
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json)
Hash identifier: wz2YoTvXC2Mb/rz7SDvYsLzlNS/zwJfWp3erC2botcs=
Subject key identifier: 4B:C2:72:12:26:A7:C2:DD:BE:C6:BB:D2:40:89:D9:18:58:ED:C3:45
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial: 0519
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
Manifest number: 0512
Signing time: Tue 16 Jun 2026 23:43:16 +0000
Manifest this update: Tue 16 Jun 2026 23:43:16 +0000
Manifest next update: Tue 23 Jun 2026 23:43:16 +0000
Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: 5LrbyvLx9Khkqm/jDaGR97bx+NjKYfcd86UqO704t4Q=)
2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: s+tgLB+pF+5avCp/zLgOBTjy0rHN55LZZRbWJEXSZEo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 22 Jun 2026 01:32:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1305 (0x519)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Validity
Not Before: Jun 16 23:43:16 2026 GMT
Not After : Jun 23 23:43:16 2026 GMT
Subject: CN=6a31df94-5692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1c:6a:eb:f0:d1:30:6d:63:00:fb:8c:cb:59:
ba:c0:af:f3:c2:56:8e:34:f8:94:36:73:ff:63:2d:
b4:b7:11:3d:1d:3a:fe:05:f9:74:2c:53:ce:22:d5:
4e:2a:c4:62:b6:c2:23:c8:b6:10:6b:8d:3a:c9:47:
30:6a:0b:50:c7:29:aa:11:bd:eb:a9:7a:89:27:23:
ea:20:61:a2:4a:ba:83:68:92:44:09:58:96:c0:bb:
a3:bd:dd:c0:49:6f:6b:ec:dc:b9:06:69:ee:ed:4e:
23:e3:05:3a:42:69:bf:1b:ba:d4:de:88:11:07:44:
de:da:c2:2f:56:89:d3:c3:86:84:0b:23:de:fd:04:
41:7d:d7:ba:46:20:df:a9:f1:09:8e:35:e8:40:7e:
8c:20:fb:24:01:a0:c4:02:cb:18:06:57:b7:02:08:
0b:8f:67:b3:a5:d0:6d:6b:0b:62:2b:c8:45:97:3e:
8f:65:c7:67:55:92:84:79:c6:75:59:0d:ff:31:56:
24:74:bf:02:62:70:6e:f3:c3:25:15:f6:32:aa:35:
6a:4c:02:0e:7b:1c:e3:27:79:57:85:03:86:45:2d:
a6:41:12:35:f8:05:ed:88:c6:e0:20:cb:b6:ba:69:
5f:6c:7d:34:cb:fb:c4:4f:9e:d2:c8:ab:08:36:36:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C2:72:12:26:A7:C2:DD:BE:C6:BB:D2:40:89:D9:18:58:ED:C3:45
X509v3 Authority Key Identifier:
keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:59:81:ec:37:e2:e0:66:43:40:d2:70:52:f3:ec:40:92:6b:
64:4f:5a:8c:2b:a8:74:02:ac:c4:5a:cd:f8:5b:dd:45:58:84:
2d:74:42:a7:a6:d8:97:15:38:fd:10:5f:f0:e4:42:ff:a7:e2:
ed:fb:ab:91:e0:9d:d7:bd:51:24:62:ef:f7:a3:b3:5a:02:ff:
b6:d2:05:a7:1a:3b:0a:c3:53:cc:c2:1d:dd:de:3b:70:88:1c:
4d:5b:29:a5:e8:43:de:bf:0b:b4:9e:78:bb:30:3a:5f:c5:11:
16:e9:9e:4b:61:e5:6b:69:a4:d5:3f:5e:d7:a2:01:bd:30:cf:
b4:be:a3:cd:08:e4:91:8b:ae:24:5d:46:b4:03:a0:24:7d:7b:
14:17:dd:df:22:15:cd:ff:84:a0:b5:43:39:ca:3c:7f:9a:85:
8b:30:f2:56:74:1a:4a:1c:7e:e6:8a:c5:4f:01:f0:f1:b9:ef:
33:19:65:a3:ab:a3:5a:47:80:2b:55:d8:6d:4c:68:0f:4b:b1:
c2:60:b7:ed:c3:c0:57:42:24:a1:27:4f:dc:d1:32:65:d4:44:
69:a5:21:ef:80:84:40:c6:6e:bd:32:49:f8:5a:23:77:13:e3:
e9:c1:0a:e4:ec:68:d1:db:48:be:8e:64:3b:41:58:81:07:94:
3b:6c:06:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 14:37:55 2026 by rpki-client