
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier: q12pWQLpeW1eCZ4Zi5XQEcNCZzUFVZDLyWEhOeCBQ/Q=
Subject key identifier: FD:6D:47:D1:8B:8D:1C:40:CD:88:D3:C4:A4:78:4B:4C:3E:39:1D:A0
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial: 0556
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number: 054F
Signing time: Wed 14 Oct 2026 23:50:34 +0000
Manifest this update: Wed 14 Oct 2026 23:50:34 +0000
Manifest next update: Wed 21 Oct 2026 23:50:34 +0000
Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: uvl6D1+iqVYIqZWUqZnq1InSW8YrFIthyenmwEDSwmc=)
2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 23:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1366 (0x556)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Validity
Not Before: Oct 14 23:50:34 2026 GMT
Not After : Oct 21 23:50:34 2026 GMT
Subject: CN=6ad0154a-ebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:c8:2b:9c:0b:fc:2d:59:48:8d:bf:26:c7:
0c:46:ca:22:4d:32:fb:72:78:ae:7e:e9:19:60:40:
0a:bd:89:00:1a:54:ac:d4:5e:73:e0:f3:61:5a:c6:
06:a6:6a:0e:20:1c:43:88:bc:5a:5e:df:a1:0f:f8:
d6:b6:a2:85:d0:28:5b:1f:a5:3e:6c:76:03:3a:47:
95:6a:45:5f:c1:ba:81:5c:51:82:e3:58:a9:d3:af:
dd:24:81:c8:31:89:61:43:eb:40:b3:ea:08:41:97:
b3:02:0a:d7:71:ce:69:0f:e9:00:19:dd:51:e4:38:
6f:56:e9:47:ec:1d:c9:ef:20:c2:44:1f:20:ca:b7:
2c:aa:c6:a3:d9:3b:0a:68:d3:e3:22:d9:c5:bb:23:
95:23:89:6c:6b:8e:eb:d7:bc:c4:df:e0:2c:ea:35:
41:dd:aa:2c:0a:81:5d:31:01:c2:e5:50:96:a3:95:
e6:8c:ed:24:6a:90:32:a2:e3:45:93:01:2f:95:74:
41:d9:91:b9:75:a8:dc:a2:59:47:7a:c1:9c:16:fb:
f4:74:5c:01:46:63:e6:1f:32:37:d4:0b:ee:68:95:
84:fe:3a:e1:f5:58:5d:29:f6:fe:6b:50:fc:81:12:
8f:76:d0:5b:4f:10:d0:06:d6:7b:66:93:41:e9:77:
42:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:47:D1:8B:8D:1C:40:CD:88:D3:C4:A4:78:4B:4C:3E:39:1D:A0
X509v3 Authority Key Identifier:
keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:17:06:41:8d:fb:c8:ab:85:77:d5:50:70:78:06:00:76:05:
f3:09:f8:24:72:7c:25:0a:00:8d:ea:42:97:b3:82:2e:1e:09:
82:3d:88:d5:65:8d:28:65:c5:72:3e:be:a9:22:71:59:17:73:
7f:1a:dc:26:1c:35:a4:7f:b1:a8:ec:26:24:d4:ac:7b:fa:5d:
35:34:74:1a:0c:ec:4c:03:72:41:18:4b:31:59:b5:de:44:1b:
46:f6:20:dc:37:23:af:1d:5c:6e:f2:8b:bc:0f:3f:7f:f6:b8:
33:28:8d:31:8a:95:c7:e3:de:96:d9:07:ac:be:f3:17:c1:2f:
93:67:86:6d:dd:eb:2d:d6:13:40:39:a1:f1:2a:ec:53:63:79:
be:b5:51:8b:9b:bf:0f:2d:00:e2:71:b0:54:dc:41:93:22:62:
bf:9f:ae:d4:ab:fb:e7:e0:51:86:e3:6a:f9:fc:0d:6d:57:8e:
c2:db:01:35:24:5f:04:02:be:39:35:06:9b:ef:94:69:7a:d7:
26:fb:7e:72:1d:54:6b:c0:a3:9d:e4:87:84:04:0e:51:18:d9:
52:a7:d7:da:9b:db:ac:5f:c1:67:82:b1:dd:32:ec:9f:de:03:
38:cf:41:ac:a0:7c:8a:0f:b5:40:3c:a3:51:69:6e:56:58:f7:
4b:72:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:36:28 2026 by rpki-client