
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
File: Xtho2ocq-NaWpcGp-ngp9lJzynk.mft (raw, json)
Hash identifier: W06zvS6hOJ01tvD+g33zKbhvMeliHMQDRbkYzA+HqOo=
Subject key identifier: B5:7C:95:90:62:FA:BE:6E:57:47:4E:61:3E:AE:8E:57:C5:BA:DA:0D
Authority key identifier: 5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
Certificate issuer: /CN=A9119B43/serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Certificate serial: 0551
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
Manifest number: 0546
Signing time: Thu 23 Jul 2026 00:15:45 +0000
Manifest this update: Thu 23 Jul 2026 00:15:45 +0000
Manifest next update: Thu 30 Jul 2026 00:15:45 +0000
Files and hashes: 1: Xtho2ocq-NaWpcGp-ngp9lJzynk.crl (hash: 50JS41ib5OK00Rk6Aug60vL4hIfgZ9qRtg/w76fcv60=)
2: 6C27C19E4BFA11ECA6797F6DC4F9AE02.roa (hash: d542I90WWDGGQbicaXbMdjG+yHM90agVdnOM5BcvIy0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1361 (0x551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119B43, serialNumber=5ED868DA872AF8D696A5C1A9FA7829F65273CA79
Validity
Not Before: Jul 23 00:15:45 2026 GMT
Not After : Jul 30 00:15:45 2026 GMT
Subject: CN=6a615d31-cbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:2a:20:9f:9e:8f:34:49:90:6d:c5:e5:c5:
29:5a:13:e4:fa:13:a3:02:2e:be:a7:75:a2:b7:01:
f2:ec:80:76:02:6e:1c:f2:af:d2:d5:d2:2c:b0:4c:
b7:ea:44:57:7e:02:4a:db:2d:8d:d9:28:e8:1b:81:
3f:ab:df:76:4f:5e:3b:1f:e3:7c:ba:d1:41:bd:2c:
10:1a:71:63:ff:8c:06:fc:35:db:df:6c:02:f6:a4:
a5:91:35:8f:e0:4b:e1:42:72:0c:0e:62:e3:96:96:
82:28:93:26:03:83:ac:b0:b4:7f:41:c3:9d:07:16:
9c:eb:b7:d6:8e:09:b7:a0:17:c9:f8:b7:85:01:10:
55:1e:4a:62:83:6a:e6:e7:20:c5:a3:47:69:c6:a2:
02:b5:9e:ba:7f:69:6a:7c:d3:9d:6b:eb:4c:a9:b3:
2b:2b:bc:5d:0d:c1:d4:0d:77:49:43:21:54:a4:24:
fd:68:da:b3:bd:75:b2:ee:19:06:16:7f:79:df:8b:
f5:02:0c:25:ca:40:9b:84:ee:14:58:dc:90:97:96:
30:e1:8e:7a:07:23:76:bf:37:70:96:84:ac:4b:7e:
7f:47:b7:5f:58:a9:9d:98:ee:da:2e:0c:7f:3f:eb:
ec:4d:4e:c4:44:87:d0:25:eb:93:ee:32:1b:3d:2d:
94:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:95:90:62:FA:BE:6E:57:47:4E:61:3E:AE:8E:57:C5:BA:DA:0D
X509v3 Authority Key Identifier:
keyid:5E:D8:68:DA:87:2A:F8:D6:96:A5:C1:A9:FA:78:29:F6:52:73:CA:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xtho2ocq-NaWpcGp-ngp9lJzynk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B43/E5B839824B3A11EC992E8150C4F9AE02/Xtho2ocq-NaWpcGp-ngp9lJzynk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:28:45:89:4b:0f:16:d0:a3:dc:73:ba:df:4d:61:d0:c2:
78:3c:5a:45:c7:32:c4:e5:78:c5:2e:6b:65:37:ac:d3:8e:bd:
13:bd:51:9f:54:60:ec:e5:7e:a4:36:15:99:22:4f:20:7a:0e:
d5:a2:3c:97:65:06:19:19:14:d5:75:40:36:18:71:ec:2e:af:
52:8a:e3:ff:bd:c9:5c:cb:4b:33:72:c0:32:80:3b:39:f8:10:
f6:ce:b3:0d:05:80:f5:fa:87:81:f7:12:20:27:c4:00:07:d2:
42:99:3c:15:31:41:ca:98:e3:d3:5f:63:18:d6:62:ff:08:ef:
d7:e3:f0:65:71:46:fc:da:e3:5a:f0:b7:44:18:1e:25:d3:64:
0b:71:d7:61:f1:73:97:da:f0:f8:15:c2:b2:a7:77:14:ba:20:
37:8a:fd:0d:be:d1:46:e9:f9:74:15:b8:3e:59:fc:f2:db:42:
80:3f:e9:c2:ed:d3:f2:80:d2:38:95:4a:94:99:46:d6:fa:56:
cf:e9:41:ae:67:38:40:d4:7e:76:f4:c1:a4:33:62:04:d9:2d:
ba:84:cb:0c:0b:5a:6a:0b:77:90:21:2f:81:08:25:d7:c9:70:
1b:69:92:cd:3a:71:1e:d0:bf:99:d9:b4:f7:94:27:b8:1c:a9:
70:b2:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:20 2026 by rpki-client