
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier: Uot4si6E4k0dadDkQNVrIX9x1AhSWwJoQYz8j/yb1t8=
Subject key identifier: D5:A0:CC:21:75:DF:AE:3E:6D:CA:12:F3:EC:C5:97:E9:31:CF:A5:0C
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial: 04FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number: 04F3
Signing time: Thu 16 Apr 2026 23:37:58 +0000
Manifest this update: Thu 16 Apr 2026 23:37:57 +0000
Manifest next update: Thu 23 Apr 2026 23:37:57 +0000
Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: 3zfg6MRUbWL5mZZUlEyYY2gx19C37qTM1UkL3ODiz2s=)
2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 23:37:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Validity
Not Before: Apr 16 23:37:57 2026 GMT
Not After : Apr 23 23:37:57 2026 GMT
Subject: CN=69e172d6-6559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:bd:94:e6:2c:05:40:a4:4e:c7:36:97:75:
b6:1d:30:ea:d9:a2:37:a3:3d:f0:3a:48:cc:4f:bc:
da:bf:f0:7c:ef:35:72:02:6d:0c:cf:b3:ed:ba:23:
cb:0e:2b:dd:0c:aa:74:92:56:21:1c:1e:03:af:2d:
ac:76:a8:13:96:95:07:95:1e:18:d1:8d:f3:18:c2:
14:36:97:02:46:3e:03:28:f1:9c:db:17:65:79:dc:
89:69:a8:cd:cc:76:24:0a:a7:fb:89:4a:31:3a:b9:
76:b9:b3:4c:36:91:9d:9d:b2:91:ce:58:5a:67:3a:
1c:af:da:45:e7:ff:3c:cd:92:98:79:83:58:9a:9c:
21:3c:8a:42:17:a3:d6:fe:10:a8:96:04:50:b4:2c:
a4:90:48:35:f2:74:0c:34:fc:0a:89:b2:d4:8f:b9:
02:93:c9:4a:4d:3b:5a:41:e5:14:55:66:e1:74:12:
ef:0e:2a:a4:0e:23:77:b6:00:f7:6a:31:c6:e4:66:
1c:de:b1:27:f4:1b:42:a8:d9:5e:05:df:c6:3a:ab:
ff:12:e3:fe:77:40:2a:a3:9b:c0:77:49:98:e5:d4:
5f:1d:45:b5:1b:96:a1:77:6b:d5:0d:c6:e2:67:c8:
96:c7:2b:53:64:fe:6e:fe:8b:9f:d5:e0:fc:d8:ea:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A0:CC:21:75:DF:AE:3E:6D:CA:12:F3:EC:C5:97:E9:31:CF:A5:0C
X509v3 Authority Key Identifier:
keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e8:3c:dd:68:91:0e:78:d1:40:07:a6:b6:84:09:a4:b9:39:9e:
59:f8:9c:a2:b2:c3:cc:e5:e3:56:c1:b7:01:ca:a2:b5:76:fb:
fb:cb:b7:e0:ca:50:ed:58:d2:84:c1:3c:04:cc:d3:16:c7:2a:
69:69:0c:c3:47:f5:c7:50:80:8c:9c:ea:41:7e:4e:2f:3e:cb:
6c:84:76:23:4a:9c:79:b1:19:9c:e1:55:82:e4:e0:06:83:5f:
c2:58:a3:ed:4b:7e:ff:87:2b:ee:3d:0c:0a:ab:aa:31:3f:1a:
28:cb:92:bf:0a:6e:8a:f3:8c:8a:63:5a:3f:e0:4b:11:5f:23:
63:e4:93:dc:ad:37:92:c8:42:4c:02:dc:a9:ea:22:d9:78:ad:
4a:d9:66:ca:80:b0:9e:87:1e:50:15:53:62:fc:1f:90:56:5f:
83:bb:ff:de:12:54:2e:6f:b9:1c:96:37:c3:c2:7a:a9:b8:e3:
5d:9f:99:d9:e6:bd:5b:85:6c:ac:48:e4:e7:5d:a9:26:4a:32:
e4:92:66:8f:b7:3d:05:9d:21:63:85:79:24:19:9d:d8:76:bc:
c5:01:04:b6:e3:26:e8:0d:40:49:b1:96:fb:79:d7:68:9c:e1:
82:16:da:95:5b:51:c7:fb:42:d9:62:fe:ee:8c:f6:bc:e7:37:
7c:f5:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:29 2026 by rpki-client