03:6d:17:ce:00:4e:b2:84:c0:84:74:3c:94:61:
d6:a1:0c:89:1b:68:e7:4c:32:36:ce:53:56:e9:e1:2f:a0:2a:
b3:0c:c4:eb:bb:49:00:20:d2:f6:41:97:81:b7:3d:13:24:9a:
6e:b1:56:18:93:b4:b6:7a:84:ea:51:a2:f3:b7:81:31:21:ea:
4f:8f:75:38:3a:d5:e5:62:13:cf:d2:ac:be:ce:3b:f4:31:5a:
b5:13:6b:32:04:6a:09:2d:3c:15:d9:d5:20:ee:e4:b9:68:08:
15:a9:52:e0:6d:76:5f:b3:13:16:a1:81:5c:cf:60:b1:78:c0:
f0:12:d7:7b:3d:b5:9b:c3:03:98:5b:9e:96:79:13:73:6c:b5:
aa:63:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:43 2026 by rpki-client