
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
File: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json)
Hash identifier: sfQnxhf7x+8Nerac2WNKwxFjzu+hDKIuzTtnWkMYF2c=
Subject key identifier: 08:5B:FF:E4:33:FE:A7:21:5C:70:A6:52:77:60:1C:1E:D9:D0:BA:83
Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Certificate issuer: /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Certificate serial: E1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
Manifest number: E1
Signing time: Wed 25 Mar 2026 05:45:41 +0000
Manifest this update: Wed 25 Mar 2026 05:45:41 +0000
Manifest next update: Wed 01 Apr 2026 05:45:41 +0000
Files and hashes: 1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: fKvdYkOyqGbZUYfRqCW9CqG/ENYmdBao2+HtLk5uJWM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 05:45:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 225 (0xe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Validity
Not Before: Mar 25 05:45:41 2026 GMT
Not After : Apr 1 05:45:41 2026 GMT
Subject: CN=69c37685-5903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:3f:ab:ef:4a:b4:ca:23:b5:21:40:04:7a:
7b:2f:55:e3:72:ae:c5:9a:6b:f2:f7:f4:43:d0:bf:
54:f7:6d:9c:1f:a2:47:32:ba:47:46:03:27:d3:99:
20:c9:2e:7e:17:98:49:a4:5a:d7:e7:09:8e:c0:57:
b7:30:75:94:d0:d7:fa:2e:b0:fd:15:77:c2:6a:27:
35:ba:78:54:84:39:f3:f5:0e:da:cc:85:12:91:ad:
43:fc:66:c3:c0:15:6f:e7:57:56:6c:18:cb:5b:f2:
8f:15:48:f2:d1:1e:dc:a9:65:f1:28:c8:09:8b:3d:
ea:cf:f2:31:35:2d:00:62:ff:dc:59:6e:b1:78:af:
19:e7:f5:52:bf:94:14:93:24:a2:6b:9b:5d:e8:6c:
4f:51:bf:49:ee:49:b4:e9:88:eb:be:8f:24:a5:da:
c6:4c:21:d0:18:47:91:7d:71:ea:4c:c8:0a:95:e2:
2d:9e:cd:ea:1b:50:b0:63:05:3c:d6:19:62:e7:15:
8f:e0:55:45:1e:80:e0:ba:63:cf:99:8a:81:52:d5:
51:88:ae:44:7b:54:e6:97:03:f2:3b:4d:ae:b7:e8:
27:95:45:3c:2e:92:7f:6f:e7:41:42:ff:93:8b:7a:
3a:8f:7d:44:4f:1f:ef:16:60:ce:fd:7b:f4:77:c8:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:FF:E4:33:FE:A7:21:5C:70:A6:52:77:60:1C:1E:D9:D0:BA:83
X509v3 Authority Key Identifier:
keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:da:a1:c0:f0:11:18:ad:42:ed:c1:bd:11:87:0e:e3:ed:91:
c0:3a:4f:e8:6b:40:01:e5:a6:c1:34:cf:59:13:e0:7e:77:1b:
83:31:80:a4:97:e9:00:03:28:66:ef:15:96:0d:93:6c:d3:c0:
c4:09:20:de:cc:c2:b4:c8:00:50:e0:f0:e3:8c:74:81:04:8a:
ae:3c:bc:b5:06:cc:20:e2:9f:8b:9b:12:4f:71:aa:5b:be:eb:
0a:9a:7a:b7:b8:11:b7:f3:39:68:da:00:d3:30:71:92:50:21:
2b:c5:33:6f:34:19:66:5a:76:4b:bd:44:c1:9c:ae:25:5a:63:
f8:28:d4:15:2f:b7:94:c2:45:90:4d:3c:ac:71:bb:4a:c4:4b:
ad:9c:49:a9:d2:42:f2:50:22:1a:89:9c:a5:a6:6b:8c:0a:59:
ae:65:58:b7:ed:cd:87:41:05:6e:cb:65:46:9c:b6:cc:c6:b6:
5e:5a:3a:74:4b:8f:80:c5:d9:63:5b:a7:5e:a8:17:bc:ea:99:
96:1f:c7:eb:51:5c:d9:3a:b4:af:58:d7:6c:ba:bf:a1:9f:63:
f7:d4:f2:c2:7e:93:c1:90:e6:b1:ff:23:35:b7:fe:6e:45:ce:
d4:42:2d:f1:b1:ef:6a:c6:49:66:1f:6c:42:1e:d8:4b:45:15:
e1:68:5a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:44:50 2026 by rpki-client